
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/FE5E15E2216911EC82319078C4F9AE02.roa
File: FE5E15E2216911EC82319078C4F9AE02.roa (raw, json)
Hash identifier: 3PYImVuhd2a+7WVhTnmUqdkpZJCLvtAkYhkCLH97AYw=
Subject key identifier: 1B:F2:5D:56:9E:06:1C:82:B6:FB:E4:43:EE:73:31:06:8C:05:47:C5
Certificate issuer: /CN=A9171845/serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B
Certificate serial: 05CE
Authority key identifier: 7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/FE5E15E2216911EC82319078C4F9AE02.roa
Signing time: Wed 02 Sep 2026 23:45:08 +0000
ROA not before: Wed 02 Sep 2026 23:45:08 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 24324
IP address blocks: 153.111.220.0/24 maxlen: 24
153.111.222.0/24 maxlen: 24
153.111.226.0/24 maxlen: 24
153.111.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl
rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 20:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1486 (0x5ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171845, serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B
Validity
Not Before: Sep 2 23:45:08 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a98b503-f84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:0d:af:d1:d2:5c:51:6d:bf:02:7d:ab:16:
65:b8:a4:24:27:f2:f6:83:3e:b5:e1:7f:18:6b:58:
ed:d7:fb:6c:5c:0d:8d:f7:2a:03:44:46:cf:ce:26:
c5:ed:2d:37:36:90:fa:df:ee:f7:cd:b6:e8:d2:ea:
52:c5:df:c5:1c:a4:53:ac:7a:aa:26:dc:65:ae:35:
9d:ee:2b:47:39:69:dd:9b:6b:f1:bc:a6:ac:4f:3f:
7d:ea:82:b8:9d:3f:77:47:86:f1:65:a7:35:2e:25:
85:15:2b:48:b4:4b:d0:6c:30:1b:30:92:83:e8:92:
40:c7:e2:4a:91:b3:29:24:b5:fc:f9:1c:74:cd:34:
e6:36:65:dd:2d:17:68:1f:34:b3:ce:53:40:43:60:
ad:bf:ba:ea:ed:13:b8:12:c3:79:07:33:bd:fc:ef:
b8:4f:e5:3b:36:2d:13:8a:61:88:83:fc:e6:5b:6a:
53:43:ee:9e:ef:2c:31:bc:a0:71:b3:c7:fd:50:cb:
04:a0:d7:3d:1b:e4:72:3e:11:49:07:80:16:f1:f0:
ab:d7:68:8a:84:c9:97:05:6d:c2:67:75:0a:25:7c:
fc:c4:0c:eb:80:47:72:12:eb:c2:7f:51:9b:4b:f1:
97:56:a8:ba:22:d7:56:8e:cf:b4:8e:24:d6:45:5d:
5a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F2:5D:56:9E:06:1C:82:B6:FB:E4:43:EE:73:31:06:8C:05:47:C5
X509v3 Authority Key Identifier:
keyid:7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/FE5E15E2216911EC82319078C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
153.111.220.0/24
153.111.222.0/24
153.111.226.0/24
153.111.229.0/24
Signature Algorithm: sha256WithRSAEncryption
75:d5:b5:ba:f8:d9:aa:ac:63:fa:9c:37:c7:c0:d9:d8:74:f8:
b9:9a:e1:db:02:69:e7:ff:f3:35:43:76:3a:28:e2:07:15:a0:
5c:dc:cc:93:b9:34:24:03:22:78:8f:3f:bb:94:5b:e2:0b:ea:
7a:e9:21:5a:d8:ab:c0:c4:d5:59:0f:d1:91:96:e2:6d:bb:4f:
87:85:d7:ac:19:af:e2:9e:31:2f:2b:b7:34:f7:0e:2a:48:03:
66:13:47:fc:65:73:d5:0f:3c:2c:fe:1c:c4:55:a4:fa:3f:40:
ff:de:88:b9:ba:8c:23:31:b7:cf:7a:18:5e:1e:e0:33:cc:95:
a9:ba:4c:64:8f:3b:9e:e0:74:24:ad:9e:69:0f:34:aa:93:8a:
0b:1e:8f:e4:24:57:7e:de:4c:7b:20:ca:0e:b0:77:22:82:14:
a2:d9:a0:d5:cb:c6:f5:a2:c0:f2:e2:15:1e:32:a9:10:2c:fc:
bc:b2:ac:3f:f0:05:f1:65:fc:80:fc:14:aa:86:90:df:e0:45:
d7:c8:f3:39:63:c8:79:66:b8:35:eb:0f:d9:bf:50:4d:a3:13:
6d:d5:00:aa:99:ac:8d:10:21:23:2a:42:21:f1:ad:32:11:2c:
e0:19:f0:e3:75:d4:c3:a7:60:5f:ab:15:65:a9:d4:0a:e6:b1:
0b:02:70:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:08:07 2026 by rpki-client