
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/44D3107874E311F1BDAFA91462A30FBC.roa
File: 44D3107874E311F1BDAFA91462A30FBC.roa (raw, json)
Hash identifier: z613TlXOFDZX8VeacWwPxz5X8yxz+f2S641kEG8YGW8=
Subject key identifier: 37:88:22:AB:16:87:86:CB:C2:AF:49:66:EA:21:B6:B2:DE:03:9B:18
Certificate issuer: /CN=A9117E4D/serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F
Certificate serial: 359A
Authority key identifier: AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/44D3107874E311F1BDAFA91462A30FBC.roa
Signing time: Wed 01 Jul 2026 00:24:49 +0000
ROA not before: Wed 01 Jul 2026 00:24:49 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 7545
IP address blocks: 60.241.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl
rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13722 (0x359a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117E4D, serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F
Validity
Not Before: Jul 1 00:24:49 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a445e51-331d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0b:eb:ae:cf:b5:2a:3f:b3:af:15:f8:3c:22:
15:2a:fa:34:ca:ea:5c:23:f0:0e:10:07:a8:3d:7f:
a2:3c:1c:18:c8:29:70:fb:5f:68:00:4d:53:f5:4c:
64:ea:81:7d:de:37:2e:96:03:86:50:12:b1:a0:b1:
eb:7d:f2:44:98:33:2f:66:05:5d:37:47:11:f1:6b:
49:13:f8:41:32:39:c8:ce:49:60:61:95:0d:70:12:
2c:16:b8:91:89:60:e6:e9:be:03:67:6e:30:f7:53:
33:61:f0:54:b8:ba:e5:0f:16:af:ff:7d:5c:4c:17:
8a:44:4d:43:15:4f:a6:8a:b5:7b:91:21:e0:48:d1:
68:7c:bd:32:3b:8e:11:15:0f:3c:5e:92:5f:a9:91:
70:42:65:f0:46:7e:11:62:ad:9f:ee:a8:a3:65:f3:
1f:86:7f:29:ee:fa:4a:86:3b:8f:f8:43:c3:ca:0c:
ec:24:cf:79:94:f7:7d:8b:74:da:c6:a5:24:71:ae:
f0:b9:c8:85:58:c6:d3:f3:aa:75:5e:51:f6:5f:c0:
4f:52:cb:de:a4:3f:39:2a:4a:10:91:03:c9:36:00:
1e:f1:03:b3:78:89:31:ee:89:f5:18:2f:3f:02:9d:
8b:bb:a7:cb:9d:19:69:85:c3:d4:a5:55:d0:8a:25:
63:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:88:22:AB:16:87:86:CB:C2:AF:49:66:EA:21:B6:B2:DE:03:9B:18
X509v3 Authority Key Identifier:
keyid:AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/44D3107874E311F1BDAFA91462A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
60.241.61.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:08:74:61:d3:70:d3:36:d6:a7:4f:a2:b6:b6:4a:14:3f:2f:
cf:c2:66:ef:b3:78:e6:f8:4b:5d:75:77:e2:40:3a:1e:e6:cb:
8d:49:31:a1:e9:6d:43:93:fd:e1:08:b0:82:ce:bc:53:b4:1f:
25:76:d2:3f:7a:49:e5:46:70:6b:89:1b:54:87:84:88:03:ed:
de:7f:5a:6e:58:1a:0b:c4:aa:2c:da:88:b5:88:7f:11:b5:06:
88:c2:61:ba:ad:37:67:49:85:12:ad:33:05:5b:48:b2:b4:52:
e2:f9:fc:b9:13:61:f9:11:62:f4:07:72:49:de:88:8a:ca:ee:
55:9e:5c:2e:5a:80:67:07:d5:48:c4:a1:78:4e:c8:62:46:e0:
6d:fc:a0:e5:b1:78:fb:e0:57:3d:b2:d1:69:7b:91:1f:59:42:
2b:80:30:15:80:a4:bd:16:07:e2:2a:63:1f:f2:76:ad:a3:e2:
93:6c:24:80:2b:30:fb:28:4d:f1:85:b3:ba:8c:b4:f1:1f:e0:
55:c3:39:52:02:a7:26:c1:ea:c1:48:c8:34:ae:86:a4:ce:88:
64:c0:1d:fa:a5:ce:3d:e0:99:21:a8:20:8f:af:be:73:c2:86:
a6:47:42:13:8a:bc:80:a4:05:4d:f9:95:0e:06:a9:13:a0:2f:
57:a9:22:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:08:22 2026 by rpki-client