
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/AAEECC6A6E2D11F1A887915478A30FBC.roa
File: AAEECC6A6E2D11F1A887915478A30FBC.roa (raw, json)
Hash identifier: JY+2F4fpy8yZBneZcoqizCFFml/1qiEJ9kZd9Mylttk=
Subject key identifier: 01:B8:51:4D:D8:13:2A:6C:94:74:0D:9B:81:C1:84:42:BF:CA:77:37
Certificate issuer: /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Certificate serial: 2F
Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/AAEECC6A6E2D11F1A887915478A30FBC.roa
Signing time: Mon 22 Jun 2026 11:29:45 +0000
ROA not before: Mon 22 Jun 2026 11:29:45 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 140900
IP address blocks: 151.123.228.0/24 maxlen: 24
151.123.229.0/24 maxlen: 24
151.123.230.0/24 maxlen: 24
151.123.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 16:13:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Validity
Not Before: Jun 22 11:29:45 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a391ca8-7709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:b1:90:1e:14:75:84:9b:cd:47:d3:ab:04:
8b:de:9e:cf:a9:a7:e3:ab:8a:a3:38:ea:90:7e:d9:
6b:16:c9:20:8c:d3:db:93:e2:bb:dd:88:77:b8:30:
62:1b:2f:fa:a9:fb:11:8a:29:a5:8b:8d:fa:f8:82:
88:16:fb:26:5c:17:ba:a9:0c:63:a7:b6:03:06:62:
61:4c:1b:ac:bd:e0:84:19:3a:f4:eb:3e:a1:bd:de:
bf:7b:28:cb:d5:8c:bc:28:25:11:62:87:cc:ea:da:
7a:6e:f5:c5:d4:10:45:87:f8:31:04:8a:44:cc:b8:
a5:de:4d:45:0c:2c:45:81:09:6a:79:70:57:ac:89:
b4:86:25:c7:ae:64:96:70:49:48:c5:85:e8:22:d0:
48:c2:e0:b7:a5:82:d5:07:cd:4f:14:93:d5:61:f8:
a3:62:ae:43:ef:27:ad:d3:98:cb:00:e4:dd:ce:6f:
5d:a0:12:0f:e3:49:69:1d:01:04:d5:27:04:70:7c:
db:c5:3e:2e:6b:df:b2:dc:04:17:12:ca:b7:56:b2:
6d:0a:d5:c6:12:6a:02:7e:3a:a7:da:05:29:3b:ff:
cf:0e:ed:47:4a:74:c4:74:39:86:6d:aa:8b:96:65:
94:c5:60:ba:0f:f8:e4:07:bb:01:be:a5:d3:b3:71:
e2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B8:51:4D:D8:13:2A:6C:94:74:0D:9B:81:C1:84:42:BF:CA:77:37
X509v3 Authority Key Identifier:
keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/AAEECC6A6E2D11F1A887915478A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
151.123.228.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:03:1c:4a:4c:a5:a1:66:03:a9:8d:6c:12:69:ef:42:69:7f:
26:94:90:9b:3e:e3:b7:1e:d0:61:40:3a:7f:31:c4:db:9a:33:
1c:3b:e4:a1:a4:96:17:c7:9c:d5:e8:31:d4:47:e0:ce:e3:b6:
7a:f1:8b:e3:7a:6d:86:ce:a8:e7:99:33:5e:9b:ce:cf:bd:f8:
8a:b3:f4:e0:6e:f0:49:ae:4f:75:43:8a:83:e1:2a:e0:d4:fa:
2c:57:e0:49:9f:58:66:fe:2a:0c:74:11:87:28:e7:11:ff:f0:
1c:9b:e0:30:3c:fd:7b:fe:f0:88:d7:87:e3:d2:0f:1f:c4:45:
cc:a1:18:97:ed:5d:b3:65:5f:77:40:ab:3c:4b:56:79:8f:a1:
be:ec:32:12:85:54:b0:98:18:50:8f:97:0b:16:9e:d4:c4:f6:
40:af:d4:5b:f9:9b:83:05:fd:ba:cd:92:8a:d4:bc:bf:3e:5d:
35:06:69:87:c4:ee:74:0a:46:cb:b2:bb:e8:21:5a:54:16:f2:
be:7a:11:1d:f1:8d:7b:61:b8:e8:bb:2f:10:3d:e2:65:30:6d:
c0:f6:48:eb:67:fd:4b:89:f3:ba:76:74:83:0e:91:06:5b:a8:
29:38:99:a3:1f:7b:cf:8d:46:7f:b0:33:e0:92:8c:d0:88:47:
23:25:a0:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:42 2026 by rpki-client