
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/243C67FE55CD11F19CECB2B5A8833773.roa
File: 243C67FE55CD11F19CECB2B5A8833773.roa (raw, json)
Hash identifier: Gh2g+A+hy3CyM7ywchuFzI/qMxiOQm+zUJkUhcqgKUg=
Subject key identifier: 9E:F4:33:8D:60:B3:22:B1:88:F2:87:8A:8B:A2:0B:85:48:CC:8A:EF
Certificate issuer: /CN=A917BEA1/serialNumber=F1A4612A06E10EF5BD963173EC26538B7D403736
Certificate serial: 06
Authority key identifier: F1:A4:61:2A:06:E1:0E:F5:BD:96:31:73:EC:26:53:8B:7D:40:37:36
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8aRhKgbhDvW9ljFz7CZTi31ANzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/243C67FE55CD11F19CECB2B5A8833773.roa
Signing time: Fri 22 May 2026 10:58:19 +0000
ROA not before: Fri 22 May 2026 10:58:19 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 150750
IP address blocks: 162.4.162.0/24 maxlen: 24
162.4.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.crl
rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8aRhKgbhDvW9ljFz7CZTi31ANzY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 09:58:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BEA1, serialNumber=F1A4612A06E10EF5BD963173EC26538B7D403736
Validity
Not Before: May 22 10:58:19 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a1036cb-adb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:9c:1b:24:4e:d7:21:43:a6:7c:f9:b1:77:
2e:b8:26:e8:cb:52:ad:43:da:a1:1f:1d:01:9c:2c:
6d:cf:72:b6:da:82:52:b8:3d:a3:71:c4:37:0e:c6:
69:f2:15:e5:a4:b3:b8:c1:67:ab:ee:a3:d6:92:3e:
c2:1e:72:a6:43:17:64:86:63:3e:de:f2:cb:ad:04:
12:06:6a:69:b4:55:73:99:da:91:f5:9c:ce:d2:dc:
d3:f4:b0:fe:1e:4e:a8:c1:1f:77:d0:85:0b:f2:71:
ff:86:73:29:2d:a3:75:d1:5d:ff:23:b3:97:87:9f:
14:b0:8e:28:02:f7:f6:06:ca:df:e6:56:8b:3d:1a:
41:31:85:33:a4:ba:85:c4:f0:4f:d1:b7:4e:ce:54:
77:e1:9b:ad:f0:c3:b4:c8:61:cd:76:ad:85:9f:a1:
80:b8:e6:cc:1a:b0:a4:e3:0e:b6:3e:a0:38:b5:35:
da:47:7d:37:a6:ec:31:50:45:27:b3:64:d8:bd:4f:
b1:64:3f:8e:7a:6d:ef:80:60:34:c3:2b:a7:63:57:
f4:1b:38:69:93:f6:98:19:6c:05:85:21:ad:66:79:
21:c8:65:fb:60:92:c2:48:12:45:8b:75:2d:b2:f2:
df:c1:b5:af:aa:e9:c8:eb:6d:2b:bf:9e:ed:af:b0:
4f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F4:33:8D:60:B3:22:B1:88:F2:87:8A:8B:A2:0B:85:48:CC:8A:EF
X509v3 Authority Key Identifier:
keyid:F1:A4:61:2A:06:E1:0E:F5:BD:96:31:73:EC:26:53:8B:7D:40:37:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8aRhKgbhDvW9ljFz7CZTi31ANzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/243C67FE55CD11F19CECB2B5A8833773.roa
sbgp-ipAddrBlock: critical
IPv4:
162.4.162.0/23
Signature Algorithm: sha256WithRSAEncryption
92:4a:92:eb:ac:08:ea:ac:aa:53:46:9c:f7:ac:ab:8e:9b:39:
a1:df:cb:d3:a8:05:4f:bb:8a:0a:4e:68:3b:2e:91:5f:99:72:
38:57:60:cf:d5:d1:be:00:22:ba:af:86:7d:62:85:4a:5d:8b:
3d:20:d2:55:7c:d0:ef:1f:0a:d5:ff:18:75:1a:52:eb:ac:94:
87:b6:50:53:94:3b:9c:73:9a:7c:f9:62:20:26:0d:8d:78:fd:
7b:a1:7d:89:31:c0:17:03:d9:e0:61:56:ee:70:be:76:28:32:
35:e1:cf:83:b1:1e:80:1d:08:7b:0d:c8:47:f8:20:8b:20:2c:
8e:6d:87:00:30:02:51:5b:0c:ef:db:60:ec:8d:9d:84:9a:a6:
fa:d2:4b:f6:38:b3:e6:eb:9f:f8:f7:1f:df:4f:a3:b5:cb:5c:
f2:1a:32:91:81:3d:6c:53:19:51:83:6c:4e:92:fa:d0:1b:e8:
2b:f7:10:27:3b:f7:6b:c2:23:aa:23:d6:a7:73:8f:d4:e3:63:
06:25:d1:1d:89:56:c7:8f:dd:fd:1b:f1:9d:d3:21:70:3f:d6:
a8:37:96:55:44:11:4c:64:51:58:76:ce:8c:a4:d1:75:b9:2a:
ff:bd:68:36:36:5c:b9:55:25:b3:25:a9:3c:ea:fb:69:78:c0:
3e:34:1e:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:32:08 2026 by rpki-client