
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/61D8F6CCDC8D11F0969601B93D6F56BC.roa
File: 61D8F6CCDC8D11F0969601B93D6F56BC.roa (raw, json)
Hash identifier: ddJZo//lHq9Ctx7y0h5Z1hWR5denN2+4dnjr/28CZNY=
Subject key identifier: 1C:A5:05:D6:0A:65:57:A6:10:B0:CC:0E:32:2F:3F:9E:B5:D7:E0:04
Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Certificate serial: 083D
Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/61D8F6CCDC8D11F0969601B93D6F56BC.roa
Signing time: Wed 26 Aug 2026 22:44:01 +0000
ROA not before: Wed 26 Aug 2026 22:44:01 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 55740
IP address blocks: 14.96.183.0/24 maxlen: 24
14.97.20.0/24 maxlen: 24
14.97.48.0/24 maxlen: 24
2406:e00:800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2109 (0x83d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Validity
Not Before: Aug 26 22:44:01 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8f6c31-2bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fe:ee:9c:2e:e9:42:73:ba:79:91:17:a0:54:
bd:c1:56:50:e6:ab:8c:17:85:60:17:53:00:89:cd:
30:f0:e3:ce:32:fe:9f:46:b0:86:09:74:be:da:1d:
4f:08:1d:47:b1:02:51:cd:7f:02:80:d0:b7:9e:eb:
6d:7b:53:2d:67:ab:b4:10:87:b3:45:45:5a:fc:08:
6a:2c:15:f1:27:75:e7:dc:69:9f:9c:a0:7f:45:09:
b5:74:92:73:10:af:2d:19:55:ca:f2:e8:2d:46:f4:
61:92:ec:c1:2c:d6:fd:5e:e2:27:65:3d:6e:a8:89:
c9:76:7f:45:4b:33:a4:11:3c:2f:2b:1d:be:85:66:
d3:04:b4:61:d7:27:1c:99:04:fc:d1:e5:9e:27:f3:
a9:96:05:86:cc:48:fc:b1:75:5a:94:b8:ae:a3:3e:
70:ca:e4:22:e5:b3:04:c9:09:bc:5b:09:da:d1:f0:
b2:96:7d:af:3b:41:65:64:d4:99:23:ca:2b:0f:e3:
9b:8b:ba:a7:12:8e:fd:18:9e:d4:36:77:9a:8e:6e:
de:62:a2:ac:ba:e1:47:bc:17:9b:ab:d5:7b:7c:d8:
13:44:77:e5:33:63:20:98:5a:36:90:87:74:07:e2:
73:71:50:83:f9:6a:3c:31:c2:58:bd:24:d2:53:08:
8e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A5:05:D6:0A:65:57:A6:10:B0:CC:0E:32:2F:3F:9E:B5:D7:E0:04
X509v3 Authority Key Identifier:
keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/61D8F6CCDC8D11F0969601B93D6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
14.96.183.0/24
14.97.20.0/24
14.97.48.0/24
IPv6:
2406:e00:800::/48
Signature Algorithm: sha256WithRSAEncryption
aa:ba:cb:4a:6f:2f:7d:e8:cc:97:d4:5d:cf:ea:6d:c9:f0:ed:
31:56:e0:33:b2:5c:b4:89:9b:51:2b:bc:2f:c3:aa:10:c4:fd:
ae:3c:56:60:c8:0d:8a:62:1d:cf:e9:ae:33:14:a9:57:d6:dd:
59:92:92:f0:f0:3a:b8:28:52:42:df:89:7d:20:9c:c7:18:49:
d1:70:53:b5:f2:ab:93:7a:26:52:3e:45:6f:c9:c9:f4:c4:0d:
e2:c9:52:76:d5:4c:be:8e:fe:2c:3f:4c:1e:1f:f1:7a:f8:72:
ae:99:4f:1f:d2:78:ee:28:5f:eb:cb:a1:ca:c9:82:80:d3:15:
52:c1:c1:fd:1d:d3:ee:8f:01:ab:80:23:1d:81:5e:b7:e7:49:
4c:44:3e:0a:6f:21:5f:02:d0:aa:a4:85:88:6a:e7:48:0d:c9:
7b:2a:b2:62:86:d8:fb:7d:cc:29:d1:3a:ab:0d:be:fc:c0:05:
2c:f3:e0:66:95:af:59:b2:74:b4:1f:8e:d1:59:ae:54:0b:d8:
ab:7a:3c:58:44:0b:44:7f:34:51:40:1a:8a:79:a8:b7:ce:92:
6a:49:ad:54:0e:fe:55:f9:c4:f7:a8:e6:cc:62:38:95:08:fb:
8c:15:48:dc:49:cd:8b:5d:22:c9:69:14:c8:ef:fd:f7:e2:ae:
43:f0:72:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:01:23 2026 by rpki-client