
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/495EADB4ABFC11F1817FA89C6A11F970.roa
File: 495EADB4ABFC11F1817FA89C6A11F970.roa (raw, json)
Hash identifier: FBNqPMPTEYHVvGU77MxzJrj7KAVcUXffGlg20+PyVOs=
Subject key identifier: 78:63:6E:74:91:64:C1:A7:4A:CA:D2:63:50:F6:A6:0A:76:87:F4:31
Certificate issuer: /CN=A917A95A/serialNumber=4D62DDEF19BB452F1419561008CB121C829920DD
Certificate serial: 09
Authority key identifier: 4D:62:DD:EF:19:BB:45:2F:14:19:56:10:08:CB:12:1C:82:99:20:DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TWLd7xm7RS8UGVYQCMsSHIKZIN0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/495EADB4ABFC11F1817FA89C6A11F970.roa
Signing time: Wed 09 Sep 2026 03:35:50 +0000
ROA not before: Wed 09 Sep 2026 03:35:50 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 0
IP address blocks: 175.106.30.0/23 maxlen: 24
2400:bc00::/36 maxlen: 36
2400:bc00:1000::/37 maxlen: 37
2400:bc00:1800::/44 maxlen: 44
2400:bc00:1810::/48 maxlen: 48
2400:bc00:1813::/48 maxlen: 48
2400:bc00:1818::/45 maxlen: 45
2400:bc00:1820::/43 maxlen: 43
2400:bc00:1840::/42 maxlen: 42
2400:bc00:1880::/41 maxlen: 41
2400:bc00:1900::/40 maxlen: 40
2400:bc00:1a00::/39 maxlen: 39
2400:bc00:1c00::/38 maxlen: 38
2400:bc00:2000::/35 maxlen: 35
2400:bc00:4000::/34 maxlen: 34
2400:bc00:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/TWLd7xm7RS8UGVYQCMsSHIKZIN0.crl
rsync://rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/TWLd7xm7RS8UGVYQCMsSHIKZIN0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TWLd7xm7RS8UGVYQCMsSHIKZIN0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 09:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A95A, serialNumber=4D62DDEF19BB452F1419561008CB121C829920DD
Validity
Not Before: Sep 9 03:35:50 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6aa0d416-7b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a3:05:38:5d:38:d8:5b:e3:4d:95:d5:1f:59:
a0:86:ae:b7:5c:05:8e:ba:ae:f2:ba:66:d7:84:5b:
d5:18:d6:d3:8d:4a:c2:34:e4:a6:c4:b2:ef:48:f4:
42:b8:30:99:81:cc:b6:be:ee:44:cb:f9:b4:52:7c:
e0:58:b1:2c:19:30:82:92:2f:e2:30:03:f3:e7:67:
cc:ef:f9:1b:d7:59:e9:d8:be:5d:eb:00:31:2a:b5:
d7:ed:6f:24:4b:54:37:e7:0c:e7:19:14:3f:f4:81:
64:9f:bc:95:1d:f4:f3:00:49:84:fc:55:64:61:c4:
24:20:ff:b4:f5:fd:ba:bf:8d:63:07:a9:43:f6:89:
8f:1f:b9:66:61:de:68:58:ea:5e:c5:03:51:07:27:
b7:f3:e4:31:b9:d1:f5:d7:c9:18:6b:00:e7:30:9b:
94:c6:81:ab:58:25:62:00:d4:d0:cb:4f:dd:7d:3a:
35:01:ab:39:40:76:00:35:ef:a0:de:ee:7d:81:ce:
95:1e:16:df:53:25:09:a3:57:8f:a1:0f:20:b7:20:
dc:9a:b5:a0:0e:a0:a5:a9:a7:20:e7:c3:12:e1:69:
a3:35:69:0d:1f:18:f7:18:ea:75:78:a1:7d:5d:51:
51:0e:72:7a:f5:8b:4d:bf:0c:ce:af:f4:41:51:25:
96:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:63:6E:74:91:64:C1:A7:4A:CA:D2:63:50:F6:A6:0A:76:87:F4:31
X509v3 Authority Key Identifier:
keyid:4D:62:DD:EF:19:BB:45:2F:14:19:56:10:08:CB:12:1C:82:99:20:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/TWLd7xm7RS8UGVYQCMsSHIKZIN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TWLd7xm7RS8UGVYQCMsSHIKZIN0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/495EADB4ABFC11F1817FA89C6A11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
175.106.30.0/23
IPv6:
2400:bc00::-2400:bc00:1810:ffff:ffff:ffff:ffff:ffff
2400:bc00:1813::/48
2400:bc00:1818::-2400:bc00:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5d:f0:e9:7a:92:c0:36:85:af:c0:7f:46:29:da:b8:bc:f1:42:
ca:55:47:c2:e3:f2:25:15:db:d9:f6:4e:d3:d7:17:63:92:2e:
1e:6d:9b:39:52:8e:87:a1:4b:e5:ed:ca:32:d9:0b:7b:59:76:
7d:ef:28:39:09:34:35:a9:38:9c:47:5c:af:d2:1d:63:f6:c5:
6a:0c:e8:4b:c0:67:77:16:1b:42:ae:2b:21:f8:20:27:0f:fd:
b5:0e:b9:ed:ee:ac:a9:26:5d:3b:56:da:ba:20:41:c6:e2:3e:
f9:bf:55:3f:14:ae:44:aa:d4:61:7f:9f:bf:57:3b:8c:40:48:
ec:c0:aa:99:7a:52:dd:b1:c0:e2:bd:0f:b6:59:4a:11:65:2c:
64:c8:b3:49:03:57:6e:5b:cf:8b:4f:8e:57:23:dc:3e:ed:dd:
ef:4b:8d:c4:37:25:a8:b9:57:99:da:5f:3b:67:a0:11:43:c9:
db:1d:1b:c8:73:e4:d2:af:39:9f:ac:ec:04:d7:98:a8:f5:41:
8b:08:0c:4b:96:a5:76:a4:1b:6e:0d:7c:90:79:85:4a:b4:4d:
a2:56:b3:20:a2:d7:62:89:fe:5e:77:6e:16:c1:ac:d1:bc:3e:
87:b1:ac:84:be:f2:7a:4a:99:47:c7:ba:bd:3e:3c:16:d4:7a:
6d:00:12:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 08:04:43 2026 by rpki-client