
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/CCEE4F76CAC711EF80553A61C4F9AE02.roa
File: CCEE4F76CAC711EF80553A61C4F9AE02.roa (raw, json)
Hash identifier: 7JbMjB8d3ZxwfoscdTBgnl9vn7C/XbttuTcaCLuo0DU=
Subject key identifier: 5A:B5:3A:49:F5:7C:BD:54:4B:27:E6:55:F4:FB:32:86:39:19:17:E0
Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
Certificate serial: 0420
Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/CCEE4F76CAC711EF80553A61C4F9AE02.roa
Signing time: Mon 17 Aug 2026 01:49:41 +0000
ROA not before: Mon 17 Aug 2026 01:49:41 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 9664
IP address blocks: 2400:9ce0:5000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl
rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:21:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1056 (0x420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
Validity
Not Before: Aug 17 01:49:41 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8268b5-321a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:2c:68:90:d3:d4:8f:86:54:c2:5b:e9:a2:
80:e9:77:dd:78:2e:da:7c:d3:2e:07:72:e9:58:6b:
80:94:7d:50:34:7e:e8:4d:67:2c:aa:13:32:59:db:
48:65:10:4a:a8:eb:50:ba:c9:1b:3a:5a:25:70:0e:
e4:62:0a:60:2b:24:0a:a4:e0:42:92:20:0f:59:e2:
92:82:ad:80:97:44:f7:3b:9c:de:be:17:2c:99:61:
4f:aa:79:e3:f3:ec:e8:8c:d9:76:0f:f9:3d:60:4e:
d0:af:d5:40:9d:fe:dc:0c:f0:fa:83:19:f1:c9:06:
15:81:c5:09:cd:2b:84:50:d8:02:2f:cd:55:43:70:
e8:9d:f6:fc:4d:b7:2f:cf:c3:05:20:8f:14:f8:44:
bd:b7:c9:23:dc:48:27:6c:2a:2d:ef:d9:48:12:e8:
4e:52:ba:ba:cc:ee:d7:f6:ad:0d:f9:c4:e1:eb:46:
22:4a:ba:70:3c:06:94:0e:b9:54:19:14:fc:28:4b:
86:1c:d8:f9:b2:ab:1d:2c:89:e7:b9:69:90:93:05:
e3:64:dd:a7:9a:61:c0:aa:66:18:8d:88:92:09:a1:
bc:b4:34:e0:66:4d:32:06:0c:9b:ce:1a:69:4c:d3:
cd:aa:38:be:1f:de:38:50:ac:f4:13:0a:9e:9a:23:
15:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B5:3A:49:F5:7C:BD:54:4B:27:E6:55:F4:FB:32:86:39:19:17:E0
X509v3 Authority Key Identifier:
keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/CCEE4F76CAC711EF80553A61C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:9ce0:5000::/36
Signature Algorithm: sha256WithRSAEncryption
1a:40:82:96:ba:a1:a4:f2:66:a5:d6:60:1f:e6:90:6c:86:9c:
81:37:a4:81:50:81:47:4d:3b:2c:91:07:e3:28:d2:f1:80:0e:
5d:29:84:8e:0c:cd:0d:2c:ce:78:d1:01:9e:0d:86:62:93:c6:
55:37:2f:75:60:be:98:71:8b:7c:a1:fd:cd:94:d9:73:c4:cb:
3e:5b:7c:e0:9d:d4:20:e1:34:cf:3f:f4:4d:a4:96:01:43:21:
e2:82:e8:6b:94:35:df:f1:e1:dc:13:71:bb:1a:69:24:0c:32:
04:f6:cc:d7:4e:8b:51:08:68:28:a2:95:2a:cd:4d:9b:8f:5d:
02:96:47:05:e7:eb:7a:a0:13:2a:77:c6:aa:16:a3:3f:00:85:
13:5f:32:82:79:39:51:1a:68:b6:e8:6d:18:38:34:28:78:83:
43:0a:e6:b2:63:4f:01:87:31:16:14:0a:68:3c:ef:e9:44:50:
67:2b:9d:f5:38:62:7b:e8:a1:b4:e4:d2:c8:bc:29:7b:1c:ea:
75:ce:0d:bc:67:f4:e1:b5:54:7f:c9:28:bf:86:c9:7b:0a:6e:
ad:a2:cd:b0:8c:52:60:ba:5c:75:d6:a7:ce:ef:e1:67:90:4e:
f1:0f:44:08:0f:6d:f6:b3:43:35:7a:2f:9a:64:b1:62:6d:d3:
8d:db:57:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:07:41 2026 by rpki-client