
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/2781681CA80A11F18FD626046A11F970.roa
File: 2781681CA80A11F18FD626046A11F970.roa (raw, json)
Hash identifier: +M5jX9SWmjMyONwR593XK4NuqGr4X6KNIa9RCUZWpwo=
Subject key identifier: 8C:EE:E1:0A:3B:5E:D3:2B:3E:01:7F:42:DB:ED:A5:D3:03:71:3B:E9
Certificate issuer: /CN=A914699C/serialNumber=5772E3B8278CB6C7AABD7ACF9EF562AB593C2E82
Certificate serial: 07
Authority key identifier: 57:72:E3:B8:27:8C:B6:C7:AA:BD:7A:CF:9E:F5:62:AB:59:3C:2E:82
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V3LjuCeMtseqvXrPnvViq1k8LoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/2781681CA80A11F18FD626046A11F970.roa
Signing time: Fri 04 Sep 2026 02:41:39 +0000
ROA not before: Fri 04 Sep 2026 02:41:39 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 154376
IP address blocks: 191.124.240.0/24 maxlen: 24
191.124.241.0/24 maxlen: 24
191.124.242.0/24 maxlen: 24
191.124.243.0/24 maxlen: 24
191.124.246.0/24 maxlen: 24
191.124.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.crl
rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V3LjuCeMtseqvXrPnvViq1k8LoI.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 02:41:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914699C, serialNumber=5772E3B8278CB6C7AABD7ACF9EF562AB593C2E82
Validity
Not Before: Sep 4 02:41:39 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a9a2fe3-73ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:39:cc:10:d3:f0:71:a2:20:11:ff:8b:08:
af:41:5b:16:86:d2:7b:fa:99:7b:a3:52:57:b5:b1:
9c:3a:3d:9c:43:8f:6a:48:73:d9:9a:55:ba:72:1c:
28:8d:36:8b:bd:9f:67:3c:7d:5c:08:6a:41:ee:76:
69:e5:87:9a:d5:b1:c4:96:c5:43:c2:3a:ae:d8:d6:
ca:ce:3f:0c:2f:4c:f0:5a:3a:13:7c:c5:42:1e:6b:
17:09:ba:4c:10:f3:d4:5a:f8:e1:ee:23:dd:4b:42:
10:5f:4a:20:ff:83:aa:8a:d6:8a:47:14:ea:61:59:
5d:4d:67:8a:8f:e4:ec:48:f1:32:6c:e3:a8:c1:e3:
cd:a9:88:9e:97:bf:3f:8a:26:7d:31:f0:a0:35:5c:
8f:5c:23:dc:2f:e0:db:22:a2:0c:ea:cf:48:39:a4:
5f:06:21:41:fc:6d:fb:1a:ef:ba:89:79:00:0b:d8:
e5:98:8d:ac:9e:d7:5a:43:fa:e4:c1:9e:0c:9c:a4:
f0:51:b3:42:cd:f1:71:98:a0:c9:7e:fb:d3:7c:53:
83:37:76:88:7b:39:f9:d2:94:c6:3b:de:6d:9a:d7:
98:a0:ce:13:5a:e3:bd:9c:7e:a6:02:95:21:f6:db:
82:36:ce:d6:98:7c:6c:19:a1:86:76:1b:86:01:46:
1c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EE:E1:0A:3B:5E:D3:2B:3E:01:7F:42:DB:ED:A5:D3:03:71:3B:E9
X509v3 Authority Key Identifier:
keyid:57:72:E3:B8:27:8C:B6:C7:AA:BD:7A:CF:9E:F5:62:AB:59:3C:2E:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V3LjuCeMtseqvXrPnvViq1k8LoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/2781681CA80A11F18FD626046A11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
191.124.240.0/22
191.124.246.0/23
Signature Algorithm: sha256WithRSAEncryption
95:41:ec:3c:12:a7:9c:f8:6e:93:5d:e3:ad:99:6f:00:b4:61:
79:ac:3b:7b:6b:5f:29:8c:68:36:26:3f:16:8e:a3:18:c7:7b:
48:52:c2:ad:4f:f0:52:79:a6:b6:34:ab:fd:ed:d8:b5:8a:06:
3f:61:74:6f:de:91:fb:be:cc:3b:2d:bc:b3:7a:ab:71:54:62:
aa:93:21:97:26:03:01:20:73:e5:a1:34:1b:ce:d8:7a:eb:d2:
37:24:07:6f:f3:4a:db:50:a2:10:19:31:62:e0:5f:4d:be:11:
fc:eb:f9:0c:0f:39:2d:c0:fb:86:da:dd:6f:85:7f:57:96:aa:
fa:c6:47:1a:61:64:d3:4a:ee:7a:5b:ca:fe:e5:36:4c:47:d0:
58:5d:bd:75:15:5f:a1:96:3d:1a:2a:ff:5d:17:b1:3b:3f:ad:
b6:00:ff:03:71:b4:00:5d:1f:bf:70:7c:9e:06:4b:7e:2e:24:
95:e3:82:f8:8c:5e:1c:dd:90:47:ae:41:07:d1:26:ca:48:65:
8d:66:19:36:31:dc:0d:17:08:14:4e:1f:77:4c:ab:0e:6f:db:
a0:3a:38:e2:af:f0:b6:0d:59:90:a0:21:34:31:21:b8:80:9d:
24:1f:72:09:0e:7c:fb:eb:90:1d:da:3b:2c:ef:d3:74:00:02:
90:d4:23:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:20:34 2026 by rpki-client