
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/EAA5793C367411EF98F49F1CC4F9AE02.roa
File: EAA5793C367411EF98F49F1CC4F9AE02.roa (raw, json)
Hash identifier: dNwQm/r9LVAnevdKtiPqVCPUjAv8MtfZcA/z0glpk9w=
Subject key identifier: 15:45:3B:69:8E:1A:8E:B1:96:DC:0C:8A:6B:FA:45:49:F3:CB:AE:9D
Certificate issuer: /CN=A9117836/serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C
Certificate serial: 025E
Authority key identifier: 6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/EAA5793C367411EF98F49F1CC4F9AE02.roa
Signing time: Sat 19 Sep 2026 02:52:23 +0000
ROA not before: Sat 19 Sep 2026 02:52:23 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 151779
IP address blocks: 202.27.114.0/24 maxlen: 24
2001:df2:da40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl
rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 606 (0x25e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117836, serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C
Validity
Not Before: Sep 19 02:52:23 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aadf8e7-4c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:db:cc:0c:58:5a:4a:cb:1e:54:0c:c6:fb:81:
78:61:9b:b5:2d:6c:5c:71:0d:d3:29:40:4d:04:aa:
dc:62:0b:60:a5:e5:b5:30:78:74:cf:b2:0d:01:0c:
ca:79:92:f0:99:2d:4c:f2:4c:c0:25:12:7d:a1:3f:
07:9a:71:13:31:1b:a4:f2:31:18:e3:9e:59:5a:17:
db:0d:f1:e4:7e:98:ff:fc:24:d1:81:33:1d:fe:14:
fd:ad:9b:55:15:2e:3f:d2:31:3c:85:86:bc:38:8c:
9e:b7:0a:12:3a:06:5d:7d:f7:48:73:6d:df:1d:59:
ab:c1:8e:6c:34:2b:09:88:94:23:4f:83:9a:bd:5c:
32:29:5b:aa:19:91:cb:6a:71:3b:d1:d9:35:07:dc:
f4:ed:ab:69:f7:12:e9:9b:8c:ea:f2:9a:68:51:de:
ff:e1:b5:f1:7e:29:4a:fb:cf:d1:a7:20:a5:6b:2c:
6b:f9:fc:d8:d9:f1:30:5f:4d:f5:f4:34:a0:59:12:
f3:5e:f3:7c:ca:ef:23:df:03:25:f4:01:1a:e8:e0:
4c:3d:5f:52:c6:82:e7:9a:ca:8c:1f:be:ee:7a:be:
39:be:5d:aa:7e:10:b3:96:79:ab:91:92:91:39:3e:
cc:74:01:18:e3:8e:0f:c4:e9:92:1c:b8:cc:9c:3f:
fa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:45:3B:69:8E:1A:8E:B1:96:DC:0C:8A:6B:FA:45:49:F3:CB:AE:9D
X509v3 Authority Key Identifier:
keyid:6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/EAA5793C367411EF98F49F1CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.27.114.0/24
IPv6:
2001:df2:da40::/48
Signature Algorithm: sha256WithRSAEncryption
57:32:74:d7:d8:99:58:5f:3b:f1:0a:03:28:6c:08:f6:db:44:
70:5e:88:30:1d:5f:fa:86:20:23:0f:cb:ca:f9:fc:04:a2:23:
90:5a:ca:b5:65:cf:8b:7d:ef:7d:c8:3d:14:1c:ad:23:20:34:
8f:75:b3:06:cf:a1:78:f3:84:34:fb:c5:81:99:86:b4:59:3f:
27:fe:61:9d:b6:7b:7d:e9:c8:ab:84:19:73:73:b6:ef:7d:38:
84:a5:d7:2c:31:31:ae:93:d9:73:76:9c:d3:86:cd:dc:a0:45:
88:87:2c:12:48:01:e0:70:62:8e:ed:13:e0:af:25:3e:db:ac:
72:8a:f2:29:75:f0:dd:66:b1:82:ec:04:64:38:74:24:59:26:
ce:05:8b:db:b7:2d:a4:ac:f3:50:9f:c9:05:d9:46:2a:8f:e8:
1f:26:60:cc:4f:d9:4e:ef:95:0d:65:b3:99:31:fd:86:8a:40:
e3:3c:ca:6c:23:70:c5:5d:21:6d:91:3a:2f:12:13:eb:47:d5:
a7:27:e2:e8:de:f1:db:8d:f3:75:5a:2a:e1:65:c9:20:b6:49:
0b:af:b6:df:7c:bf:c4:00:33:16:78:36:e7:33:d7:15:2f:53:
f6:c3:74:c6:c5:d6:ba:9c:c8:3c:d2:16:51:d9:af:49:0e:d6:
10:98:2a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:24:42 2026 by rpki-client