
$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/69055896794A11F1A904CD4C78A30FBC.roa
File: 69055896794A11F1A904CD4C78A30FBC.roa (raw, json)
Hash identifier: bWXgWix3kh5/9XJOBjaufZojq+wyCZBq+UEF65Xm7VE=
Subject key identifier: 04:7A:E8:D4:72:D0:19:63:BC:F5:79:C7:0B:1B:8C:08:89:69:A4:03
Certificate issuer: /CN=A917748E/serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Certificate serial: 02C2
Authority key identifier: AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/69055896794A11F1A904CD4C78A30FBC.roa
Signing time: Mon 06 Jul 2026 20:12:48 +0000
ROA not before: Mon 06 Jul 2026 20:12:48 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 198949
IP address blocks: 43.225.52.0/22 maxlen: 24
103.21.58.0/23 maxlen: 24
137.59.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Jul 2026 01:28:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 706 (0x2c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917748E, serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Validity
Not Before: Jul 6 20:12:48 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a4c0c3f-53f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:96:97:c2:c0:10:b1:0d:c8:48:e1:ee:05:
c2:68:3b:d6:f5:4a:f9:94:8c:b3:8d:70:92:e8:b2:
be:f4:67:81:34:b3:74:0f:20:71:bb:b8:29:2c:44:
cf:ea:da:8c:24:9c:88:26:53:42:c0:7f:58:be:fa:
cf:c3:9a:82:ff:6f:e6:7b:d5:54:2e:77:99:2a:8f:
b4:ed:d7:0b:00:28:b5:ab:10:82:af:b5:46:a4:7e:
54:aa:f7:fb:b8:db:7b:c2:ec:45:85:d6:cf:bb:56:
61:1e:10:f3:93:0d:5b:63:a1:b4:6d:64:20:98:c1:
47:6b:35:d7:00:d1:10:d6:b9:c0:7c:c1:c3:6a:15:
27:15:c6:3e:71:b1:22:0c:84:cf:fc:74:22:c6:1c:
69:16:64:d9:2d:50:38:c3:e9:b0:cb:78:3a:3e:de:
f1:75:2b:c7:d1:ec:d3:c7:38:db:a8:d4:b0:ec:f7:
0c:17:5e:9f:c3:f2:26:13:b5:7c:02:a1:2c:5f:bd:
ba:0e:a3:60:19:e9:64:03:19:e0:c9:b1:14:f7:4c:
d4:14:b0:32:f6:30:d4:aa:6c:17:72:41:7a:f2:00:
a9:58:3f:31:e5:bd:41:93:46:8f:a0:1f:d9:4d:95:
ac:73:7d:d4:29:54:b6:a1:12:89:47:f9:56:f2:34:
5a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7A:E8:D4:72:D0:19:63:BC:F5:79:C7:0B:1B:8C:08:89:69:A4:03
X509v3 Authority Key Identifier:
keyid:AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/69055896794A11F1A904CD4C78A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
43.225.52.0/22
103.21.58.0/23
137.59.148.0/22
Signature Algorithm: sha256WithRSAEncryption
03:62:55:30:36:da:fb:b2:d9:9d:10:c2:5c:05:74:7e:fa:b7:
32:c5:b5:d9:d0:6c:cf:4a:67:c3:ec:9b:0b:e9:e6:cc:18:cd:
c4:09:88:6f:20:b0:9c:6a:11:9d:df:18:90:f0:1e:89:de:e6:
bc:3b:f6:bb:9a:34:13:cf:b0:7a:e1:92:4e:e4:e1:6c:fd:64:
ab:06:71:3f:09:75:2a:a7:a9:c0:19:1c:10:f4:f0:bf:e2:23:
15:66:97:5b:da:92:48:34:29:7a:ff:e6:ba:80:4a:d2:82:e8:
4d:21:ca:ea:af:e6:9d:ca:f4:11:d0:65:8a:bf:a3:7c:9d:db:
ad:d4:e4:fc:4f:cf:c7:d3:ef:bc:e3:2a:e0:ad:c5:76:0f:34:
eb:9a:d6:e2:27:aa:8c:1e:f6:ca:02:d3:d9:ff:ac:88:86:d4:
be:2d:cb:29:e3:5f:29:35:73:ca:31:37:c2:8d:5d:71:9c:b5:
80:a0:bc:63:a8:3a:20:14:c0:15:95:d5:95:3c:4f:cd:34:39:
dc:de:7d:f6:90:95:c4:85:a4:e5:81:ce:3b:83:59:f1:1d:5c:
b7:2f:1c:68:b3:46:15:bc:6e:5b:d0:bb:e1:15:8c:5d:2c:4c:
a2:2e:18:1b:11:9a:34:48:8a:26:07:69:05:5d:d6:38:8c:7a:
da:5d:b7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:48:45 2026 by rpki-client