
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/2D954C6C5A5511F183A61EC6B3833773.roa
File: 2D954C6C5A5511F183A61EC6B3833773.roa (raw, json)
Hash identifier: rElfqdRGN29qxIjELniN/ns6Di2jBGzrKAoe/hx+ulg=
Subject key identifier: BC:B8:90:5D:06:E4:19:95:98:65:26:11:2E:51:CD:1A:CA:58:78:C4
Certificate issuer: /CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
Certificate serial: 3662
Authority key identifier: 80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/2D954C6C5A5511F183A61EC6B3833773.roa
Signing time: Thu 28 May 2026 05:22:11 +0000
ROA not before: Thu 28 May 2026 05:22:11 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 38022
IP address blocks: 163.7.128.0/19 maxlen: 19
163.7.128.0/24 maxlen: 24
163.7.136.0/24 maxlen: 24
163.7.137.0/24 maxlen: 24
163.7.144.0/21 maxlen: 21
163.7.159.0/24 maxlen: 24
210.7.32.0/20 maxlen: 20
2404:138::/32 maxlen: 32
2404:138:204::/48 maxlen: 48
2404:138:205::/48 maxlen: 48
2404:138:206::/48 maxlen: 48
2404:138:207::/48 maxlen: 48
2404:138:1306::/48 maxlen: 48
2404:139::/32 maxlen: 32
2404:139::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl
rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:43:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13922 (0x3662)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111318, serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
Validity
Not Before: May 28 05:22:11 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6a17d103-6fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:4a:fc:f9:91:89:f4:26:bb:98:92:f1:da:
54:86:2b:6d:48:67:3b:06:49:17:f6:2c:a1:60:e1:
a8:1f:70:32:c5:3a:c4:bf:1e:28:06:55:b5:a7:d9:
ef:3d:93:b4:88:c2:9f:09:57:6e:1b:8d:13:8d:e0:
31:32:70:04:74:d6:f2:7f:a8:ea:92:1c:5f:a5:63:
1d:0e:4b:e9:e3:c6:62:41:8f:a0:c2:83:b3:74:66:
8f:f6:b5:3d:2b:91:8e:0e:01:2b:48:e8:fd:2f:96:
c3:93:44:10:e5:42:ed:07:da:72:dd:94:4e:7d:c9:
c2:a9:8e:bd:1f:80:1c:72:44:8a:14:d1:a4:07:8a:
e6:d9:84:c9:36:38:d4:11:a2:ce:9a:5a:ba:17:92:
e1:a7:76:34:50:e6:b7:90:2a:bd:06:93:54:ea:f7:
0e:4b:75:43:b2:ab:41:f6:88:12:84:59:1b:1d:b2:
5e:07:e1:fa:fd:ce:d9:0a:da:e3:0c:96:30:fc:8c:
e3:b1:af:17:ad:51:93:d3:90:45:5c:5e:79:d7:4d:
f2:10:7f:05:34:1e:dc:0f:ab:41:27:3a:14:60:4f:
ba:da:a8:10:3b:ab:bc:38:0c:da:f1:4d:a9:15:cc:
22:e8:77:92:ba:cc:f7:fb:b0:41:d6:56:09:c6:fa:
3a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B8:90:5D:06:E4:19:95:98:65:26:11:2E:51:CD:1A:CA:58:78:C4
X509v3 Authority Key Identifier:
keyid:80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/2D954C6C5A5511F183A61EC6B3833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.7.128.0/19
210.7.32.0/20
IPv6:
2404:138::/31
Signature Algorithm: sha256WithRSAEncryption
a6:49:1b:ac:14:55:57:b3:3c:ea:e4:35:0b:bf:05:50:06:06:
3f:3f:ba:e7:45:3a:68:87:21:b0:50:91:fb:76:6f:f5:75:83:
aa:76:ae:03:e5:00:d6:dd:7d:4b:ff:e7:73:85:04:43:7b:ca:
7e:6a:09:51:6a:9d:0b:79:58:9d:c9:53:24:05:8e:0f:17:47:
7e:c4:36:49:4a:52:bb:83:0f:6f:b8:fd:31:a9:04:77:dc:65:
35:ec:ef:4d:51:b1:2f:ab:ab:f3:16:53:e4:51:0e:73:6c:29:
97:b8:c6:c6:66:53:8b:b8:cf:b2:98:c2:e1:50:e4:2c:5d:2c:
41:34:0f:ad:ca:69:93:01:9f:0f:e6:e0:f5:bf:c6:ae:10:97:
33:7c:32:fd:fc:8c:1d:d9:ba:72:e7:71:c9:c1:82:26:07:31:
f5:5b:44:c8:e5:cf:f9:cd:10:87:48:5b:57:f4:af:7d:ef:68:
2a:27:d1:45:53:bf:78:c5:32:b9:97:e2:b1:e9:09:51:82:5d:
31:d3:2b:d6:f1:f9:17:91:62:0e:5b:f8:66:c4:74:4a:b4:87:
96:11:16:41:60:36:1b:6f:69:9a:26:d6:86:55:3e:19:0c:6c:
97:11:47:65:0f:2d:c7:46:76:a7:8c:e2:fe:d4:19:98:57:1d:
e3:01:a4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:50:51 2026 by rpki-client