
$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/752774D616A111F0B2CDBC72C4F9AE02.roa
File: 752774D616A111F0B2CDBC72C4F9AE02.roa (raw, json)
Hash identifier: iGlUh9TWU4eF1gUngLKtyEqTN0brCSv48MjOIvg0+wA=
Subject key identifier: C4:F9:FC:CE:11:FA:98:86:0A:19:20:5E:1A:C9:B8:AB:BD:FD:02:30
Certificate issuer: /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Certificate serial: 0148
Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/752774D616A111F0B2CDBC72C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:40:43 +0000
ROA not before: Wed 09 Jul 2025 07:43:15 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 211691
IP address blocks: 2405:a280:ff00::/44 maxlen: 44
2405:a280:ff80::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 04:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Validity
Not Before: Jul 9 07:43:15 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a5a16b-0e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:59:4f:e1:cd:13:a8:bc:ff:cb:4b:a6:57:92:
70:98:bc:79:2e:74:c0:38:0b:50:f6:ff:be:ca:59:
39:00:69:d7:d8:3f:f8:b1:f6:c6:6b:c9:71:e4:b4:
27:87:8a:5b:7d:ae:d5:f9:89:6d:6a:54:e6:3e:b1:
e5:70:b6:8f:9c:7d:52:a9:55:33:ce:b7:bb:34:8c:
c6:cc:42:b2:66:eb:79:44:b1:e0:9c:b7:70:03:d5:
e8:56:f4:10:a0:8e:fe:6d:b5:68:da:c5:14:49:cd:
aa:9c:e7:6c:44:d7:90:e9:a7:97:d4:94:8b:ab:08:
45:c1:d5:fa:0e:05:9c:91:0c:39:d4:dd:01:b1:f0:
6c:2f:04:09:e0:1d:e9:0e:9d:09:a7:7a:e9:f7:4e:
39:34:a0:4a:05:cc:17:50:21:3a:71:45:db:8b:2a:
27:49:63:0f:27:f9:1f:90:0b:80:d4:47:15:b5:ba:
3c:b6:5b:e1:44:0b:b8:5a:28:74:f6:75:20:50:a3:
4b:0b:24:f8:30:5b:17:14:20:74:06:43:73:ed:fc:
88:2e:d8:a8:b5:16:c2:af:95:d8:40:35:d8:38:76:
3e:7b:62:56:46:64:18:89:99:eb:f1:9a:1c:23:89:
21:9f:91:07:74:90:ee:2d:b5:47:9f:87:25:36:8d:
b1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F9:FC:CE:11:FA:98:86:0A:19:20:5E:1A:C9:B8:AB:BD:FD:02:30
X509v3 Authority Key Identifier:
keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/752774D616A111F0B2CDBC72C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:a280:ff00::/44
2405:a280:ff80::/44
Signature Algorithm: sha256WithRSAEncryption
3a:a2:98:07:85:06:8b:81:73:b5:39:b3:5d:7a:2a:a3:7d:0b:
33:f5:84:2c:fe:1e:48:0d:3f:dd:90:da:3b:88:af:21:c9:f9:
9d:6e:b1:2b:9f:d6:98:bd:d4:5b:d6:d0:60:58:4d:5b:f9:f2:
95:8b:2f:17:40:c8:62:35:5d:46:43:a7:5e:37:98:99:39:fb:
59:f1:09:5e:f7:b1:10:2d:1c:3d:df:a2:bf:b7:37:61:5c:60:
8c:7c:ab:0a:0a:0b:3f:96:4b:22:0d:ed:04:72:be:81:b5:70:
99:56:f6:3e:fc:8a:ba:ec:97:90:1d:d7:95:7c:27:9d:0a:b6:
d0:45:15:ae:08:6d:f7:04:e8:67:d7:5a:12:e4:21:6c:12:a4:
49:11:79:c6:92:7a:75:51:ac:7d:61:33:4e:ca:13:c8:3c:17:
50:b6:54:0b:aa:96:96:ae:2f:94:31:ea:20:2f:b1:1d:07:7d:
8f:0b:93:85:6d:ac:51:68:96:e2:9e:99:ec:3a:31:82:3e:75:
23:3c:94:e8:be:39:f8:1c:21:c1:cc:5e:e9:1c:22:0d:2c:d2:
95:62:9e:dd:b2:69:19:cd:f8:cd:65:ce:b5:15:9b:7f:85:cf:
80:ec:8a:15:c5:a3:2e:4a:87:ed:12:58:48:92:c8:8a:cb:66:
d8:47:19:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:00:27 2026 by rpki-client