
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/A865A1925B1611F083088661C4F9AE02.roa
File: A865A1925B1611F083088661C4F9AE02.roa (raw, json)
Hash identifier: UiRna1wKfppY3ae9ceGSJXnsVoB2Dthll1RwPbuAri8=
Subject key identifier: 2C:B5:17:75:DE:1F:C0:94:4C:3D:96:92:DC:AD:6B:C8:92:CB:53:B9
Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial: 1AFD
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/A865A1925B1611F083088661C4F9AE02.roa
Signing time: Thu 30 Jul 2026 17:34:48 +0000
ROA not before: Thu 30 Jul 2026 17:34:48 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 141180
IP address blocks: 119.13.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 16:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6909 (0x1afd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Validity
Not Before: Jul 30 17:34:48 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6b8b38-2d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d3:9d:df:9e:98:d1:92:09:cb:23:03:9c:c0:
6f:8a:11:85:8d:00:78:61:51:ec:42:bd:fc:1e:05:
ff:1a:bb:eb:69:6b:8c:e9:9c:1d:dd:03:47:cf:89:
f3:6f:b2:27:65:68:2a:30:ed:24:b5:1d:f6:2e:14:
6a:29:77:de:a9:c0:36:90:af:0f:c9:ae:de:92:7a:
3f:02:95:d8:59:70:f5:ad:8b:6c:f9:9e:79:47:78:
cd:1e:6e:df:83:f0:31:f6:a3:f9:06:f3:5f:d7:3c:
81:ef:ba:08:72:db:f8:88:08:d0:bf:da:71:6c:81:
4b:41:f3:2c:fc:bd:19:43:0b:f7:11:80:d9:6a:e0:
a2:e0:ec:ab:11:ce:9e:f4:63:e5:5d:95:fb:58:d6:
e5:65:7b:5e:e8:7a:e7:5f:8c:f5:fb:d0:74:8a:12:
eb:9f:f1:39:4e:a4:4c:cb:31:68:54:84:5e:e2:be:
ea:21:ff:4c:1b:59:ae:53:57:e5:05:bc:d9:7f:ff:
e1:02:e0:78:eb:9c:a4:62:f7:ce:90:b9:46:36:9e:
6b:66:c6:20:a0:1d:52:78:cf:a5:31:5e:03:48:89:
9f:a6:2d:6e:2f:45:62:66:00:d0:31:7a:87:6a:4b:
30:ef:6e:9d:11:86:36:91:a6:a5:75:96:15:f2:ab:
66:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B5:17:75:DE:1F:C0:94:4C:3D:96:92:DC:AD:6B:C8:92:CB:53:B9
X509v3 Authority Key Identifier:
keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/A865A1925B1611F083088661C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
119.13.160.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:55:79:06:08:7b:78:90:3b:ed:b6:15:db:c8:3a:fa:56:98:
95:12:43:48:5a:d9:98:6a:c2:5a:f5:d2:b8:c6:c0:ef:93:0b:
0d:a9:72:a5:69:ff:07:a8:20:f2:88:e7:61:ae:de:b3:f1:5a:
27:9e:25:aa:ef:1b:ba:c3:89:2e:62:e4:f0:a1:d5:01:d8:5d:
5f:cb:2b:97:f5:3d:a2:26:6e:67:0b:26:84:41:b7:9e:04:6b:
aa:da:ba:bf:83:2b:2c:89:12:4c:8f:d6:5a:3b:ec:d0:bf:76:
2d:aa:bc:8f:e1:fc:74:49:e4:90:1e:98:ab:b8:8b:f4:f5:0f:
44:bb:f6:93:a9:57:83:02:4f:fb:cf:2a:2a:94:47:6a:71:4f:
2f:71:51:d2:86:fe:3b:e1:87:3c:5b:e2:df:86:0f:22:a1:ec:
62:fb:9e:f1:18:35:2f:55:97:c4:47:f1:c3:35:5d:90:3a:c7:
23:0e:a7:8a:a9:30:f5:3f:a1:22:88:ec:f0:f3:09:ef:03:16:
a7:b1:29:3e:1d:3e:ca:13:40:08:2e:a2:24:2b:1c:cc:5f:80:
e0:55:fd:31:d7:85:8f:b9:57:5c:04:cb:d3:03:73:a1:04:39:
f5:b5:12:2a:72:a4:78:48:a5:bd:93:6e:7c:3f:bd:00:2f:fc:
f2:13:8d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:47:09 2026 by rpki-client