
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/1EC9E19C7AD111F188194D1271A30FBC.roa
File: 1EC9E19C7AD111F188194D1271A30FBC.roa (raw, json)
Hash identifier: MpR0pLa42VtvAVSR7IX6co5ikrGvSIOJh1Z0FQ/Mnw0=
Subject key identifier: 6A:2D:53:D6:FB:01:34:33:2C:B9:8B:29:1E:27:90:9D:2E:BC:50:69
Certificate issuer: /CN=A911EED9/serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
Certificate serial: 28
Authority key identifier: 4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/1EC9E19C7AD111F188194D1271A30FBC.roa
Signing time: Wed 08 Jul 2026 13:30:01 +0000
ROA not before: Wed 08 Jul 2026 13:30:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149514
IP address blocks: 162.4.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.crl
rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:05:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EED9, serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
Validity
Not Before: Jul 8 13:30:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4e50d9-3753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:13:27:1b:7c:d5:1e:d3:bb:50:8a:ec:c8:87:
43:93:f8:d3:75:c3:35:7c:72:13:5c:5b:69:5a:f2:
1d:79:6f:76:f8:15:a6:fb:43:aa:39:d6:86:d9:59:
9c:5b:50:8a:3c:31:d8:12:6e:16:33:27:05:03:62:
62:70:79:d5:4a:ae:15:16:9d:2f:50:aa:99:21:e0:
d5:ca:32:f9:d0:e7:5e:8f:c0:5a:5a:88:be:8a:ca:
f7:a8:e2:11:f3:4b:d9:bf:b7:bb:48:d8:0e:30:6b:
5d:d3:22:09:65:2a:b2:85:40:70:38:c5:6b:5a:f7:
a2:cf:8a:1c:18:65:92:a4:08:0a:c6:0e:a5:e1:d3:
10:fd:a0:1f:e4:50:18:42:9c:1e:75:52:34:a6:19:
62:98:a1:58:bd:4d:71:dc:49:7a:72:35:59:19:5c:
4f:08:d5:f2:55:4f:48:bf:c1:b4:ff:69:af:02:0b:
ea:b1:8c:a9:02:40:19:15:14:38:d9:da:0f:0f:db:
63:c5:e5:a7:1d:55:b9:77:97:5e:0d:89:57:25:1d:
7d:6c:ec:6d:f3:ee:e4:e8:ce:0b:d8:5d:54:35:32:
e5:5c:86:a4:fd:95:aa:c9:7f:5c:57:f8:92:e7:b6:
05:35:ab:de:f5:b0:c5:b2:9e:b3:e6:f2:13:dc:e6:
f4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2D:53:D6:FB:01:34:33:2C:B9:8B:29:1E:27:90:9D:2E:BC:50:69
X509v3 Authority Key Identifier:
keyid:4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/1EC9E19C7AD111F188194D1271A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
162.4.48.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:f7:16:25:de:4b:c7:b0:47:a3:85:2c:bc:8a:9d:17:7c:cf:
78:21:aa:fa:10:2a:51:1d:3f:cf:1f:37:9b:39:1f:9a:f8:f0:
e3:1c:2d:b1:25:0f:6b:96:25:d7:3e:39:c4:aa:02:2f:71:2c:
34:fb:b8:09:49:83:62:af:f4:3a:ef:1d:cb:a0:68:3e:4d:26:
a1:11:36:57:8d:48:51:1f:18:bc:26:86:9a:63:be:64:be:cf:
d5:32:6e:30:dc:9c:5d:db:32:3d:7c:1a:0f:9b:29:3c:0c:82:
62:e2:28:d0:09:20:29:03:cf:11:e0:08:22:2f:bd:45:69:c3:
90:99:8a:6f:6e:4a:6a:29:62:a3:b1:a4:b2:13:54:ee:62:5e:
fa:f2:5d:82:01:34:28:2f:e9:19:28:ef:7b:0a:3e:ee:d7:e0:
1c:f7:f5:32:ce:df:34:73:4d:96:a1:2b:cd:a6:09:4e:8d:ac:
1e:a5:c6:c0:cf:30:08:6d:d9:cf:0f:a7:17:55:7d:ec:2d:89:
6c:ac:6b:d4:8b:f2:63:49:ff:63:e8:e4:75:b5:80:af:be:13:
0a:94:f9:c7:4c:f7:6d:a9:8f:86:ab:96:73:2f:29:dc:b8:c0:
41:32:0a:89:b1:a6:3d:bc:cc:9e:7f:ee:cd:a0:10:40:f5:64:
45:00:91:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 18 05:18:32 2026 by rpki-client