
$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/6A2A6EDC794A11F1A904CD4C78A30FBC.roa
File: 6A2A6EDC794A11F1A904CD4C78A30FBC.roa (raw, json)
Hash identifier: Y6jtzdz9kT3bHkHJ9MrPhnp6vLxqvbB8KNaLyr88I9M=
Subject key identifier: 40:32:BE:DE:AD:64:72:0D:2A:84:0B:75:25:7F:ED:5A:FE:31:C7:CB
Certificate issuer: /CN=A917748E/serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Certificate serial: 02C4
Authority key identifier: AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/6A2A6EDC794A11F1A904CD4C78A30FBC.roa
Signing time: Mon 06 Jul 2026 20:12:52 +0000
ROA not before: Mon 06 Jul 2026 20:12:52 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 31898
IP address blocks: 43.225.52.0/22 maxlen: 24
103.21.58.0/23 maxlen: 24
137.59.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Jul 2026 00:41:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 708 (0x2c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917748E, serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Validity
Not Before: Jul 6 20:12:52 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a4c0c44-05f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d6:93:65:74:73:53:7a:73:62:43:a5:21:be:
6c:07:b7:9b:11:a7:ac:d1:49:cc:f2:81:4c:41:e6:
2a:4b:39:a5:b1:31:2f:63:b6:78:fe:3e:fe:65:95:
58:26:fe:83:df:6d:77:f4:58:c7:bf:cc:1e:5d:4e:
37:0a:4c:31:45:49:dd:82:79:5b:c8:19:e8:a6:e4:
e1:a5:a0:71:60:55:79:a3:bc:56:96:c6:20:4d:66:
c0:c5:b7:5f:15:bc:1f:1f:bb:64:90:af:07:64:f3:
22:16:30:7a:bb:a7:be:b8:6a:37:34:2d:6a:25:4d:
72:75:84:76:eb:c6:aa:85:44:7d:91:3b:58:5a:c0:
f5:9a:c1:db:b9:e7:16:59:55:db:18:15:cb:34:8e:
70:ab:39:e8:4f:f5:f1:92:63:58:35:91:f2:fd:61:
47:81:87:23:3b:33:76:e6:96:ad:7a:9f:a6:d8:18:
d1:0a:48:d8:1e:b5:bc:12:d5:eb:be:04:fc:ff:be:
56:88:fc:79:cd:54:2e:75:eb:cd:77:80:68:76:f4:
ba:a9:f0:07:ca:a3:18:f8:70:d3:ad:ee:ac:ba:81:
02:e9:53:0a:da:67:19:17:12:fd:17:a3:74:c6:fc:
73:6c:bd:59:97:7c:27:06:5b:61:c2:5e:dc:77:06:
1a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:32:BE:DE:AD:64:72:0D:2A:84:0B:75:25:7F:ED:5A:FE:31:C7:CB
X509v3 Authority Key Identifier:
keyid:AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/6A2A6EDC794A11F1A904CD4C78A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
43.225.52.0/22
103.21.58.0/23
137.59.148.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:c1:59:16:26:8b:ec:bc:53:c7:49:71:0e:a4:0e:3e:f1:71:
9d:27:dc:b4:3d:8e:db:4c:31:3c:40:b4:8f:ce:c7:a9:bc:b3:
31:58:6a:f7:ce:bc:b3:0d:c4:ca:5f:82:ae:4c:cc:58:d2:a6:
a4:a6:5a:2e:b7:2d:60:41:07:dc:43:6f:58:cd:fd:83:e8:e9:
26:eb:7f:55:9a:92:fc:8a:13:13:13:10:39:08:db:77:a7:8f:
9c:5e:81:1a:cb:b7:49:90:23:d5:9a:3c:bc:b7:ee:81:e6:85:
b1:c3:f8:76:ff:10:cc:df:e3:56:f6:07:5d:28:23:e1:d1:7d:
49:aa:84:b2:95:a5:96:2f:11:ac:c5:f1:e0:99:ef:8d:01:54:
7e:f9:f5:58:e8:b3:93:fa:9e:22:ff:10:5f:36:a8:77:2d:cb:
09:33:31:4c:00:04:de:ae:41:07:f4:29:d4:45:ff:63:d2:07:
e3:38:2f:b3:d8:c8:e6:5a:5e:15:bd:1e:30:d2:af:b3:08:76:
70:9a:08:20:13:2d:9d:f7:1c:06:b8:1b:cd:52:73:dc:35:e9:
55:c1:4d:7d:84:a0:77:d5:7e:db:8b:fd:3c:2d:0d:3b:bf:5d:
bf:45:c7:81:11:92:d2:d0:cc:e4:56:20:98:0d:59:16:0b:2f:
f7:9a:a9:f5
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICAsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc0OEUxMTAvBgNVBAUTKEFFOTM4M0E5M0I2QzVBMTM1RDI2MTNBOTdDNURFQzk2
MDk2MjMzRjEwHhcNMjYwNzA2MjAxMjUyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRjMGM0NC0wNWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxdaTZXRzU3pzYkOlIb5sB7ebEaes0UnM8oFMQeYqSzmlsTEvY7Z4/j7+ZZVY
Jv6D32139FjHv8weXU43CkwxRUndgnlbyBnopuThpaBxYFV5o7xWlsYgTWbAxbdf
FbwfH7tkkK8HZPMiFjB6u6e+uGo3NC1qJU1ydYR268aqhUR9kTtYWsD1msHbuecW
WVXbGBXLNI5wqznoT/XxkmNYNZHy/WFHgYcjOzN25patep+m2BjRCkjYHrW8EtXr
vgT8/75WiPx5zVQudevNd4BodvS6qfAHyqMY+HDTre6suoEC6VMK2mcZFxL9F6N0
xvxzbL1Zl3wnBlthwl7cdwYanQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFEAyvt6t
ZHINKoQLdSV/7Vr+McfLMB8GA1UdIwQYMBaAFK6Tg6k7bFoTXSYTqXxd7JYJYjPx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS81NzExNTlFMjRG
QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9ycE9EcVR0c1doTmRKaE9wZkYzc2xnbGlN
X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JwT0RxVHRzV2hOZEpoT3BmRjNzbGdsaU1fRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Nzc0OEUvNTcxMTU5RTI0RkE5MTFFREFERTUxNTdDQzRGOUFFMDIvNkEyQTZFREM3
OTRBMTFGMUE5MDRDRDRDNzhBMzBGQkMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQCK+E0AwQBZxU6AwQCiTuUMA0GCSqGSIb3DQEBCwUAA4IBAQCjwVkW
JovsvFPHSXEOpA4+8XGdJ9y0PY7bTDE8QLSPzsepvLMxWGr3zryzDcTKX4KuTMxY
0qakplouty1gQQfcQ29Yzf2D6Okm639VmpL8ihMTExA5CNt3p4+cXoEay7dJkCPV
mjy8t+6B5oWxw/h2/xDM3+NW9gddKCPh0X1JqoSylaWWLxGsxfHgme+NAVR++fVY
6LOT+p4i/xBfNqh3LcsJMzFMAATerkEH9CnURf9j0gfjOC+z2MjmWl4VvR4w0q+z
CHZwmgggEy2d9xwGuBvNUnPcNelVwU19hKB31X7bi/08LQ07v12/RceBEZLS0Mzk
ViCYDVkWCy/3mqn1
-----END CERTIFICATE-----
Generated at Mon Jul 13 02:44:43 2026 by rpki-client