
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F778/D47C47A0BC8F11F1A010BB3A6011F970/1179C088BC9011F1A2BCEB3D6011F970.roa
File: 1179C088BC9011F1A2BCEB3D6011F970.roa (raw, json)
Hash identifier: uQ3Lm5roME35ymZ85ZUeoGH7iVTJ69iZEoXLmemFV2Q=
Subject key identifier: 3B:B3:31:BD:84:E0:C5:75:C8:25:45:92:99:4E:D9:DF:8C:43:4D:4C
Certificate issuer: /CN=A919F778/serialNumber=CDC8DC2B408F242C34B02274D9BD7DBAECA19084
Certificate serial: 02
Authority key identifier: CD:C8:DC:2B:40:8F:24:2C:34:B0:22:74:D9:BD:7D:BA:EC:A1:90:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcjcK0CPJCw0sCJ02b19uuyhkIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F778/D47C47A0BC8F11F1A010BB3A6011F970/1179C088BC9011F1A2BCEB3D6011F970.roa
Signing time: Wed 30 Sep 2026 05:30:38 +0000
ROA not before: Wed 30 Sep 2026 05:30:38 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 135772
IP address blocks: 45.127.232.0/22 maxlen: 24
103.196.220.0/22 maxlen: 24
2403:67c0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F778/D47C47A0BC8F11F1A010BB3A6011F970/zcjcK0CPJCw0sCJ02b19uuyhkIQ.crl
rsync://rpki.apnic.net/member_repository/A919F778/D47C47A0BC8F11F1A010BB3A6011F970/zcjcK0CPJCw0sCJ02b19uuyhkIQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcjcK0CPJCw0sCJ02b19uuyhkIQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 10:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F778, serialNumber=CDC8DC2B408F242C34B02274D9BD7DBAECA19084
Validity
Not Before: Sep 30 05:30:38 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6abc9e7e-a04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ec:e7:a8:5e:f3:da:fa:25:77:0c:b8:7b:57:
09:4a:2a:cd:6e:6f:4e:07:93:52:9e:68:e6:fe:3c:
2c:23:b1:60:96:df:43:40:fb:79:eb:d6:0c:02:f1:
7e:3f:c8:a9:2b:19:84:6c:87:31:7e:61:9e:e3:34:
af:9a:d4:c9:c8:ff:e4:16:3b:a6:d1:3d:e7:c8:7d:
77:c4:8d:50:0e:4a:54:cf:b7:24:76:c9:6d:f4:fa:
73:e0:d0:39:96:2c:2e:8d:15:45:3b:30:86:25:72:
9f:87:96:e4:86:c9:88:81:c5:09:fb:4b:66:9a:ab:
bb:7f:a7:bd:59:66:0f:17:f5:e3:4b:23:8c:d1:05:
c9:f9:84:76:91:83:ce:fd:ac:04:b6:2f:7f:0b:ad:
c1:81:e5:51:59:32:20:62:c3:4a:89:79:bb:28:39:
3f:0e:1a:d5:32:b7:10:a8:af:69:0a:a8:32:b4:94:
89:e0:4f:8f:3f:4e:e0:bc:69:e7:8d:d8:b7:25:99:
77:d9:9f:dc:a6:be:a9:75:f4:5a:00:bf:ee:b3:04:
78:04:59:94:73:f1:c7:64:2a:2c:79:f2:c0:8f:b4:
59:eb:40:20:27:81:49:42:1d:a9:00:5c:f5:4d:e3:
4c:25:a2:cb:a6:6d:f7:63:a9:ff:0e:1b:5c:c5:7a:
5f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B3:31:BD:84:E0:C5:75:C8:25:45:92:99:4E:D9:DF:8C:43:4D:4C
X509v3 Authority Key Identifier:
keyid:CD:C8:DC:2B:40:8F:24:2C:34:B0:22:74:D9:BD:7D:BA:EC:A1:90:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F778/D47C47A0BC8F11F1A010BB3A6011F970/zcjcK0CPJCw0sCJ02b19uuyhkIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcjcK0CPJCw0sCJ02b19uuyhkIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F778/D47C47A0BC8F11F1A010BB3A6011F970/1179C088BC9011F1A2BCEB3D6011F970.roa
sbgp-ipAddrBlock: critical
IPv4:
45.127.232.0/22
103.196.220.0/22
IPv6:
2403:67c0::/32
Signature Algorithm: sha256WithRSAEncryption
b2:0b:44:2b:1b:92:2f:f9:92:94:bd:4e:04:b2:89:f6:83:b3:
63:24:ed:40:51:7b:52:40:d1:af:2e:f6:07:8b:04:ae:9c:b0:
ce:66:10:db:bb:37:61:c6:b0:8c:31:3a:66:38:a5:b4:ad:2a:
a1:b5:ac:be:bc:4c:c3:12:66:c4:c8:cd:91:02:d0:60:2a:68:
bc:25:5b:3e:b7:5c:a1:af:e7:f5:51:34:5b:03:cb:57:bb:88:
c5:47:62:5e:58:00:a2:3b:b5:de:48:1e:25:eb:31:57:1e:fc:
fa:84:81:e8:7b:cd:0d:97:5c:d8:b5:38:51:14:ad:27:22:e5:
1c:02:9c:92:f7:98:1f:dc:a6:2c:dd:8a:8d:04:c1:b8:b4:f7:
0a:c8:c0:84:af:b8:69:05:82:9c:5a:59:3f:7a:06:59:51:2d:
74:36:bc:69:88:de:a9:8e:16:06:91:a3:fe:f9:a0:6b:5f:c0:
81:f9:17:b8:91:84:71:95:f9:3e:0b:36:09:bc:f5:96:df:b4:
e5:b6:11:a2:da:de:a7:6d:9b:32:34:ea:77:f1:e6:e6:3d:0a:
3d:89:8a:f8:38:d7:ad:95:86:eb:ad:95:e4:20:3f:d2:43:31:
43:22:39:da:ec:66:a5:8b:cd:5a:7e:88:80:d4:f1:a0:6c:cc:
b1:44:97:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:25:26 2026 by rpki-client