
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/7AD39862C6E311F184065DC14911F970.roa
File: 7AD39862C6E311F184065DC14911F970.roa (raw, json)
Hash identifier: xr9RYPY8/JGc3iYG3m1kXzZ6mI9lFVA73AH8tEODsgc=
Subject key identifier: 80:C5:E2:BA:A3:4C:59:A6:F2:1A:89:22:8F:04:F8:7B:65:6B:75:E8
Certificate issuer: /CN=A917EB0C/serialNumber=506D780ED1797480F15251347FC28443D72E9507
Certificate serial: 0CF9
Authority key identifier: 50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/7AD39862C6E311F184065DC14911F970.roa
Signing time: Tue 13 Oct 2026 08:52:55 +0000
ROA not before: Tue 13 Oct 2026 08:52:55 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 137967
IP address blocks: 116.204.148.0/22 maxlen: 23
116.204.148.0/24 maxlen: 24
116.204.149.0/24 maxlen: 24
116.204.150.0/24 maxlen: 24
116.204.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl
rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 18:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3321 (0xcf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EB0C, serialNumber=506D780ED1797480F15251347FC28443D72E9507
Validity
Not Before: Oct 13 08:52:55 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6acdf166-9eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:31:7e:08:05:79:51:96:cd:93:f2:4c:34:b9:
af:9b:1e:fb:a8:52:9e:83:ac:72:1e:b4:df:fa:bf:
2d:4a:fd:ba:5c:cb:30:6a:eb:12:8d:9f:fe:82:69:
de:50:07:d1:74:a8:31:14:39:e0:ca:2f:51:39:32:
33:25:dd:2b:9f:a1:77:ac:21:1d:5f:11:ec:13:08:
84:ac:ae:b3:98:da:9a:2a:f0:c1:26:33:e0:09:49:
38:a5:f0:13:a4:e5:d4:27:95:b5:81:7e:05:76:d2:
4d:1c:5f:5d:6a:7a:1a:49:24:c2:66:b9:3f:39:03:
5d:f3:7c:f3:f4:3f:d8:e9:29:47:82:b8:b6:e7:0f:
b5:26:8a:06:9a:52:3b:76:85:fd:20:87:b2:af:e2:
22:de:5a:c4:9e:19:6d:94:23:60:1c:3a:01:20:eb:
6d:65:b3:c1:c2:74:a6:c7:2a:8c:aa:2e:e6:07:1c:
07:4f:f6:57:d9:ff:9b:ec:19:4e:ad:94:24:93:ca:
21:0f:a5:5b:b5:19:70:71:0d:55:9d:37:d6:ab:fd:
c6:b9:96:dd:ab:d1:2e:57:dd:8b:6e:58:7c:d3:ae:
e4:78:3b:88:47:dc:61:dd:dc:5a:99:fb:b4:18:a6:
5a:b4:9b:f4:a2:9e:11:9a:2b:e1:3c:e0:6b:5e:79:
80:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C5:E2:BA:A3:4C:59:A6:F2:1A:89:22:8F:04:F8:7B:65:6B:75:E8
X509v3 Authority Key Identifier:
keyid:50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/7AD39862C6E311F184065DC14911F970.roa
sbgp-ipAddrBlock: critical
IPv4:
116.204.148.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:d9:c8:23:6a:3b:9a:85:f1:b6:e8:4c:e0:e5:7b:73:c7:45:
f5:09:c0:7f:79:95:8b:de:ec:60:a4:d0:2c:13:2c:e7:80:f2:
1f:ef:4c:4a:49:f0:62:50:18:ad:b7:28:ef:af:31:05:a7:c9:
49:fb:05:bb:1e:95:bc:c1:8f:e3:b7:62:59:96:fb:ca:04:bc:
38:a3:6e:41:4b:1d:8d:33:44:61:ba:6c:79:cb:7d:fa:70:9e:
1e:4e:29:90:7d:1a:5b:e1:a8:74:bc:ae:ca:e3:ae:88:e0:96:
e4:96:7b:82:84:fe:2c:26:03:0f:c2:c7:e5:da:f4:07:99:9f:
e7:e6:cf:07:f9:0b:00:ad:d0:47:d5:e4:4e:c5:77:f9:86:2a:
ca:ac:b7:84:4b:b1:ec:d5:c4:a2:76:44:1a:0a:fe:10:bc:89:
3a:90:ea:0c:c5:e5:29:9b:1b:2d:41:37:26:e9:13:80:8a:4e:
ca:eb:38:89:d3:95:b9:1a:94:47:a8:b0:90:6a:d0:f8:3f:da:
7e:e9:2e:78:07:12:cc:bc:97:a2:1f:08:65:8a:f6:a4:5c:16:
cc:37:7a:52:93:e0:2c:21:62:04:82:a1:a0:bf:ff:b6:72:31:
32:28:8b:95:95:12:6e:05:09:88:d8:6e:7c:19:17:2e:54:f8:
59:74:48:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:56:36 2026 by rpki-client