
$ rpki-client -vvf rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/1DCB662A3DF211EB81F4CE73C4F9AE02.roa
File: 1DCB662A3DF211EB81F4CE73C4F9AE02.roa (raw, json)
Hash identifier: q25fLmGla+VLvlzMOG6A/0pS3O978Xy+J6bNr/NpExE=
Subject key identifier: 45:76:2C:2D:CC:62:F5:05:93:8D:58:EB:12:6D:8D:7B:94:90:05:BC
Certificate issuer: /CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
Certificate serial: 174A
Authority key identifier: 7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/1DCB662A3DF211EB81F4CE73C4F9AE02.roa
Signing time: Sat 16 May 2026 17:19:58 +0000
ROA not before: Sat 16 May 2026 17:19:58 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 27.111.228.0/22 maxlen: 24
202.79.198.0/24 maxlen: 24
202.79.199.0/24 maxlen: 24
202.79.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl
rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 May 2026 16:40:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5962 (0x174a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914254C, serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
Validity
Not Before: May 16 17:19:58 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a08a73e-a45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:c3:99:7c:1f:d1:27:52:bc:f4:77:6d:38:
d0:78:9f:ea:4d:37:f3:8e:e6:2f:7c:e4:38:f5:f3:
92:52:22:70:39:6c:a3:79:e0:90:06:70:dd:c5:90:
33:6c:a9:49:fb:a7:b0:db:54:50:43:f0:0b:99:9e:
0f:37:29:56:8a:39:0a:0a:19:16:2e:8f:99:a4:32:
3b:ba:4f:18:0a:50:17:df:8e:7b:30:e3:ea:3c:7c:
8d:a3:d9:03:c0:8e:2f:41:61:50:0c:97:86:8a:94:
b9:1a:ef:03:1b:3d:df:2f:16:1d:c0:9b:ad:12:20:
ed:5e:7b:23:12:4c:61:cf:74:69:66:16:fa:e9:72:
45:f8:b5:d5:1e:18:78:f8:80:71:6c:80:82:13:11:
f4:83:ea:a8:ec:aa:cb:9e:34:14:11:4f:80:8d:f5:
a2:5b:96:68:ad:2e:85:fc:fe:39:b6:e9:21:de:a2:
7c:bc:14:fc:e6:bf:bc:72:35:8d:dc:74:d7:2b:92:
3b:c8:e0:72:69:98:b4:12:8e:21:0f:c7:7c:bd:e2:
c3:d1:44:15:e8:69:96:7f:95:f8:57:f8:91:f4:b7:
56:c3:fa:8a:ef:f4:a4:95:d5:e8:b2:93:67:50:c0:
aa:25:bd:d2:28:b1:cc:71:ee:a1:4f:ff:62:f8:54:
9d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:76:2C:2D:CC:62:F5:05:93:8D:58:EB:12:6D:8D:7B:94:90:05:BC
X509v3 Authority Key Identifier:
keyid:7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/1DCB662A3DF211EB81F4CE73C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.111.228.0/22
202.79.198.0-202.79.200.255
Signature Algorithm: sha256WithRSAEncryption
53:c2:58:80:b6:f5:ab:e1:57:ed:1a:61:39:c9:40:2e:79:3a:
95:bf:e3:05:f3:4e:46:3d:ae:04:c4:1d:3f:84:94:af:23:64:
8e:62:62:54:ce:96:c4:de:46:f6:5a:ce:d6:99:17:7d:75:d2:
94:b9:7b:0c:29:fa:65:ea:1d:26:11:3d:8a:54:bf:1a:e0:95:
c2:00:23:cf:ed:c6:16:7d:82:d7:86:2d:76:9f:1d:38:04:ad:
fc:2e:58:cb:ef:2b:14:7e:21:e8:93:42:16:3d:b8:98:26:1e:
6b:43:eb:ae:04:f2:53:e1:8e:80:56:ea:0c:1e:66:c0:ef:bc:
b3:83:af:c1:91:ff:62:39:19:db:50:e3:c1:1b:d9:10:a9:52:
bd:be:51:5c:09:0f:05:8a:15:39:bf:20:66:89:21:e5:17:a3:
9f:72:a5:9c:23:88:f4:eb:1c:bf:00:ad:4b:21:f6:d1:03:75:
b1:85:0f:34:a7:c6:bc:46:26:6e:64:12:3a:e1:a9:16:67:2b:
f6:d9:e5:9d:2b:83:dc:cf:ef:d5:c1:70:dd:e4:4a:5d:6b:15:
a8:90:27:1f:62:15:b3:58:27:8f:d0:6e:ad:53:5e:dc:8a:7c:
aa:bb:3c:de:b5:26:5c:c8:8c:45:67:43:fd:b5:29:a4:2a:18:
a3:15:5d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:04:58 2026 by rpki-client