
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/8D6DE39AABFB11F1BD809E3B6A11F970.roa
File: 8D6DE39AABFB11F1BD809E3B6A11F970.roa (raw, json)
Hash identifier: 0jsLrFd0r2t1mnTgi3WM/0wopvNFV+Zm/9y/PiTR4bk=
Subject key identifier: 71:05:C0:11:70:9B:49:3B:10:76:53:5C:3A:1F:B4:62:63:84:DA:E5
Certificate issuer: /CN=A917A95A/serialNumber=4D62DDEF19BB452F1419561008CB121C829920DD
Certificate serial: 02
Authority key identifier: 4D:62:DD:EF:19:BB:45:2F:14:19:56:10:08:CB:12:1C:82:99:20:DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TWLd7xm7RS8UGVYQCMsSHIKZIN0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/8D6DE39AABFB11F1BD809E3B6A11F970.roa
Signing time: Wed 09 Sep 2026 03:07:13 +0000
ROA not before: Wed 09 Sep 2026 03:07:12 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 8075
IP address blocks: 175.106.28.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/TWLd7xm7RS8UGVYQCMsSHIKZIN0.crl
rsync://rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/TWLd7xm7RS8UGVYQCMsSHIKZIN0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TWLd7xm7RS8UGVYQCMsSHIKZIN0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 09:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A95A, serialNumber=4D62DDEF19BB452F1419561008CB121C829920DD
Validity
Not Before: Sep 9 03:07:12 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6aa0cd60-be88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bd:08:4b:84:65:c0:f2:e3:99:a6:8b:e8:92:
ce:da:4c:91:cf:d3:bb:b5:f7:78:54:01:f7:39:6f:
ae:8f:dd:99:fb:98:92:52:00:f7:38:fd:c7:07:f7:
83:a6:0e:31:4b:bc:b5:51:bd:51:6a:a4:f5:f3:96:
e6:b5:84:f2:45:81:90:f9:8f:39:a0:58:9a:b5:c2:
9b:4e:0c:34:d1:6c:89:e5:60:ab:89:1c:f6:cd:8a:
c8:a1:db:57:71:eb:16:db:fe:f7:5b:4b:1f:77:ca:
2d:6e:cf:3b:bd:a0:34:2a:8e:17:f0:fd:21:ab:e2:
4f:ae:85:86:d3:8e:98:0b:60:fa:3a:94:fc:53:0e:
12:36:26:80:32:05:af:a9:60:ad:21:9a:b3:2b:34:
4b:1e:0f:66:2b:eb:3e:15:9e:f8:19:9a:4b:e6:2d:
48:cb:ef:f9:a0:a0:8f:b1:00:84:7c:98:4d:ad:ea:
e1:95:a3:9a:5b:26:cd:c5:8d:3d:e6:42:53:3d:e9:
68:51:e1:42:fd:2a:8a:54:6a:b2:76:cd:d8:8e:d1:
d0:d6:af:dd:0c:89:7a:21:f6:b0:ce:d4:4a:9a:66:
5c:a8:7b:d2:13:4e:1e:1a:0f:0d:36:4a:85:cb:ac:
e3:37:42:2a:ac:88:a0:b6:22:07:cb:ba:15:67:47:
ec:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:05:C0:11:70:9B:49:3B:10:76:53:5C:3A:1F:B4:62:63:84:DA:E5
X509v3 Authority Key Identifier:
keyid:4D:62:DD:EF:19:BB:45:2F:14:19:56:10:08:CB:12:1C:82:99:20:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/TWLd7xm7RS8UGVYQCMsSHIKZIN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TWLd7xm7RS8UGVYQCMsSHIKZIN0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/8D6DE39AABFB11F1BD809E3B6A11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
175.106.28.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:d7:2d:c7:78:76:54:c2:ac:6f:26:fe:ac:46:04:ba:74:e9:
ef:72:98:48:b2:96:ed:ef:76:e9:6c:e1:23:df:e8:f1:88:7b:
a3:86:6a:3f:f7:60:1f:f9:fd:e9:1f:f7:2e:b9:6a:7f:cc:b6:
49:0e:8b:2b:59:32:f7:82:5e:a9:70:45:99:14:96:1f:88:ad:
a3:4a:d7:51:08:2d:99:c0:10:2d:23:b3:44:a5:ff:3f:9c:f4:
2f:9e:90:f7:44:9b:2a:15:0f:8f:07:f4:8e:6c:36:8a:a3:33:
b3:f7:9b:e4:4e:a8:c0:1a:26:12:b9:89:a1:ce:6c:6f:bc:27:
ed:8e:91:5a:75:66:86:da:3e:d3:50:34:e5:e9:1b:48:7c:b0:
73:33:8a:5a:4e:21:91:1e:8d:cc:e8:bd:56:55:fc:90:12:fb:
a2:ac:39:21:f5:70:00:41:19:6e:3f:61:83:7e:e5:c5:6f:20:
31:68:fd:48:35:ff:e9:17:b4:46:0d:93:b4:e5:44:28:69:af:
38:22:07:95:0c:db:0a:59:63:17:4d:9f:62:a3:88:a0:99:45:
92:77:30:c8:67:97:8e:6d:72:7e:9b:da:97:d3:5b:1f:f8:41:
be:05:e8:91:9b:fd:89:e4:af:59:e1:1a:fb:d8:07:6f:97:4f:
e3:0e:d2:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 19 08:06:05 2026 by rpki-client