
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/1A2663C68B0311F1A9F645306E11F970.roa
File: 1A2663C68B0311F1A9F645306E11F970.roa (raw, json)
Hash identifier: FUMeDr3YV1UL+W9JEaVkbdGOajfTUHKFjI6g5b0VH30=
Subject key identifier: B0:DF:24:FC:95:8A:3C:45:55:16:7E:4B:04:A7:FF:19:B4:5F:0E:56
Certificate issuer: /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial: 2B27
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/1A2663C68B0311F1A9F645306E11F970.roa
Signing time: Fri 14 Aug 2026 16:23:19 +0000
ROA not before: Fri 14 Aug 2026 16:23:19 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 24095
IP address blocks: 202.57.104.0/22 maxlen: 22
202.57.110.0/24 maxlen: 24
202.57.112.0/24 maxlen: 24
202.57.113.0/24 maxlen: 24
202.57.114.0/24 maxlen: 24
202.57.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11047 (0x2b27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Validity
Not Before: Aug 14 16:23:19 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a7f40f7-d9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:31:f9:50:0b:3b:4f:bd:36:44:37:5c:0a:
aa:4c:db:63:11:2e:a7:d9:cc:68:03:b0:67:c8:45:
82:20:3c:71:e2:38:98:5e:20:7d:d7:f7:74:d4:40:
79:34:6a:ad:19:50:7f:66:47:2f:43:dc:74:d7:40:
66:60:c4:48:c7:88:d1:61:f6:52:9e:a7:72:c8:61:
c4:23:da:2b:42:88:66:88:91:64:c9:0a:a3:b2:6d:
f4:15:67:47:fd:17:2d:5c:ee:8f:d6:40:ea:f5:c1:
e9:d7:2e:d9:d1:b5:91:c6:ac:bd:2e:d7:97:82:a2:
08:dc:5d:43:a0:21:b1:43:20:e2:73:f3:4d:bd:a0:
1c:74:c1:1c:15:3b:0f:04:54:ac:c9:27:20:cc:1b:
27:5c:d2:13:fc:66:bc:1c:a2:86:0c:dd:f2:26:a1:
51:36:ee:d6:f5:34:a3:11:5b:df:29:4b:c9:09:69:
f7:ad:57:be:82:35:80:c9:1b:57:e2:27:ba:7d:ad:
67:24:be:6b:c6:ca:db:02:05:72:66:83:82:f9:24:
30:57:b2:e5:53:51:0d:2b:84:f4:12:5b:12:7f:71:
c0:26:54:36:81:fc:23:60:1c:e8:b3:dc:66:99:55:
7a:f4:5f:ae:6b:17:0d:59:18:91:7a:e8:42:00:da:
96:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DF:24:FC:95:8A:3C:45:55:16:7E:4B:04:A7:FF:19:B4:5F:0E:56
X509v3 Authority Key Identifier:
keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/1A2663C68B0311F1A9F645306E11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
202.57.104.0/22
202.57.110.0/24
202.57.112.0-202.57.114.255
202.57.116.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:0a:52:52:e0:fd:75:c1:98:cc:21:d9:d4:2d:83:fe:66:d1:
ac:f8:89:30:c6:b9:7a:b7:2b:59:0f:80:7e:fb:c0:01:8f:c8:
65:ba:a0:3f:d2:5b:6f:c5:6c:18:02:35:48:51:cd:e6:db:c1:
49:37:91:08:4e:31:10:52:aa:19:5c:69:45:d3:e3:a2:0f:f1:
d2:c9:0f:10:06:cc:51:10:ee:c0:4a:d4:b3:ac:6a:d7:7a:2f:
74:ba:5c:28:93:7f:5e:94:88:d5:e0:2d:1f:45:0f:de:54:93:
1c:27:01:ed:9b:1f:11:40:71:82:a1:1c:57:2b:ef:15:fd:12:
07:69:a7:e1:f6:d2:4b:85:a7:ac:f1:b6:52:14:a1:2f:13:c5:
bf:3c:33:de:f4:7e:67:db:f0:f3:e7:9d:d7:86:fb:be:5b:ea:
9c:0f:06:9d:bb:fb:0d:49:37:c0:4b:6c:0a:47:f2:1c:d1:bd:
65:0e:c9:87:ad:48:2d:65:5d:33:e4:ff:86:df:f9:d0:7b:1a:
65:50:d7:f0:c4:95:61:c2:45:72:d9:ce:95:36:45:6f:7a:99:
b7:71:04:6d:2f:b3:33:bc:ab:cf:c6:0f:5e:8e:7c:ff:73:09:
09:ea:5a:03:f2:e2:f6:29:b6:12:87:47:90:b6:85:43:dd:31:
21:fc:e0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:28:42 2026 by rpki-client