
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/2CCA96D68FD211F190436B696E11F970.roa
File: 2CCA96D68FD211F190436B696E11F970.roa (raw, json)
Hash identifier: kSdcFd2O63Jc9KHwU5xShOS7z0NUdNaBK9poX1JxZ0o=
Subject key identifier: D7:71:3B:2A:2F:79:D9:35:B2:53:99:40:81:4C:6A:1C:32:A2:D4:A1
Certificate issuer: /CN=A914699C/serialNumber=5BB9A8E1A4060ACC2F3BFA21EFCAD2C3066E8E89
Certificate serial: 58
Authority key identifier: 5B:B9:A8:E1:A4:06:0A:CC:2F:3B:FA:21:EF:CA:D2:C3:06:6E:8E:89
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W7mo4aQGCswvO_oh78rSwwZujok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/2CCA96D68FD211F190436B696E11F970.roa
Signing time: Tue 04 Aug 2026 07:43:05 +0000
ROA not before: Tue 04 Aug 2026 07:43:05 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 400619
IP address blocks: 162.4.40.0/23 maxlen: 23
162.4.40.0/24 maxlen: 24
162.4.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.crl
rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W7mo4aQGCswvO_oh78rSwwZujok.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 22:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914699C, serialNumber=5BB9A8E1A4060ACC2F3BFA21EFCAD2C3066E8E89
Validity
Not Before: Aug 4 07:43:05 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a719809-3dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:cc:0b:4a:a0:a9:24:29:fb:27:a7:0b:9b:
a2:db:06:89:35:cb:11:a6:cb:db:82:56:62:3c:91:
f5:f7:ec:86:cb:32:83:6f:ee:f4:0b:37:2a:05:a7:
58:e3:81:5a:6e:1e:e9:c3:6d:b7:05:06:9f:ce:6c:
bf:35:8f:a6:08:cd:db:7a:bf:bd:b2:b9:5e:fe:ac:
a3:ab:8c:21:46:d5:ea:aa:49:c8:dd:87:69:0d:21:
85:e7:13:52:8f:4e:e3:ff:3e:16:db:20:17:4b:51:
b1:4a:80:d8:fa:0a:24:8e:2c:3e:6c:a9:39:22:eb:
5a:6e:00:d0:b0:44:60:b4:9b:5d:02:03:7e:45:f6:
6f:5e:9d:18:1f:6e:c3:29:37:f7:90:58:e9:4c:94:
0b:0c:ea:7a:e9:2f:14:4d:6a:35:82:74:6c:1d:da:
ec:b8:cd:4e:45:a5:f9:1b:6f:01:91:55:61:ae:c7:
cb:dd:a9:d1:e1:5d:88:d7:d6:7c:05:6b:7a:d5:a7:
af:d4:53:51:61:ce:85:c7:0f:97:a2:1e:2b:c9:e2:
71:9f:60:98:57:a2:35:c3:2f:45:ad:84:53:95:86:
a5:52:5f:4b:ee:28:d9:33:36:d9:5f:a0:0d:2a:93:
41:d4:be:bb:96:e8:6d:5c:cc:47:8d:6a:bf:68:83:
ee:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:71:3B:2A:2F:79:D9:35:B2:53:99:40:81:4C:6A:1C:32:A2:D4:A1
X509v3 Authority Key Identifier:
keyid:5B:B9:A8:E1:A4:06:0A:CC:2F:3B:FA:21:EF:CA:D2:C3:06:6E:8E:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W7mo4aQGCswvO_oh78rSwwZujok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/2CCA96D68FD211F190436B696E11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
162.4.40.0/23
Signature Algorithm: sha256WithRSAEncryption
58:f8:80:a6:dd:db:6b:e8:cf:7b:67:1f:d3:e8:2c:80:19:38:
9b:af:36:48:17:38:df:05:72:5c:00:19:fd:de:01:67:77:3e:
e8:e9:c0:b0:26:dd:22:e3:42:c2:65:89:7e:4b:5a:59:66:28:
90:ca:a3:32:6f:90:1c:be:b5:7f:73:30:f3:43:e5:53:b8:4a:
30:11:6d:05:33:02:6d:78:cc:25:9a:3f:7f:bf:b1:bd:b5:4c:
6c:10:56:ad:4f:9c:ff:df:61:a5:03:d1:06:81:34:52:02:69:
f0:de:3d:99:0a:18:ea:b1:39:22:15:b3:e5:b9:5b:2f:8b:cc:
99:ad:10:3b:da:dc:93:04:a8:43:3a:a1:09:d6:b5:6f:59:ca:
f9:c6:20:57:ea:ee:7d:71:fb:ab:86:70:49:78:d5:fd:27:3f:
13:f2:7a:75:fb:d5:4b:fe:0e:b4:65:df:04:c7:f9:de:0c:8f:
92:0a:77:24:aa:1f:d8:55:97:fc:9f:7d:d5:ff:a8:b4:3a:ca:
46:7f:ef:f8:51:f8:9c:7e:53:dd:7f:33:d4:d9:ff:55:49:c6:
3f:ef:70:e3:0f:9c:cb:65:ef:aa:07:0f:db:ea:3f:a4:c2:9d:
39:9f:fd:30:e4:0b:da:a6:a2:bd:55:11:94:00:b8:f8:ff:4c:
a5:e5:1f:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:09:28 2026 by rpki-client