
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/D672BC9638E411EF8BF0C15EC4F9AE02.roa
File: D672BC9638E411EF8BF0C15EC4F9AE02.roa (raw, json)
Hash identifier: 2Pw8KaLRV6aBD082BqEQ7VHZ0JNyhO7oJeP00MvVoik=
Subject key identifier: BC:54:76:36:C7:BD:3D:8E:AD:34:39:1B:54:BB:9A:67:D4:9E:8E:E7
Certificate issuer: /CN=A9178424/serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503
Certificate serial: 0144
Authority key identifier: 74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/D672BC9638E411EF8BF0C15EC4F9AE02.roa
Signing time: Tue 03 Mar 2026 05:45:29 +0000
ROA not before: Tue 03 Mar 2026 05:45:29 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 4764
IP address blocks: 192.135.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl
rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:45:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178424, serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503
Validity
Not Before: Mar 3 05:45:29 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a67579-5903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b4:49:9f:f8:a1:ff:57:3e:12:4a:ad:17:ae:
ff:3f:02:95:25:5e:7c:f9:6d:60:41:7a:12:3f:f5:
7f:33:89:bc:db:0a:13:83:02:75:be:b2:56:ff:44:
80:4a:7a:34:ec:bb:5f:d5:f8:f9:aa:d5:f9:ca:3f:
7f:6e:c9:7b:40:33:c4:b2:ca:1b:68:68:f3:40:61:
d6:4a:a5:78:0f:3c:84:19:0e:7b:42:51:36:dd:d2:
1d:4a:58:4b:2e:ad:5e:af:21:e2:3a:e1:4b:9e:78:
f0:d1:80:19:01:2d:94:e5:5f:33:5d:8d:0b:da:c3:
a8:1d:a7:72:e9:20:b0:66:df:df:84:ba:25:a3:cc:
9a:ee:43:bb:a8:19:11:fe:b9:e0:ae:27:b5:6c:e0:
d0:6c:76:37:b7:da:98:99:b2:46:19:8d:56:e8:a0:
34:5d:e1:fb:53:1d:0e:54:7f:38:ce:b0:06:5f:cd:
b2:70:b3:55:56:16:97:e5:27:3b:91:4f:20:b8:16:
d7:7c:68:ef:19:a9:ac:6e:35:9c:9b:48:6f:b1:28:
a5:9f:11:59:66:c1:87:b0:a6:aa:c3:b0:d5:e4:52:
e9:24:5d:bf:ce:3b:68:6b:fc:c9:2e:b9:d4:ed:a1:
1a:40:3f:05:31:d2:74:62:4d:6c:21:2d:af:e8:dd:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:54:76:36:C7:BD:3D:8E:AD:34:39:1B:54:BB:9A:67:D4:9E:8E:E7
X509v3 Authority Key Identifier:
keyid:74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/D672BC9638E411EF8BF0C15EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.135.208.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:91:40:2c:8d:2d:33:7e:c7:65:ff:42:2d:8d:d6:cc:90:99:
43:6f:de:72:2c:e7:02:0d:ab:1b:e5:d8:98:d7:56:31:6c:26:
f9:73:5a:37:1e:e0:60:4c:a1:2f:3a:ad:ff:cd:5d:a4:18:9a:
8a:b5:f7:fe:f4:56:9b:7d:51:c4:c2:40:6d:47:72:49:0e:97:
29:da:2f:64:d8:eb:db:bb:18:db:ac:6b:1e:6e:69:f4:4c:7b:
a8:49:e9:69:84:58:1e:c5:e3:0b:74:3c:f6:dc:98:3d:66:e4:
a9:2b:11:18:be:87:1e:94:6b:38:e2:95:c3:95:07:b1:80:ad:
dd:0b:c4:43:a9:17:11:25:a1:57:41:6a:61:03:b6:5c:5c:16:
f0:d0:95:80:d8:79:7a:e5:33:ee:bf:5b:d7:19:b9:99:c7:ed:
be:d1:4a:dd:ee:ca:b0:e6:c9:45:d3:4d:a2:42:14:9c:25:ff:
a8:01:e2:38:74:74:e1:a6:db:b2:ae:4f:25:ed:ac:64:fa:8a:
0c:b6:c2:7d:91:48:55:35:4d:31:e2:64:ae:9f:65:57:fb:dd:
ca:15:aa:44:1e:10:2b:00:7b:6d:5d:0b:9b:49:26:d2:59:87:
82:55:d3:38:7e:63:48:08:5f:b6:18:95:d2:56:4e:65:cd:d4:
e7:f7:9e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 09:50:12 2026 by rpki-client