
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/52040BECDCBF11F0B2EC67DA4A6F56BC.roa
File: 52040BECDCBF11F0B2EC67DA4A6F56BC.roa (raw, json)
Hash identifier: Wc1DoOxBicG+sk0xmxn0G7rVUatGjhMhpQRJFhbrHSQ=
Subject key identifier: 24:EA:6B:9B:0F:FE:7C:98:93:33:75:4A:C3:E0:1A:10:6F:1F:1A:9F
Certificate issuer: /CN=A914C3FB/serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Certificate serial: 013C
Authority key identifier: 4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/52040BECDCBF11F0B2EC67DA4A6F56BC.roa
Signing time: Wed 20 May 2026 10:15:07 +0000
ROA not before: Wed 20 May 2026 10:15:07 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 9304
IP address blocks: 117.18.109.0/24 maxlen: 24
202.181.171.0/24 maxlen: 24
202.181.180.0/24 maxlen: 24
202.181.181.0/24 maxlen: 24
202.181.183.0/24 maxlen: 24
202.181.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316 (0x13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C3FB, serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Validity
Not Before: May 20 10:15:07 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a0d89aa-5e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1e:1c:51:7e:21:a6:01:a9:e0:79:ed:4f:59:
03:57:65:06:b9:51:1b:9d:5b:52:53:ef:3f:49:cf:
65:ce:b8:bb:05:72:4c:6e:80:8f:26:28:12:1f:09:
57:95:85:ca:ae:62:9d:1b:9b:e1:32:34:cb:4f:82:
2a:d7:a7:0f:5c:78:a7:5e:63:54:61:ad:9a:12:c0:
54:fa:b6:2d:bd:ef:62:63:6b:87:4d:d4:ad:0c:73:
df:af:e6:8c:31:ff:37:12:72:3a:0b:66:a1:24:f2:
e8:20:6a:78:db:dc:bc:05:cc:1a:8b:cf:de:39:33:
44:4b:a8:9a:5e:50:88:50:32:97:a3:71:d8:f2:6d:
08:13:1e:b1:8c:61:d1:84:39:1f:36:32:f2:54:68:
f7:00:4d:ff:00:f6:4a:f7:8a:03:3a:21:26:dc:99:
18:62:15:3b:f1:c3:e0:53:19:88:ab:63:7a:12:72:
a8:af:44:15:6d:11:33:fd:f5:0c:78:48:f2:0e:b5:
32:28:c1:b3:dc:39:31:2d:54:f7:58:c2:d1:4a:d1:
50:c4:80:57:dd:2d:31:e1:ef:b5:67:90:8f:4c:f8:
2c:e3:90:b5:52:22:67:ad:f0:86:96:31:3e:0a:71:
bf:2a:34:cb:86:2e:21:d6:5e:bb:2c:5e:18:0f:ef:
ce:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EA:6B:9B:0F:FE:7C:98:93:33:75:4A:C3:E0:1A:10:6F:1F:1A:9F
X509v3 Authority Key Identifier:
keyid:4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/52040BECDCBF11F0B2EC67DA4A6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
117.18.109.0/24
202.181.171.0/24
202.181.180.0/23
202.181.183.0/24
202.181.185.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:de:09:c0:bd:4a:f1:db:30:e1:67:2e:1d:22:68:ba:3b:fd:
d3:3d:d6:68:dd:a0:e0:81:93:41:72:33:34:68:79:61:be:e6:
8d:01:40:43:5a:b5:df:93:44:1c:04:3a:78:eb:ce:dd:1a:fe:
ae:32:03:8f:07:7c:e3:db:24:6a:80:82:d6:96:e5:56:ac:5a:
15:c7:91:72:84:f2:cf:49:3b:5f:4c:11:e2:aa:09:a6:23:10:
61:36:ce:84:3d:63:1a:4f:63:51:47:8f:fe:84:81:61:43:72:
be:b3:94:9a:89:45:00:67:63:b8:80:b8:56:22:96:f3:a0:21:
33:8f:27:91:b8:aa:c2:0e:c2:93:60:05:0e:61:2c:c3:e7:54:
88:63:60:9a:d0:e5:bf:1b:86:62:17:a1:0b:f5:c1:e4:54:60:
ae:48:10:bf:b8:56:0f:57:28:57:d8:5a:82:78:36:53:27:3d:
97:88:70:c7:15:5a:40:e3:65:b8:9e:c1:a3:5e:89:e1:7b:62:
b5:03:83:13:0e:26:7f:d4:de:33:ec:73:bb:03:1b:cc:07:37:
b8:c8:e7:87:b9:9b:46:bd:e9:b1:eb:ae:fa:ed:62:e4:24:6f:
f5:3a:28:dd:f5:7e:51:c3:13:bc:ab:64:54:78:ce:4c:7b:1a:
d2:df:10:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:51:28 2026 by rpki-client