
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/E286BAA24B5611F0A987864DC4F9AE02.roa
File: E286BAA24B5611F0A987864DC4F9AE02.roa (raw, json)
Hash identifier: mERSRsM56zZVM538VlKpNkeRtK+AXD86sag0pr0Q6X4=
Subject key identifier: 7C:B7:49:3D:85:AA:D1:28:BF:5B:CA:BD:08:D6:C0:0E:F9:56:1D:CA
Certificate issuer: /CN=A911069A/serialNumber=5B82E88C014132823D020D5C30A6BFB6D5B50221
Certificate serial: 022D
Authority key identifier: 5B:82:E8:8C:01:41:32:82:3D:02:0D:5C:30:A6:BF:B6:D5:B5:02:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/E286BAA24B5611F0A987864DC4F9AE02.roa
Signing time: Tue 01 Sep 2026 03:52:11 +0000
ROA not before: Tue 01 Sep 2026 03:52:11 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 38624
IP address blocks: 117.120.32.0/23 maxlen: 24
117.120.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl
rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 02:55:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 557 (0x22d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911069A, serialNumber=5B82E88C014132823D020D5C30A6BFB6D5B50221
Validity
Not Before: Sep 1 03:52:11 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a964beb-3840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0d:83:30:bf:09:c3:30:80:ae:0c:cf:a1:ee:
c7:04:be:94:5a:c8:a3:71:02:50:b0:4b:c4:64:12:
6a:41:73:da:b0:fc:36:8a:b1:ef:cf:7b:62:50:a0:
d6:37:7d:87:85:ac:74:42:73:a5:0f:0b:b6:48:d7:
0a:ae:6d:9c:c3:d2:ec:49:4e:cd:82:c3:3b:bc:10:
1c:7d:71:e5:72:8c:5c:b8:78:87:9c:b2:c4:d8:08:
09:9a:e9:af:b2:81:ca:84:ee:89:08:2a:e0:1e:9f:
41:cb:dd:ad:d2:24:44:b1:36:84:1e:82:12:4e:6d:
62:b7:59:a7:d5:31:89:b7:90:5a:8d:96:2e:27:e1:
31:c2:1b:fb:93:80:ca:ff:aa:a7:15:02:08:43:66:
76:da:e0:a1:9b:7a:19:70:48:59:b4:36:51:03:3f:
b5:07:26:eb:8c:5c:80:fc:9e:7e:d9:fb:4e:a5:88:
35:b0:f7:ef:af:02:fb:84:34:1e:72:64:e1:ff:23:
45:10:38:06:14:a9:a8:50:f5:ad:5a:fc:65:ed:9b:
da:7f:f1:b0:ba:0c:a5:33:b7:7a:68:62:f8:72:1f:
09:cc:71:1d:7a:87:ce:25:a6:fc:94:8e:9e:e3:7f:
e8:a6:8d:58:48:cf:81:44:9a:e3:0f:08:83:d2:76:
46:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B7:49:3D:85:AA:D1:28:BF:5B:CA:BD:08:D6:C0:0E:F9:56:1D:CA
X509v3 Authority Key Identifier:
keyid:5B:82:E8:8C:01:41:32:82:3D:02:0D:5C:30:A6:BF:B6:D5:B5:02:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/E286BAA24B5611F0A987864DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
117.120.32.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:66:96:22:b3:0d:05:df:e8:6e:51:be:9b:d8:b9:4a:07:f6:
02:bc:2f:54:7c:22:9c:49:b0:15:48:0b:63:0b:3f:87:21:19:
7f:6b:ad:05:9a:77:54:17:a1:5d:ae:5a:34:26:05:1e:bb:76:
21:a8:07:02:27:46:40:3a:b6:ba:b3:33:f2:6a:e5:9d:ff:ab:
51:6b:3d:d2:0a:0a:9e:7c:12:50:f0:cf:d8:9d:dd:b3:e1:dc:
d9:4c:2b:8d:bf:77:e8:4f:38:fc:1c:53:05:bb:50:fd:ce:19:
63:07:f8:c4:e3:c6:5a:91:d2:9e:b5:3b:84:0f:9a:dc:8a:a3:
3c:c4:d4:38:66:bf:9c:af:9e:4a:1f:3a:90:94:d3:ff:0b:14:
bf:35:15:71:8e:d4:5e:fc:34:17:7a:dc:ae:04:b3:39:c5:9d:
cc:e2:4f:5e:9b:f0:04:6a:54:a4:4b:75:6c:01:1f:e0:42:fd:
5d:09:f7:c7:44:3b:48:a2:30:05:54:03:92:14:81:22:a3:0d:
ad:ac:54:26:3b:96:3f:24:8d:55:f4:bc:24:ff:4f:33:29:bf:
66:4c:a3:03:55:cb:92:9e:ce:9c:97:ba:12:cf:fc:08:86:c9:
02:fd:9f:0f:b3:7c:f3:85:92:c8:37:2b:47:e7:cc:e8:bc:0d:
9c:ec:c7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:07:15 2026 by rpki-client