
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/B7AA552680DB11F1BD8F0E495DA30FBC.roa
File: B7AA552680DB11F1BD8F0E495DA30FBC.roa (raw, json)
Hash identifier: NOVDQib+lECSnHFC4JVtukqfdz+DMQULILHyPpuxnlA=
Subject key identifier: 27:58:63:9C:DB:CD:55:FD:B8:60:48:82:62:D9:09:51:93:6C:45:20
Certificate issuer: /CN=A9172506/serialNumber=42BB0F3C1847E658BBE41418494CE89CE8E34488
Certificate serial: 0173
Authority key identifier: 42:BB:0F:3C:18:47:E6:58:BB:E4:14:18:49:4C:E8:9C:E8:E3:44:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/B7AA552680DB11F1BD8F0E495DA30FBC.roa
Signing time: Thu 16 Jul 2026 06:01:00 +0000
ROA not before: Thu 16 Jul 2026 06:01:00 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 2764
IP address blocks: 14.202.90.0/24 maxlen: 24
27.33.254.0/24 maxlen: 24
60.242.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.crl
rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 06:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371 (0x173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172506, serialNumber=42BB0F3C1847E658BBE41418494CE89CE8E34488
Validity
Not Before: Jul 16 06:01:00 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a58739b-3448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bb:c9:55:0b:11:7d:5f:db:83:d8:41:0f:4b:
59:9a:89:cd:18:85:d6:81:4f:b8:25:61:4d:e3:7c:
40:d3:aa:06:6e:a0:ef:23:5e:54:aa:46:dd:46:bf:
8a:38:a3:26:b2:c3:75:d4:62:ea:6a:b0:98:d2:93:
dc:07:90:ac:cd:51:ea:17:a0:11:bb:58:19:a9:e6:
c5:f7:77:67:55:2a:b5:24:82:22:65:f4:16:df:ed:
ae:10:ba:14:9b:ba:a3:89:31:51:6b:b3:03:6d:d4:
38:a4:e1:1d:c1:5a:b1:c2:26:dd:d8:0f:48:52:ad:
f2:bc:04:1d:27:20:13:43:94:46:f9:d2:cd:b4:8c:
52:f0:1c:c6:17:bf:a6:1c:68:2d:56:f2:b9:b5:41:
11:a5:8e:41:39:7f:a8:10:52:28:72:79:67:14:6b:
5d:79:a8:5e:2d:cb:00:6d:60:87:65:b1:4a:08:4b:
ae:d5:6c:60:75:b4:ac:d1:81:cb:65:f7:b6:ab:14:
cd:62:f3:79:ac:8c:10:f6:06:30:65:34:cd:7c:a4:
a6:08:01:ab:a7:02:3c:8a:aa:c2:40:7c:94:00:a4:
cd:88:85:85:35:f5:b2:dc:ce:2d:23:ae:6f:00:4f:
dc:ed:1a:39:24:0e:1a:0b:a1:d2:05:74:a6:11:a4:
4c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:58:63:9C:DB:CD:55:FD:B8:60:48:82:62:D9:09:51:93:6C:45:20
X509v3 Authority Key Identifier:
keyid:42:BB:0F:3C:18:47:E6:58:BB:E4:14:18:49:4C:E8:9C:E8:E3:44:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/B7AA552680DB11F1BD8F0E495DA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
14.202.90.0/24
27.33.254.0/24
60.242.29.0/24
Signature Algorithm: sha256WithRSAEncryption
68:18:fa:a1:b5:a5:91:60:6e:ea:46:31:d1:86:ed:14:bf:92:
d8:09:f9:a9:9f:ea:ad:8a:86:5e:a5:b9:92:29:c1:25:96:56:
6c:56:a8:f0:59:5b:08:db:40:a8:c9:dc:78:0f:90:f8:45:39:
3f:24:ee:dd:fa:0b:57:a1:6d:33:5e:48:78:52:45:f0:bf:a3:
56:e6:85:47:34:4c:88:3f:e2:5f:9c:10:68:98:67:40:49:d1:
ea:72:d4:32:fc:20:bb:4e:88:7d:a5:79:c3:b8:76:90:ab:a2:
48:a0:47:a2:f8:71:e8:4e:b6:78:fb:c4:a0:91:0d:47:5d:90:
a2:01:92:61:f9:5d:1d:a6:95:02:2d:f4:6b:66:ba:f7:16:72:
28:1b:02:fb:f5:07:88:43:ca:d9:7b:0b:d1:0c:70:a7:ef:01:
e2:a6:6c:a9:e5:c4:2c:0b:69:f4:83:97:a2:8a:1a:8d:ea:ea:
06:4a:fb:8e:ff:a9:40:5b:21:f6:d0:53:09:de:50:67:b0:39:
ce:a1:67:55:85:3c:5c:65:94:8c:9c:47:df:9d:d2:ea:6f:7d:
62:85:dd:a3:6c:0c:c7:5b:22:fd:18:e1:5e:09:86:fb:72:ad:
ea:b2:84:2f:e6:28:8f:64:b3:53:0e:a7:d2:f8:11:83:e0:47:
d5:8c:a1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 05:04:16 2026 by rpki-client