
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/EE42117C927511F18A54FCC54511F970.roa
File: EE42117C927511F18A54FCC54511F970.roa (raw, json)
Hash identifier: 4onIQnShgHHglJV/eY63U0D9thFh3TgjTZuJUpaZPkM=
Subject key identifier: D8:B3:42:A4:34:E8:27:63:A6:68:59:76:1A:D2:96:9B:C1:79:0E:91
Certificate issuer: /CN=A91CDF78/serialNumber=F244815D5B391E2000B78CA96E193020FF902258
Certificate serial: 34
Authority key identifier: F2:44:81:5D:5B:39:1E:20:00:B7:8C:A9:6E:19:30:20:FF:90:22:58
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/EE42117C927511F18A54FCC54511F970.roa
Signing time: Fri 07 Aug 2026 15:37:43 +0000
ROA not before: Fri 07 Aug 2026 15:37:43 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 162.4.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl
rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDF78, serialNumber=F244815D5B391E2000B78CA96E193020FF902258
Validity
Not Before: Aug 7 15:37:43 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a75fbc7-0bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:fd:e4:86:05:d1:09:30:27:6b:36:79:b4:
ca:d1:bb:6c:1e:d5:94:a2:09:6a:3e:ac:54:70:25:
d9:f3:95:b4:d9:c4:0b:63:3b:77:83:14:6d:fb:c2:
13:8a:c0:19:49:1c:07:29:e3:80:ae:6f:8b:a6:ac:
c9:fb:9c:ec:09:16:5b:f1:fe:07:06:2b:ad:e2:da:
bd:cd:4b:c9:ff:06:2c:96:8e:cb:9e:c3:9d:b9:7f:
be:e4:e8:df:96:b7:1d:a0:be:25:ba:35:fe:01:b5:
39:6e:29:fb:14:b9:5e:31:97:64:e0:9e:9c:13:ca:
03:9c:90:0b:5f:65:a3:57:3d:91:1b:93:cf:b1:be:
9c:07:53:7c:bd:bc:c3:89:c4:2d:4b:04:4f:be:44:
a1:b3:2a:48:44:84:f0:3c:da:10:af:9a:43:e3:46:
a3:8b:cf:11:e9:33:c6:8d:aa:f9:d6:3e:39:4d:45:
20:33:05:c4:a6:c4:61:84:23:c6:46:83:59:ac:61:
64:d2:4c:cf:21:58:a9:06:ff:68:dd:df:3c:2d:a9:
2d:cd:7a:e2:03:33:66:17:6e:ac:fb:e6:e6:70:2e:
a0:d0:20:41:34:dd:01:1a:76:72:af:fc:43:32:e1:
4f:0b:c1:01:89:cc:18:f3:f9:86:5b:02:d4:b8:0d:
7b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B3:42:A4:34:E8:27:63:A6:68:59:76:1A:D2:96:9B:C1:79:0E:91
X509v3 Authority Key Identifier:
keyid:F2:44:81:5D:5B:39:1E:20:00:B7:8C:A9:6E:19:30:20:FF:90:22:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/EE42117C927511F18A54FCC54511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
162.4.52.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:8f:8b:ca:54:48:b6:22:a7:71:59:e9:63:b2:cd:a5:e5:c0:
6a:24:70:29:4d:dd:1a:8e:c9:3f:80:19:7a:69:89:56:43:3c:
2f:f7:04:e2:85:ec:9d:a9:55:55:dd:b8:24:17:bd:d8:39:b8:
56:1c:ee:63:ee:26:17:58:ff:32:aa:20:e8:95:f9:31:5b:72:
a3:c1:5a:2a:0a:95:68:af:30:e4:4b:05:a8:94:6b:1c:ad:c1:
b8:61:46:a6:eb:83:16:3f:fd:47:35:62:b3:8c:de:a6:af:c2:
fe:0e:16:07:97:6c:b9:84:a6:31:30:88:dc:c9:f7:1c:ec:6e:
89:dc:0f:9d:b5:ab:5b:ed:98:1f:9d:c6:8d:12:7f:2a:08:99:
a6:6d:5a:ab:2e:3e:b4:cb:d4:70:9f:46:8e:29:a1:e9:0a:94:
61:c9:51:7b:7a:14:b2:16:da:0d:6c:49:a4:d7:a8:c5:3f:ef:
08:fc:7a:06:cc:cd:c0:ff:70:fc:71:e7:2b:89:ee:c3:cb:b7:
56:cc:ac:e8:b8:a3:6c:4f:15:3d:c3:b0:85:6c:c1:4c:bc:3f:
5b:9c:53:0f:d4:3f:3a:d2:8d:ed:b5:a8:e5:68:d3:7d:94:44:
2c:79:e0:4a:32:51:67:5b:4e:0f:51:0c:59:8f:77:6a:c6:0c:
0c:52:11:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Aug 21 07:21:45 2026 by rpki-client