
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/A50EE218C34D11EEBC95A913C4F9AE02.roa
File: A50EE218C34D11EEBC95A913C4F9AE02.roa (raw, json)
Hash identifier: cYXAizbDFkYc4+qxaI9fGjQHetEUsCO8dm+QjI7b2mE=
Subject key identifier: 8D:FA:61:EA:C2:D8:11:F7:37:27:B6:BF:96:A9:91:1C:4D:02:A1:B7
Certificate issuer: /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Certificate serial: 35EB
Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/A50EE218C34D11EEBC95A913C4F9AE02.roa
Signing time: Tue 28 Jul 2026 15:10:38 +0000
ROA not before: Tue 28 Jul 2026 15:10:38 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 138524
IP address blocks: 210.246.80.0/24 maxlen: 24
210.246.81.0/24 maxlen: 24
210.246.82.0/24 maxlen: 24
210.246.83.0/24 maxlen: 24
210.246.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:10:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13803 (0x35eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C5B0, serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Validity
Not Before: Jul 28 15:10:38 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a68c66d-8db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f7:1e:78:e3:57:17:cd:59:4b:6c:c8:bd:cb:
27:38:9e:3b:3e:a3:1e:99:f6:eb:97:d4:40:6a:76:
6c:df:1a:b3:15:b2:ce:43:bb:62:1f:b1:db:47:43:
70:7f:b0:16:be:f7:97:ac:e4:1d:89:72:ff:16:9f:
cd:24:15:96:e1:cd:1f:ab:94:3e:e2:00:97:a2:86:
76:02:81:60:2c:30:2f:a2:81:a4:bd:c3:4f:96:0d:
60:b3:0d:ab:09:93:8a:01:a2:e5:72:94:29:fb:73:
79:78:fb:cc:fa:77:6d:46:0f:e7:98:23:08:e5:0b:
e5:34:a5:6c:ae:66:0f:7c:79:fd:dc:08:51:b3:47:
ec:e6:10:f3:c5:e4:f8:c0:5c:6f:95:a3:be:c9:4f:
02:9b:cc:7a:8c:6f:5e:a1:af:e7:ea:54:72:77:6b:
c9:48:8f:d9:23:bf:e0:0e:1a:77:6c:b9:70:69:82:
00:16:79:82:d8:25:b8:24:7b:d9:95:37:af:d5:6c:
94:de:ea:99:c1:e8:22:b8:ea:a6:c6:10:6c:b6:56:
33:c5:99:39:64:c5:86:7f:bd:9e:9b:d7:7f:7b:46:
58:fc:0b:f0:14:8c:0e:ca:37:0c:57:33:d4:44:87:
40:f9:92:e2:8d:47:86:78:76:b0:6a:d7:6d:cc:d7:
62:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FA:61:EA:C2:D8:11:F7:37:27:B6:BF:96:A9:91:1C:4D:02:A1:B7
X509v3 Authority Key Identifier:
keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/A50EE218C34D11EEBC95A913C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.246.80.0-210.246.84.255
Signature Algorithm: sha256WithRSAEncryption
61:87:b4:31:9c:da:ab:23:ec:73:78:23:e3:5a:f4:58:2a:a0:
07:f0:35:4f:bb:f8:8f:f7:3c:ee:90:8b:41:80:12:84:5f:81:
1a:1b:0c:c6:70:72:62:5d:51:75:ff:0c:34:af:4b:aa:ab:02:
c2:0c:77:8a:42:10:e0:a7:05:45:55:1a:45:42:bf:0f:1f:3f:
d7:ea:f8:82:bb:66:08:06:bf:71:cb:93:48:c1:ce:02:5e:c2:
6e:23:54:c9:69:86:67:56:36:f6:78:7d:1b:da:7e:12:e8:24:
d3:3b:90:07:13:7b:57:bf:e6:9d:0e:10:db:21:a2:b9:75:67:
9a:e9:f6:df:65:bb:72:3e:46:2a:3c:73:88:6d:1f:f7:3e:9f:
d1:64:6b:63:d9:83:54:62:30:8c:63:4d:01:ba:74:7d:3d:ce:
54:c5:46:c6:0f:00:52:ae:cd:8c:6f:54:5d:76:1e:f0:af:f8:
a7:3a:7d:43:a4:b2:08:d6:ad:aa:5f:58:19:9e:8c:e2:f8:7b:
49:57:43:48:ca:96:de:d6:6c:50:96:f9:ca:4c:67:90:25:8b:
16:2a:1e:5d:09:42:70:fe:d1:06:ca:23:04:9b:24:70:f0:c6:
74:35:1a:06:10:89:95:d2:9c:b8:17:ac:67:e3:52:c1:1c:03:
4a:2d:be:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:31:28 2026 by rpki-client