
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/59228E922D7F11F1BBAF3E2694833773.roa
File: 59228E922D7F11F1BBAF3E2694833773.roa (raw, json)
Hash identifier: hwPX1z9+sFftkkARtagNuykdrGLd2buhU5oVRyewcCk=
Subject key identifier: E6:8A:71:DF:E9:08:13:03:BF:84:46:94:50:E3:A8:E2:1D:62:32:9C
Certificate issuer: /CN=A9176701/serialNumber=3F8A10FEC6C44478D63D33B257F0445D02A8A48C
Certificate serial: 1D
Authority key identifier: 3F:8A:10:FE:C6:C4:44:78:D6:3D:33:B2:57:F0:44:5D:02:A8:A4:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P4oQ_sbERHjWPTOyV_BEXQKopIw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/59228E922D7F11F1BBAF3E2694833773.roa
Signing time: Tue 19 May 2026 09:42:16 +0000
ROA not before: Tue 19 May 2026 09:42:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4826
IP address blocks: 203.16.40.0/21 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/P4oQ_sbERHjWPTOyV_BEXQKopIw.crl
rsync://rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/P4oQ_sbERHjWPTOyV_BEXQKopIw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P4oQ_sbERHjWPTOyV_BEXQKopIw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 09:16:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176701, serialNumber=3F8A10FEC6C44478D63D33B257F0445D02A8A48C
Validity
Not Before: May 19 09:42:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a0c3078-7c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3f:04:3d:97:cd:13:45:b4:1b:3e:7d:4a:bb:
a6:47:f9:ac:7f:fe:2e:38:f1:31:59:bf:86:8f:03:
b9:d9:02:16:fc:cb:44:5c:79:c6:d2:d3:2b:e9:2f:
dc:a7:79:53:6e:bb:c2:0c:b2:fc:71:92:3a:75:53:
64:13:d7:ff:e1:dd:a0:b2:8d:02:31:f9:65:6f:b1:
cf:20:78:87:da:26:24:1b:79:82:53:1c:93:91:83:
64:07:5b:4f:1d:c6:8d:fc:cb:7c:e8:78:40:c3:c5:
4c:42:76:d4:5e:fa:03:5f:78:c3:f1:99:0a:b7:41:
86:e0:36:9b:b3:cb:8d:60:d1:fe:e5:b7:b0:ed:b5:
a8:51:05:11:c6:b1:5e:b4:05:71:45:32:c1:d7:e5:
39:aa:67:81:ab:ec:8e:41:2c:78:0b:48:7d:fe:dc:
1f:47:d4:26:ca:98:28:ad:bc:c3:a2:df:ac:59:69:
5e:22:58:78:96:3a:a5:0b:b5:e2:94:cf:cb:08:dd:
21:8a:33:00:f3:65:65:2d:e2:f9:99:9c:e8:7a:e3:
b8:59:c4:41:64:ad:c2:6e:99:ff:5d:bd:e8:0b:1b:
26:e7:a3:56:c0:78:67:58:40:d8:4a:94:a1:29:5d:
04:73:c8:bd:52:76:af:57:97:99:d2:84:6b:24:ae:
b8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8A:71:DF:E9:08:13:03:BF:84:46:94:50:E3:A8:E2:1D:62:32:9C
X509v3 Authority Key Identifier:
keyid:3F:8A:10:FE:C6:C4:44:78:D6:3D:33:B2:57:F0:44:5D:02:A8:A4:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/P4oQ_sbERHjWPTOyV_BEXQKopIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P4oQ_sbERHjWPTOyV_BEXQKopIw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/59228E922D7F11F1BBAF3E2694833773.roa
sbgp-ipAddrBlock: critical
IPv4:
203.16.40.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:9a:ab:6e:22:b6:0e:48:7a:ce:68:2b:1c:13:9e:f1:7d:f3:
bc:86:4f:c6:d0:86:9c:89:ee:1d:a7:25:2d:b9:16:43:ae:ca:
e6:49:cc:37:15:1d:13:3b:c0:9a:6b:7b:3b:8f:f0:7d:ed:1c:
c5:d4:de:f7:18:84:42:23:1c:a9:a9:1f:f5:bb:59:ad:5a:10:
1f:e9:ba:3c:9c:e7:7a:59:e8:3f:f8:35:d2:e9:37:f9:25:24:
02:96:28:29:d8:67:58:9b:14:8f:bd:27:1c:60:f4:cf:99:df:
54:5d:2d:d2:e5:71:9d:6d:49:33:86:e1:df:b9:d0:d3:76:4d:
f6:81:ac:d0:2f:b7:65:3b:af:6c:b9:ef:b1:c1:f7:35:42:9d:
9a:c1:a6:fe:df:58:1c:c7:5f:0f:35:73:32:b8:b1:77:54:74:
f9:f6:2b:da:8a:54:01:3d:57:20:dd:26:60:94:6a:46:52:bd:
f6:ca:b4:3d:39:ed:bf:8e:a6:4b:cb:e1:68:17:f8:45:b2:90:
07:6c:ef:e9:75:fe:a4:92:0d:0d:b2:90:70:ee:b6:20:75:d4:
f9:ff:ed:3b:77:21:7b:af:75:88:f6:06:e7:30:1c:73:46:65:
79:af:10:ff:9b:c2:64:d7:3b:de:a5:8e:be:b6:89:8d:17:ad:
47:25:ca:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:58:06 2026 by rpki-client