
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/17ECE94A90EE11F18648EF8E4A11F970.roa
File: 17ECE94A90EE11F18648EF8E4A11F970.roa (raw, json)
Hash identifier: oJfoZuTJOnL94a9OsvOMa2PCtBJV8NSsIokiHbMr0uE=
Subject key identifier: B3:24:67:10:D1:9D:BC:D2:98:B3:54:22:B9:7B:C0:34:F4:D8:C7:3F
Certificate issuer: /CN=A9111C7F/serialNumber=E6E7C90C76362D409CD1CA6C44BAC83524D5F02E
Certificate serial: 04
Authority key identifier: E6:E7:C9:0C:76:36:2D:40:9C:D1:CA:6C:44:BA:C8:35:24:D5:F0:2E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5ufJDHY2LUCc0cpsRLrINSTV8C4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/17ECE94A90EE11F18648EF8E4A11F970.roa
Signing time: Thu 06 Aug 2026 13:17:37 +0000
ROA not before: Thu 06 Aug 2026 13:17:37 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 151357
IP address blocks: 160.236.98.0/24 maxlen: 24
160.236.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/5ufJDHY2LUCc0cpsRLrINSTV8C4.crl
rsync://rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/5ufJDHY2LUCc0cpsRLrINSTV8C4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5ufJDHY2LUCc0cpsRLrINSTV8C4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 09:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111C7F, serialNumber=E6E7C90C76362D409CD1CA6C44BAC83524D5F02E
Validity
Not Before: Aug 6 13:17:37 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a748971-0715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2f:dd:96:03:c2:35:68:a9:36:c8:71:4e:d1:
44:eb:87:05:5f:e8:d5:b1:90:83:d3:a1:24:2c:d6:
51:69:38:64:48:e0:9a:a6:5e:55:7d:b4:22:f8:76:
f7:9f:d4:7e:c5:bf:2a:a4:b9:58:5b:b5:15:46:81:
be:e6:82:ec:b5:9a:ae:59:0f:03:9f:f1:7d:93:4c:
86:9e:04:aa:f5:c6:76:5a:00:21:a5:ff:74:88:4c:
f1:ce:64:77:44:f6:f8:c0:98:eb:0c:10:f5:22:3c:
47:b1:4d:c3:7f:5d:ce:8a:5b:c4:9d:d7:b8:9e:bc:
9f:a7:87:7f:58:89:75:35:e6:73:0b:f2:6c:11:e7:
75:4c:42:7f:e3:55:83:3f:c0:4d:40:29:a2:51:1b:
8e:31:4a:4f:2d:d6:6a:fc:d5:9a:78:ec:11:01:a1:
33:4c:db:23:54:47:ec:08:77:43:67:9c:2c:41:09:
87:45:13:5a:f0:ff:b3:d4:33:32:ed:94:7d:52:82:
66:e2:a9:9d:d8:c0:ea:f2:a2:d9:f9:81:d8:76:ba:
ba:d6:85:43:b3:ae:a3:a5:00:39:d3:b0:69:b2:d4:
30:3e:a3:d6:cd:71:4e:08:4b:51:f4:b0:de:47:67:
43:87:6a:60:be:78:6c:93:48:8c:64:9c:f2:c3:b0:
d1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:24:67:10:D1:9D:BC:D2:98:B3:54:22:B9:7B:C0:34:F4:D8:C7:3F
X509v3 Authority Key Identifier:
keyid:E6:E7:C9:0C:76:36:2D:40:9C:D1:CA:6C:44:BA:C8:35:24:D5:F0:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/5ufJDHY2LUCc0cpsRLrINSTV8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5ufJDHY2LUCc0cpsRLrINSTV8C4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/17ECE94A90EE11F18648EF8E4A11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
160.236.98.0/23
Signature Algorithm: sha256WithRSAEncryption
22:1c:cd:c4:8d:dd:47:65:2c:a5:76:64:71:f1:18:d4:92:3a:
b6:dc:c5:92:5d:a3:3c:ee:b8:81:ad:e5:60:20:cf:cb:d0:79:
68:69:3f:8c:7b:96:a1:e0:0b:b6:5b:ce:6a:f2:64:91:3b:81:
17:99:a6:ec:30:54:3b:a1:44:6f:90:b2:f1:8d:f5:9c:4b:af:
59:e5:20:df:e1:b7:8e:e8:eb:81:b3:cd:18:67:59:3a:15:d8:
fb:47:47:2b:43:9e:cf:41:08:81:dc:29:d4:31:ad:f0:31:96:
39:b3:ce:51:07:ab:f9:18:45:b4:40:a9:18:54:ad:3a:91:25:
10:9e:f2:c4:de:b3:49:cb:ce:5d:16:03:e8:f6:15:44:ba:c4:
38:2c:a7:49:ec:38:27:f0:f9:76:9e:e0:35:0f:5f:77:87:45:
af:08:cd:9c:2c:b1:26:3e:a2:26:ea:7e:49:bf:b3:18:83:59:
a1:11:41:dc:2a:d1:b1:99:52:43:0a:11:4c:17:00:1d:f3:db:
e2:6b:43:9a:0e:33:e9:c0:b3:08:29:e4:c1:a0:1f:1e:e6:5b:
1f:40:7d:79:8a:b5:f3:e6:29:25:4e:b9:53:a5:1c:93:39:c5:
20:64:a2:2f:87:98:cd:ca:06:84:4a:eb:48:4a:69:25:9e:b3:
c0:73:ee:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 26 20:26:00 2026 by rpki-client