
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/D8375D30A69B11F1A29A77493411F970.roa
File: D8375D30A69B11F1A29A77493411F970.roa (raw, json)
Hash identifier: lOlX9Lvr/uUrJ7LnrKqqn7C2gTnu/MU8GWVidO+ZiN4=
Subject key identifier: FC:11:91:D1:C1:35:10:E5:E3:B5:4B:F1:F7:C1:3C:F3:2B:10:E0:65
Certificate issuer: /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Certificate serial: 5A
Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/D8375D30A69B11F1A29A77493411F970.roa
Signing time: Wed 02 Sep 2026 06:59:30 +0000
ROA not before: Wed 02 Sep 2026 06:59:30 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 141031
IP address blocks: 151.123.232.0/24 maxlen: 26
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 16:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Validity
Not Before: Sep 2 06:59:30 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a97c952-6dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c0:51:54:c7:ee:c1:e0:83:ad:43:e8:42:92:
39:63:08:00:a8:be:e7:86:44:4e:ff:d6:be:d7:8e:
93:4b:61:93:13:57:8d:e8:09:55:1b:01:1f:b0:69:
4f:11:19:6a:f6:ca:98:20:e7:89:23:02:08:e6:f0:
2d:4a:83:47:35:f1:b3:02:9a:37:b1:1c:c5:d0:fb:
73:92:b3:db:44:5a:a7:84:41:a5:46:87:0b:a3:99:
13:c4:48:12:d0:f0:62:3e:7d:a4:c9:e5:cf:4e:3f:
4f:ef:2f:2a:3e:f2:21:d5:3a:e7:f7:b2:e1:c3:40:
93:3c:84:60:a7:86:3c:2a:10:45:5d:80:a8:0a:3e:
c4:f2:c6:33:fc:d4:57:f4:90:96:7e:d7:b7:11:7c:
cd:46:5a:e0:a7:da:e1:66:6d:b0:ac:31:7c:c1:58:
a5:4d:dc:69:51:74:4c:8a:ba:db:78:93:3e:a9:59:
77:02:b8:9d:e2:ad:56:b5:a6:9e:89:65:64:99:6d:
55:f6:23:f3:79:0b:84:01:39:7d:60:ce:9b:4c:fb:
53:3f:1e:7e:14:7b:bc:7d:3b:19:dd:6a:12:f2:1b:
f6:19:e5:06:d8:f2:a8:7c:80:90:d9:8c:d1:70:5e:
71:93:d8:d4:ff:c1:4b:e7:1b:f7:0e:27:40:8f:75:
55:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:11:91:D1:C1:35:10:E5:E3:B5:4B:F1:F7:C1:3C:F3:2B:10:E0:65
X509v3 Authority Key Identifier:
keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/D8375D30A69B11F1A29A77493411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
151.123.232.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:e1:fc:b3:11:2d:b1:24:9a:e1:b1:21:04:0d:62:f3:17:ef:
1c:63:7c:5a:a8:4f:45:02:00:a6:db:23:f6:a2:dd:97:81:a7:
d5:02:f9:7a:da:b4:cd:5c:18:38:7a:80:f2:94:b5:48:cd:01:
1f:ff:56:bb:2b:91:2f:de:41:ce:f9:ba:c9:df:b2:38:3b:79:
72:69:5d:25:a7:97:a5:5c:b1:20:8d:72:8f:b0:7d:52:60:ef:
cb:2f:b5:7f:cc:f1:7e:eb:90:6f:cd:ba:54:51:42:fb:a8:ff:
98:f2:34:8a:bb:4a:3b:68:15:82:4c:c5:f6:1e:4e:cb:32:5d:
7b:c7:6c:c2:cd:8d:bb:18:ae:e8:c8:99:13:11:4d:5b:e2:e6:
8e:64:2e:df:53:a3:20:c7:77:28:e0:92:6b:c6:8d:cd:5f:00:
50:f8:f7:27:2d:35:d7:df:a1:22:98:85:b8:18:45:ad:2e:71:
2c:cf:ec:19:65:a8:1f:4b:2d:55:6f:fb:3c:69:b9:2b:55:e5:
0c:c9:25:6d:e5:ea:45:ed:bc:4a:ef:82:49:3e:a1:4f:22:93:
0c:e1:af:fc:c9:46:d1:04:87:d8:3f:82:57:73:38:b5:b4:b6:
30:39:3a:5e:8f:7b:e1:9e:bb:a4:53:f5:0f:80:9d:e9:f2:89:
76:50:19:7c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:20:48 2026 by rpki-client