
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/2DFE38F67AD711F19DC406D872A30FBC.roa
File: 2DFE38F67AD711F19DC406D872A30FBC.roa (raw, json)
Hash identifier: stljFz+ZTz5uoG7Y0jMm76oTBSEWl+m0K1NgJAC7jJo=
Subject key identifier: B8:10:78:4C:DE:9C:72:D7:1F:CB:28:74:4C:DD:36:68:78:0D:8A:6C
Certificate issuer: /CN=A91E10B0/serialNumber=9E8FFB4E0553D07ED0DF9B7DFED0B53C44CBFE04
Certificate serial: 1F
Authority key identifier: 9E:8F:FB:4E:05:53:D0:7E:D0:DF:9B:7D:FE:D0:B5:3C:44:CB:FE:04
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/no_7TgVT0H7Q35t9_tC1PETL_gQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/2DFE38F67AD711F19DC406D872A30FBC.roa
Signing time: Wed 08 Jul 2026 14:13:24 +0000
ROA not before: Wed 08 Jul 2026 14:13:24 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 9664
IP address blocks: 162.4.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/no_7TgVT0H7Q35t9_tC1PETL_gQ.crl
rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/no_7TgVT0H7Q35t9_tC1PETL_gQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/no_7TgVT0H7Q35t9_tC1PETL_gQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:16:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E10B0, serialNumber=9E8FFB4E0553D07ED0DF9B7DFED0B53C44CBFE04
Validity
Not Before: Jul 8 14:13:24 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a4e5b03-915d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:75:60:50:89:18:89:21:74:04:a7:8a:1c:f9:
d6:ed:a5:88:05:b6:65:12:e2:24:f6:94:3f:f8:ea:
5c:da:ee:a1:61:8f:de:7f:65:67:3a:ae:fc:fc:a5:
3f:a3:60:c4:6b:66:52:06:ad:ae:fc:07:85:ff:49:
2c:df:ea:2b:87:b9:e8:c5:71:35:59:9d:3d:5e:fe:
1d:22:71:9c:68:a1:e2:f7:73:ba:bd:e9:d0:ec:27:
7a:ce:2a:cb:5f:25:c9:61:ea:4e:37:8e:db:70:11:
e6:40:46:1d:3a:e6:ff:da:24:c1:3f:87:c1:5e:c7:
dc:1a:93:0c:d7:36:95:7f:f3:a4:8d:a8:9b:6a:9c:
7e:ec:2d:73:47:2f:2c:f4:9f:a6:39:db:39:9c:4a:
fd:86:57:36:e3:3f:a9:9a:b5:9b:52:90:1a:d8:29:
39:ab:f2:04:08:e8:e9:5a:01:d2:76:f7:f6:ff:a8:
93:74:44:48:61:07:a4:9f:76:55:99:0d:36:f8:06:
87:0b:f6:4b:ff:83:c6:da:75:ec:d7:93:c9:32:8b:
e8:fb:3e:23:37:4f:8e:20:d9:2d:7d:ce:02:6c:58:
e6:ae:21:d2:f7:81:de:60:90:21:0f:dd:21:82:5d:
ae:00:0e:a5:47:29:75:80:a1:78:41:82:3f:50:6f:
b0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:10:78:4C:DE:9C:72:D7:1F:CB:28:74:4C:DD:36:68:78:0D:8A:6C
X509v3 Authority Key Identifier:
keyid:9E:8F:FB:4E:05:53:D0:7E:D0:DF:9B:7D:FE:D0:B5:3C:44:CB:FE:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/no_7TgVT0H7Q35t9_tC1PETL_gQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/no_7TgVT0H7Q35t9_tC1PETL_gQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/2DFE38F67AD711F19DC406D872A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
162.4.174.0/23
Signature Algorithm: sha256WithRSAEncryption
75:96:e2:9d:73:8c:95:c1:e9:91:c2:6f:62:7b:7d:86:06:17:
51:80:0a:6f:10:8a:63:f3:30:ac:a9:62:36:f2:67:4c:11:ec:
5c:d4:3f:0a:a2:97:10:be:f7:e2:c7:c3:97:d3:68:a7:d9:82:
c9:c5:f5:8b:3f:86:99:ff:fd:08:72:9d:19:3d:fd:74:1b:d2:
ab:77:65:76:9e:a3:90:e1:89:ce:ed:e8:25:6b:f6:7b:78:f3:
b4:8e:19:65:cf:25:92:63:b2:7e:9b:c3:87:f4:7b:e5:0f:71:
f3:5a:0c:c3:9b:37:86:08:81:fb:83:2d:5e:7e:33:a9:3f:9f:
b8:b1:ad:63:4b:31:f1:84:43:09:b4:b1:f4:0a:a3:fe:26:d4:
44:e9:5b:4d:07:58:d8:ed:6a:29:da:6f:37:36:f7:ea:de:cc:
7a:bf:b5:9a:f8:f8:74:12:c0:fa:1f:80:b1:b2:af:92:e6:f6:
b2:2c:2c:5d:03:85:95:c9:0f:ed:cd:5c:b3:43:a1:e7:17:5a:
76:f3:59:16:03:76:7b:d9:d6:da:93:7b:27:bf:8c:ae:a8:2f:
8f:da:34:ee:50:6f:e0:45:aa:59:7b:6c:06:27:70:3a:02:9e:
41:32:dd:8b:da:76:63:56:5a:a3:78:f5:56:ba:ca:04:48:46:
9f:2a:19:d5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 18 04:28:57 2026 by rpki-client