
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/DE670A60679D11EEAFBA0A5DC4F9AE02.roa
File: DE670A60679D11EEAFBA0A5DC4F9AE02.roa (raw, json)
Hash identifier: hLiFwAy4wMBM35shHiRCq6rLulD6SSj4z9p7YraqScs=
Subject key identifier: 2A:A7:43:68:24:F8:C2:70:51:9B:2A:91:57:97:C8:9A:20:62:7C:0D
Certificate issuer: /CN=A9171753/serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
Certificate serial: 3565
Authority key identifier: A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/DE670A60679D11EEAFBA0A5DC4F9AE02.roa
Signing time: Wed 17 Jun 2026 16:25:09 +0000
ROA not before: Wed 17 Jun 2026 16:25:09 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 46606
IP address blocks: 45.113.123.0/24 maxlen: 24
119.18.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl
rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Jun 2026 15:10:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13669 (0x3565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171753, serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
Validity
Not Before: Jun 17 16:25:09 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a32ca65-f4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:78:e0:15:8a:6f:0d:87:ce:a7:ae:ae:e5:
13:c9:b2:10:a3:18:e5:21:d2:a5:2e:19:25:61:4d:
bc:e3:30:9f:82:ee:f5:ba:12:56:b1:68:6d:01:8a:
d4:b9:b9:cb:72:c6:a2:9c:96:6c:8a:46:40:df:e6:
52:8b:5a:22:9a:ec:b6:4b:d3:82:c8:5e:77:22:ce:
a0:6c:4a:46:7e:6d:82:bf:f6:9f:f9:02:e7:60:2c:
39:12:98:a2:43:78:a6:7b:d9:02:5b:22:6a:52:7f:
19:d7:f8:1f:c9:47:fc:b2:5e:c2:90:01:9b:75:7c:
3c:ab:ec:4a:3d:b0:70:9b:17:a0:ca:a0:a6:d2:77:
98:09:14:7f:52:15:c4:69:cc:49:a4:47:62:45:2f:
57:82:69:24:1e:b2:99:a7:95:f7:60:65:f2:0d:f0:
29:93:6b:74:cd:94:3f:de:4f:4c:7e:dc:01:b9:25:
ff:39:bb:42:f8:76:df:1b:cf:2b:f0:a8:c7:e9:0c:
48:a3:cc:39:5a:3e:9b:2a:45:bb:c6:4c:5f:69:e2:
80:73:6c:e0:4d:d3:90:bf:39:e3:ed:0f:ec:f0:36:
f2:4e:eb:06:6b:7d:0f:41:88:ce:cd:3a:41:42:c5:
ea:88:e6:5d:02:f1:55:3e:5c:76:a9:78:a0:99:e5:
58:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A7:43:68:24:F8:C2:70:51:9B:2A:91:57:97:C8:9A:20:62:7C:0D
X509v3 Authority Key Identifier:
keyid:A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/DE670A60679D11EEAFBA0A5DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.113.123.0/24
119.18.48.0/20
Signature Algorithm: sha256WithRSAEncryption
63:90:e8:17:84:d5:ce:a4:f8:17:4c:fc:c8:39:ad:70:34:c7:
20:19:42:67:0b:fb:9c:a2:50:a0:60:2b:6d:9a:28:b8:9f:f1:
98:be:2c:1c:10:3b:16:08:ff:1a:44:6b:88:ec:de:94:36:19:
28:61:11:e2:27:20:b5:ac:e2:7c:f0:0b:8b:29:e8:ab:37:4f:
02:a8:e8:16:8f:c6:02:2e:db:57:06:a4:48:10:24:cd:bc:25:
a8:92:14:1d:91:56:90:04:4a:f0:06:79:f5:f6:aa:64:6c:51:
27:f4:85:0d:49:0f:06:2c:55:c4:8c:b3:90:f4:5f:6c:7a:d4:
21:c4:3f:f3:6c:ab:59:74:9f:78:63:da:ac:2d:f5:78:7f:45:
e5:4b:c5:74:45:57:f2:2b:39:a7:db:cf:f3:b2:c8:97:51:7d:
32:90:b1:cc:fc:d3:2d:ff:e0:b6:ed:13:e9:f2:a2:6e:8e:d7:
9d:0c:d9:7f:45:da:dd:13:38:b9:2a:a5:06:41:1e:20:5d:6b:
b7:d2:d2:81:a1:fd:f3:2e:c4:dd:ff:d6:7b:94:07:d0:5d:ec:
ae:d4:9c:a9:d8:fb:a7:d0:2e:3f:c4:f8:d1:4b:88:5d:3f:e9:
36:a5:6f:28:2a:5d:0f:20:7c:19:14:dc:a0:12:5f:f1:b5:43:
4b:07:25:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:17:27 2026 by rpki-client