
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/1F5CD892C35111EE9D744F36C4F9AE02.roa
File: 1F5CD892C35111EE9D744F36C4F9AE02.roa (raw, json)
Hash identifier: K3NPwS93LI39vDCydod4QMQz06LNTlu8HQCmLQ09JU0=
Subject key identifier: F7:CB:1C:2E:B5:0C:4C:85:71:CA:0C:8C:74:47:A2:F2:00:CD:C7:9C
Certificate issuer: /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Certificate serial: 35F1
Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/1F5CD892C35111EE9D744F36C4F9AE02.roa
Signing time: Tue 28 Jul 2026 15:10:48 +0000
ROA not before: Tue 28 Jul 2026 15:10:48 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 7485
IP address blocks: 210.246.198.0/24 maxlen: 24
210.246.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:10:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13809 (0x35f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C5B0, serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Validity
Not Before: Jul 28 15:10:48 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a68c678-8a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9b:06:4d:80:dc:83:3f:2a:96:8b:c0:d1:ae:
71:f9:63:ed:ca:d8:05:60:54:8f:d3:45:fb:b6:14:
35:78:87:76:b7:82:9e:b0:cc:20:75:7d:78:12:ef:
d8:b0:89:d5:88:4a:0a:6c:d0:6e:9c:d6:ee:26:28:
c6:07:eb:d6:43:28:8c:9f:17:38:45:f0:a5:2d:32:
49:1a:a4:36:ff:b6:03:1b:8b:d2:ba:ed:71:83:0b:
86:ee:b6:85:72:0f:cb:c0:2e:20:ff:2e:f0:c9:fa:
d7:b4:30:b3:b5:28:01:7f:af:d7:1b:b4:cf:87:b1:
05:4d:49:e4:f2:e1:c6:fb:e9:4d:2a:cc:8c:47:9a:
33:1a:02:9c:b0:82:bd:c0:8a:7b:62:93:c8:08:72:
08:7c:9d:08:a9:0c:2b:c6:9a:cb:de:c4:f3:4e:39:
01:90:32:49:7a:65:c8:21:55:07:43:cd:01:3c:3a:
fa:61:22:d7:6e:89:85:4e:96:7f:8c:07:9e:a1:6f:
8a:b6:d3:65:f9:46:a2:54:ae:1a:40:73:be:a8:9f:
78:a4:10:ee:90:d3:c5:a2:0a:22:33:da:16:7d:82:
c2:6c:c1:c2:77:64:ca:0b:60:07:cb:3c:dd:54:21:
de:db:09:a2:b1:05:6d:78:d7:f1:96:f9:f6:4b:f5:
65:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CB:1C:2E:B5:0C:4C:85:71:CA:0C:8C:74:47:A2:F2:00:CD:C7:9C
X509v3 Authority Key Identifier:
keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/1F5CD892C35111EE9D744F36C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.246.198.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:6a:9b:5f:f7:84:e6:88:19:0d:9a:9b:0f:9f:f1:13:a4:f7:
94:c7:36:be:46:d4:52:a0:52:55:46:a6:8c:25:49:96:85:7a:
d7:4d:de:0c:62:31:d2:b5:3c:c9:4d:cf:8a:11:19:d5:3a:bf:
6c:96:bd:5b:9b:5b:cf:9b:70:8f:89:1c:ad:09:94:38:49:e1:
64:34:0a:96:c3:d1:c4:3b:80:a9:94:20:74:8e:8c:16:55:8d:
f5:bf:f3:06:c7:a9:cc:e5:35:8c:28:11:46:76:2f:1b:d8:c5:
ef:49:b3:27:5e:d2:84:18:5b:57:ab:74:5d:39:86:94:da:de:
9b:c5:e4:15:08:95:43:14:02:58:41:da:39:68:86:31:fa:16:
7b:13:0e:31:0b:a3:dd:3d:e4:b6:9c:aa:93:5e:bf:a1:7f:b3:
e0:24:5d:10:b7:2a:28:dc:a3:a0:c2:80:3f:ed:bc:b8:f4:87:
24:6c:dc:2c:45:d4:8b:6b:e1:10:1b:af:bf:ce:6c:08:fb:96:
1a:7c:75:2e:fb:09:29:76:73:34:37:5a:c1:a4:14:72:6a:43:
5a:79:bc:26:b0:2f:29:3f:01:82:49:bb:b3:72:63:a4:a7:16:
10:f6:e0:c6:d2:d1:82:d3:50:87:3c:55:cd:61:96:17:e7:ff:
05:1c:af:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:08:30 2026 by rpki-client