
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/10CDE53E2C4111E98AA5057DC4F9AE02.roa
File: 10CDE53E2C4111E98AA5057DC4F9AE02.roa (raw, json)
Hash identifier: OM7OcceI0e2vqG4zWvyShC73qXFWKrFj/+xDvI8blro=
Subject key identifier: D6:4E:AB:1A:F3:AD:62:84:C1:9B:0A:0F:55:94:46:94:5A:55:EB:5F
Certificate issuer: /CN=A913344F/serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603
Certificate serial: 1194
Authority key identifier: 4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/10CDE53E2C4111E98AA5057DC4F9AE02.roa
Signing time: Mon 10 Aug 2026 17:33:33 +0000
ROA not before: Mon 10 Aug 2026 17:33:33 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 137989
IP address blocks: 87.247.160.0/21 maxlen: 22
87.247.160.0/24 maxlen: 24
87.247.161.0/24 maxlen: 24
87.247.162.0/24 maxlen: 24
87.247.163.0/24 maxlen: 24
87.247.164.0/24 maxlen: 24
87.247.165.0/24 maxlen: 24
87.247.166.0/24 maxlen: 24
87.247.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl
rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4500 (0x1194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913344F, serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603
Validity
Not Before: Aug 10 17:33:33 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a7a0b6d-0efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:0b:ef:75:75:07:cd:a9:6b:e2:4d:6b:59:
8b:48:2b:ac:1a:76:e4:65:35:8d:5d:2a:20:85:44:
b0:63:f6:56:8e:f5:ea:ce:d2:76:9c:21:a2:49:67:
6e:94:4c:55:e1:02:60:ab:40:c8:07:d6:9d:56:44:
a2:7b:06:ec:80:a7:b8:7b:6a:1c:f5:bd:9e:c7:25:
7b:cb:83:23:5a:26:09:84:4e:1a:7d:be:e7:e7:42:
cb:8b:a5:fe:59:43:45:69:00:d1:f4:d7:cf:24:c6:
60:27:f6:7b:7e:8d:49:dd:8d:bc:fb:63:de:d2:25:
88:a1:ba:71:22:40:c5:a2:ad:b5:24:d8:16:6a:7f:
bd:d3:bc:e4:60:17:ac:c4:10:3a:8f:68:31:c1:06:
5b:88:96:6a:09:6f:9a:11:c9:52:88:ef:94:08:87:
36:03:a8:22:34:e9:60:61:af:c5:69:d4:ac:38:10:
22:38:40:ea:d8:a7:76:b6:e9:1f:1f:f6:f1:f5:f8:
16:a5:49:c7:4b:50:4f:ed:f6:de:5c:e9:da:2b:9b:
08:37:9b:f2:ec:9e:af:4f:75:54:f6:fd:93:08:04:
17:b4:01:2a:95:ed:a2:82:bc:5c:f5:fb:37:62:c3:
3b:d6:57:0e:2c:ed:3d:3a:d5:e0:2c:41:7b:97:a1:
37:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4E:AB:1A:F3:AD:62:84:C1:9B:0A:0F:55:94:46:94:5A:55:EB:5F
X509v3 Authority Key Identifier:
keyid:4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/10CDE53E2C4111E98AA5057DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
87.247.160.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:33:0b:d0:f2:96:e3:02:33:be:3b:c7:66:b4:a4:46:f3:1c:
a9:ee:d0:f7:e2:72:35:9e:90:9b:1b:f4:b7:de:17:a7:a9:71:
59:71:c0:18:16:33:d8:01:a7:f1:0c:67:27:d6:80:9b:29:80:
72:5c:d4:94:8c:10:41:bd:f6:81:2a:b1:a0:79:30:f9:f5:6b:
23:89:34:ac:43:61:14:f3:26:6e:9e:71:dd:8b:12:2a:15:74:
b2:91:a5:4b:cf:2d:41:c3:f9:6d:cd:4c:f6:95:56:59:a2:47:
e5:0f:3c:c6:83:48:09:bc:ad:4f:a6:bd:f1:5b:86:3e:9e:32:
c0:02:f8:c2:8b:9d:c1:f9:70:79:11:0b:ac:f0:fb:4a:d3:04:
77:4c:44:ba:34:a0:d2:2b:bf:ec:d6:b0:be:c6:bd:53:95:1e:
dc:8b:18:4c:9b:76:ec:79:8e:3a:56:31:45:71:9f:19:0a:43:
68:76:71:bc:c2:3a:43:4c:2a:95:c7:fa:44:4d:6f:d3:dc:73:
45:19:55:3a:81:1f:a6:b7:a7:7e:d9:ea:1d:cd:91:3b:de:95:
8f:80:71:5d:37:2f:fc:51:6a:86:85:ab:4b:58:a6:c1:2e:1c:
fd:1b:f9:65:70:74:7e:aa:ea:71:ba:fb:2b:36:48:f0:63:3b:
f8:3e:db:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:42:27 2026 by rpki-client