
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/69FDEAC6645511EFB98C143DC4F9AE02.roa
File: 69FDEAC6645511EFB98C143DC4F9AE02.roa (raw, json)
Hash identifier: 8GqLPEK+8+LiDMs6TXQYM/u72383yuqkd4BLQepKcQg=
Subject key identifier: 9F:DB:57:FD:E2:C7:36:F5:30:F6:12:1F:24:0A:27:86:DB:A1:CC:4C
Certificate issuer: /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
Certificate serial: 0E05
Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/69FDEAC6645511EFB98C143DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:53:15 +0000
ROA not before: Mon 02 Feb 2026 03:46:39 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 141180
IP address blocks: 87.119.2.0/24 maxlen: 24
87.119.3.0/24 maxlen: 24
87.119.4.0/24 maxlen: 24
87.119.5.0/24 maxlen: 24
87.119.6.0/24 maxlen: 24
87.119.7.0/24 maxlen: 24
87.119.8.0/24 maxlen: 24
87.119.10.0/24 maxlen: 24
87.119.11.0/24 maxlen: 24
87.119.13.0/24 maxlen: 24
87.119.14.0/24 maxlen: 24
87.119.15.0/24 maxlen: 24
87.119.16.0/24 maxlen: 24
87.119.17.0/24 maxlen: 24
87.119.18.0/24 maxlen: 24
87.119.19.0/24 maxlen: 24
87.119.32.0/24 maxlen: 24
87.119.33.0/24 maxlen: 24
87.119.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl
rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 16:42:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3589 (0xe05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
Validity
Not Before: Feb 2 03:46:39 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48b1b-debd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5c:02:6d:55:0b:3f:58:ea:d5:81:b7:ea:14:
ab:78:ce:15:e6:cb:33:14:5e:5c:6f:93:f4:ec:7f:
92:a0:2f:01:05:21:84:14:f1:cb:28:74:4c:33:f5:
aa:e7:78:15:8c:c5:f9:fa:7f:79:50:4a:9e:3b:9d:
ce:8a:ba:9a:9d:23:4d:0b:19:04:d5:55:5a:a5:01:
ad:ba:dd:d6:7d:61:3f:ef:20:c1:ab:cb:4b:5f:fa:
3d:72:12:dc:0e:b3:fc:ce:95:d2:2b:56:b0:5a:00:
32:b1:7f:dd:be:65:d3:1f:d9:77:c2:9f:a3:6c:84:
f2:d8:20:2a:4a:47:5a:75:74:d6:fc:4e:66:86:86:
72:5e:40:71:76:f5:69:4f:d6:a7:98:1b:1a:4a:7c:
7e:15:94:92:41:0f:48:f3:8f:89:5a:f7:a8:f8:a4:
41:c9:38:99:59:9a:ea:26:50:02:7a:1a:63:3a:ea:
9a:98:b4:c3:44:62:1f:b0:e9:3e:22:15:e4:51:e5:
26:8f:7b:bf:e3:63:02:b3:56:8c:45:29:4c:1e:05:
26:3d:ea:70:e3:ca:13:88:b9:33:a4:e9:3a:f1:fc:
60:1d:b6:aa:50:ef:a0:da:81:1f:2d:ff:55:d5:da:
91:6d:25:69:08:92:08:5c:7a:70:0f:f9:0f:84:09:
5b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DB:57:FD:E2:C7:36:F5:30:F6:12:1F:24:0A:27:86:DB:A1:CC:4C
X509v3 Authority Key Identifier:
keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/69FDEAC6645511EFB98C143DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
87.119.2.0-87.119.8.255
87.119.10.0/23
87.119.13.0-87.119.19.255
87.119.32.0-87.119.34.255
Signature Algorithm: sha256WithRSAEncryption
06:bb:63:01:71:e6:c7:25:3e:16:7d:3b:de:b0:0f:72:84:f3:
de:ed:8a:26:8b:11:90:c4:67:a5:7f:90:46:e7:41:c8:a5:b8:
b1:0e:07:d4:01:81:4f:b4:17:b8:b9:54:e1:10:32:af:24:50:
17:49:ac:9e:f4:00:8b:73:5c:3c:10:ed:43:71:7f:64:98:17:
87:79:0e:66:72:d2:21:19:4a:6c:06:c4:8b:90:6d:54:74:f1:
da:b3:b1:27:4d:d0:f3:db:98:0f:1f:54:5b:1b:e0:5f:2c:af:
87:c1:7f:50:05:57:22:72:62:63:e7:78:95:91:14:b0:c9:34:
a2:d2:bf:38:79:22:9f:4a:e9:d4:6e:90:b2:03:6a:49:b6:10:
24:2f:b6:c8:20:d9:7a:99:0c:58:89:08:a6:ff:d5:dc:6f:12:
62:cb:cf:7c:b4:31:b8:4a:a3:d6:a1:8a:5e:7a:2c:ea:6a:af:
e6:2b:e1:23:fe:15:eb:1d:00:d2:b0:6a:09:d2:61:83:60:bf:
e7:54:d1:e2:86:81:5a:1c:14:8c:13:99:a8:f3:ab:55:96:7a:
fc:74:4e:14:d5:fb:c5:77:ee:8c:7e:96:ef:33:65:48:e9:3c:
a4:4e:10:1b:52:ef:d1:a1:d1:93:10:01:a1:82:c3:97:9b:11:
1f:4c:a2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:53:40 2026 by rpki-client