
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/CB46AC50509111EF9E40402FC4F9AE02.roa
File: CB46AC50509111EF9E40402FC4F9AE02.roa (raw, json)
Hash identifier: Pb13ClG0OEF5MKijTI12l/DD4tvZZvcQ1xg8xBfz7A4=
Subject key identifier: 32:D6:1B:B3:ED:F6:0A:96:67:AD:88:57:B5:D9:5A:C8:76:5B:32:24
Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392
Certificate serial: 0C79
Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/CB46AC50509111EF9E40402FC4F9AE02.roa
Signing time: Mon 02 Feb 2026 19:15:38 +0000
ROA not before: Mon 02 Feb 2026 19:15:38 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 4613
IP address blocks: 27.111.16.0/22 maxlen: 24
27.111.20.0/24 maxlen: 24
27.111.21.0/24 maxlen: 24
27.111.22.0/24 maxlen: 24
27.111.23.0/24 maxlen: 24
27.111.24.0/22 maxlen: 22
27.111.24.0/24 maxlen: 24
27.111.25.0/24 maxlen: 24
27.111.26.0/23 maxlen: 24
27.111.28.0/23 maxlen: 24
27.111.30.0/23 maxlen: 24
117.121.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl
rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:18:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3193 (0xc79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C71E, serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392
Validity
Not Before: Feb 2 19:15:38 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6980f7da-4807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:eb:4c:da:7d:93:f9:c4:38:98:91:7c:61:
42:bf:fe:4e:56:76:3f:77:1a:d9:f2:72:b2:3d:36:
0c:cd:69:29:45:f8:2b:cf:6e:27:aa:d8:4d:f1:af:
81:2b:11:eb:c4:61:87:0a:58:f2:c9:cf:1b:bc:52:
07:4e:b8:04:77:4f:74:ad:d4:e4:b3:64:9c:09:b4:
e6:9e:80:77:d3:10:dd:31:a3:a2:90:cb:84:d1:23:
01:0a:29:4f:62:e1:75:16:cb:5a:94:8b:b9:c8:35:
77:c7:09:10:85:0b:38:18:9e:af:45:74:e2:91:6f:
b2:0d:ca:6f:fb:34:a0:c1:8c:a0:6c:70:f2:eb:f0:
a8:1b:1b:5d:20:be:7d:f2:4c:bd:ab:5d:c4:e2:e5:
24:b4:ff:24:cb:5f:a4:a1:8a:33:cb:1e:e3:31:fc:
c7:f3:6d:2b:6d:c4:53:ed:e6:cc:6e:00:06:b7:7f:
53:17:54:67:27:a0:fa:20:ca:ea:3c:f1:2c:0a:d6:
26:18:3a:4c:23:a2:48:0d:45:66:b3:f6:0e:0f:d3:
72:59:ce:65:ac:55:93:94:01:dd:b8:f9:93:39:13:
da:5f:f7:77:ad:41:49:44:11:6e:58:3c:96:64:ec:
37:ef:a0:ec:86:5c:55:25:3d:03:5b:37:63:dc:16:
da:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D6:1B:B3:ED:F6:0A:96:67:AD:88:57:B5:D9:5A:C8:76:5B:32:24
X509v3 Authority Key Identifier:
keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/CB46AC50509111EF9E40402FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.111.16.0/20
117.121.224.0/20
Signature Algorithm: sha256WithRSAEncryption
5a:54:b5:fb:f1:94:19:de:d4:6d:1b:ee:61:64:5f:26:c3:7d:
a6:32:44:5f:c4:34:5a:ce:ae:b1:f4:2c:0a:a8:a2:ee:5c:fb:
a8:07:77:5b:80:4d:44:6f:c7:40:ed:9a:a8:64:f1:1d:88:d2:
ed:08:70:f0:b3:45:42:ea:d7:90:0d:28:10:cf:be:3e:50:28:
97:9e:16:c7:2f:ff:46:6b:a7:22:bd:62:de:f3:22:47:0f:03:
c9:e4:58:35:b5:be:68:15:33:84:10:b6:ed:97:d4:90:cb:72:
27:ac:29:fd:23:41:c5:4c:d2:ac:dc:42:3b:87:42:06:cb:ae:
bd:fd:d3:37:24:3d:70:94:16:60:21:61:31:2c:54:fc:66:38:
c9:b3:3d:80:59:6e:9d:da:54:e7:db:42:24:e9:f7:de:79:8e:
36:46:95:0f:13:cc:aa:15:4c:6f:ab:01:16:90:10:2a:41:d4:
30:12:ad:ed:54:8f:e4:b5:d4:89:7c:92:58:23:9d:3d:42:65:
b6:48:66:80:f2:ef:45:bd:80:4c:fe:a4:be:d9:50:4b:82:5a:
08:1b:ea:1b:98:7f:a8:65:04:e3:49:68:6a:56:fa:7e:be:5e:
4f:b2:ae:7f:f5:ce:c0:41:45:c2:ef:b4:a7:e1:82:46:e7:d4:
f1:61:1c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:46:44 2026 by rpki-client