
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/4D63A2B8C22A11F1B159F08C5811F970.roa
File: 4D63A2B8C22A11F1B159F08C5811F970.roa (raw, json)
Hash identifier: NF/w6msFdtvKZSH6x0k1250ZRDe24QAuMKQiK23YjpA=
Subject key identifier: D2:6C:ED:72:B3:4A:0A:C1:FF:91:CC:FF:6D:50:D7:9C:D3:67:F5:6C
Certificate issuer: /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Certificate serial: 046D
Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/4D63A2B8C22A11F1B159F08C5811F970.roa
Signing time: Tue 20 Oct 2026 11:39:49 +0000
ROA not before: Tue 20 Oct 2026 11:39:49 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 210387
IP address blocks: 36.255.96.0/24 maxlen: 24
103.209.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 00:25:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1133 (0x46d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Validity
Not Before: Oct 20 11:39:49 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6ad75304-7817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:d4:58:1d:ad:03:af:29:dd:0e:27:75:93:
d8:41:7c:cf:14:01:0e:c5:be:6e:b3:11:c9:de:36:
21:37:39:39:31:81:aa:cc:4f:f4:b8:a7:98:95:69:
44:78:f1:77:91:df:ec:3c:26:9a:88:71:2d:7e:52:
60:40:e1:c7:93:97:3b:ad:84:6a:58:9d:72:22:bd:
5c:f2:fb:9d:3e:2f:9e:d1:c9:06:b6:01:b0:7d:14:
bf:3f:c7:79:8b:ee:41:4e:58:f4:22:68:bc:e7:3d:
db:2d:f5:31:76:94:ea:82:c5:95:61:03:66:a0:bb:
d8:69:72:37:ed:ef:aa:3a:8e:67:1d:fd:ea:5e:fe:
0a:ed:34:5d:41:53:c2:6d:41:39:0d:b8:3d:73:6f:
7c:e2:a5:ef:19:81:57:3f:29:3d:26:16:d7:b4:85:
61:8f:2b:5e:c3:18:78:71:0a:ca:13:5e:7b:57:85:
31:99:2c:3e:b3:57:d8:42:40:55:7a:90:71:35:ff:
df:3b:d9:f7:f0:31:c8:81:1b:47:50:1c:6f:4c:64:
e6:28:62:d6:59:3f:b2:1a:e3:10:e3:84:fc:bb:e1:
a7:9d:18:25:35:d8:a6:3d:88:72:56:98:9c:82:1d:
dc:1c:f9:4f:da:bc:18:e9:79:57:37:a6:ee:c0:d1:
ca:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6C:ED:72:B3:4A:0A:C1:FF:91:CC:FF:6D:50:D7:9C:D3:67:F5:6C
X509v3 Authority Key Identifier:
keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/4D63A2B8C22A11F1B159F08C5811F970.roa
sbgp-ipAddrBlock: critical
IPv4:
36.255.96.0/24
103.209.78.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ee:4c:de:62:6f:0a:44:ac:28:ed:e9:2d:25:6f:49:0a:eb:
56:6a:c1:cd:f4:6a:5c:eb:72:7d:48:0b:6e:bd:e3:1a:6d:c7:
8a:fe:53:53:9e:00:90:48:82:15:40:04:0c:52:ae:ae:e6:4c:
c6:7b:39:ef:3e:94:1e:32:ef:d2:45:92:17:b8:36:75:a6:50:
61:62:c6:a1:77:5d:90:f9:46:54:52:eb:b6:db:36:37:76:13:
aa:e5:f7:02:1c:13:30:8c:19:64:ac:0d:49:95:4c:27:8b:ac:
d6:74:f1:ce:2b:ff:fc:11:bc:97:d5:6f:19:46:3d:41:d3:aa:
3d:aa:d0:52:06:28:d3:2b:56:38:93:72:b6:99:e0:4e:4e:ec:
ac:08:ce:3b:f6:6c:58:e2:23:7b:59:87:82:3e:97:d8:6a:10:
28:af:64:66:c0:4f:44:c3:a0:73:c7:c9:d1:70:ff:54:78:3c:
65:73:a7:85:dc:53:12:8c:c3:41:df:45:1e:21:0e:37:4d:a5:
ba:3e:9e:37:76:f7:5e:f5:63:77:58:92:9d:e1:c3:cb:84:7b:
75:b9:66:70:2b:83:91:e7:df:86:21:40:2b:e5:ca:f2:9d:ed:
79:e3:47:db:07:8e:b0:7a:a0:0c:ac:84:a8:6d:ba:47:19:c7:
7d:43:5a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:32:24 2026 by rpki-client