
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/2447645A29D711F19B6521AE99833773.roa
File: 2447645A29D711F19B6521AE99833773.roa (raw, json)
Hash identifier: 9fh2MIgtJRRPoGpWqGsheDDuAAKoytopq3Qqh52Ib4A=
Subject key identifier: 29:EC:BE:6B:96:D3:02:01:1A:03:04:6F:D5:34:96:DD:14:93:CD:21
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: 014E
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/2447645A29D711F19B6521AE99833773.roa
Signing time: Tue 28 Jul 2026 19:40:21 +0000
ROA not before: Tue 28 Jul 2026 19:40:20 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 27947
IP address blocks: 207.226.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Jul 28 19:40:20 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a6905a4-719b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a4:06:bd:b2:78:88:31:58:cb:c4:f9:24:45:
cb:4a:6f:42:a9:d9:22:ac:ee:a4:2c:69:bf:e9:cf:
0d:0d:19:47:dd:2e:7c:e2:f3:c9:dd:63:e4:95:40:
e8:9f:49:15:60:8b:02:93:c2:f0:0f:7b:67:00:dc:
4e:7b:14:00:7d:df:88:bb:2f:90:47:86:f2:ab:25:
57:d4:1e:8c:c3:d5:0d:91:76:00:ef:b0:aa:5a:df:
b0:57:62:94:1d:42:2a:65:60:c7:00:de:cb:bb:85:
78:eb:62:ff:ec:cf:2e:ab:a6:2a:aa:f0:b0:8b:ff:
53:55:9b:a2:25:13:07:0b:0f:a7:32:05:e1:5c:60:
36:d6:90:e0:ee:05:38:7a:bc:48:13:e5:c1:22:57:
0a:e9:61:d5:8a:8d:25:db:21:97:dc:2a:fd:2f:3f:
3a:97:20:3a:c7:74:92:8c:4c:b9:af:66:1d:a7:d3:
c9:93:82:c1:5e:c6:a3:b0:24:6f:1a:f1:e9:d1:94:
99:51:66:5e:5d:82:60:bd:89:7c:18:8f:1d:16:b9:
85:c2:bf:c4:6d:42:7a:bd:6d:77:12:86:15:b9:e6:
93:59:36:f7:ef:38:d5:db:f6:d8:6e:ae:5e:ce:6e:
7f:72:29:14:53:ea:0d:6c:8d:26:d5:92:27:83:b6:
0a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EC:BE:6B:96:D3:02:01:1A:03:04:6F:D5:34:96:DD:14:93:CD:21
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/2447645A29D711F19B6521AE99833773.roa
sbgp-ipAddrBlock: critical
IPv4:
207.226.25.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:3e:85:f3:d5:01:93:31:84:81:9d:e6:2b:92:20:1a:71:96:
a7:d9:75:cd:9b:9e:54:23:9a:ba:a9:1a:5d:c4:32:52:66:36:
a0:87:ab:e6:60:77:99:32:b4:82:8f:7a:07:f4:77:1f:92:13:
b4:e7:91:73:6f:4e:c6:8b:79:a3:8c:64:a7:8a:36:39:b7:d8:
52:3e:f4:2b:8c:32:f8:a5:88:2a:30:40:12:e2:46:6c:70:12:
6e:b1:82:88:f7:90:e0:c6:da:23:cf:72:14:6f:1c:6e:56:7d:
07:8a:d8:53:04:c3:2b:35:8c:39:a0:53:ff:47:36:2e:ac:d4:
fd:fd:0c:41:26:b9:ed:25:8a:43:44:a4:8a:bb:94:ef:c7:63:
00:91:db:46:d9:ea:40:15:7e:82:4f:f6:af:54:0a:7f:7f:1a:
9e:45:4d:49:a6:35:89:00:07:94:19:75:39:94:eb:5f:ca:be:
3d:c9:ea:ca:e6:69:8c:d6:27:b8:4a:9d:8a:a5:93:50:95:c0:
d9:a1:d6:30:e6:af:a3:ed:07:fe:96:b3:bd:13:c4:bb:cb:44:
f1:20:78:6f:f8:a7:89:6d:30:cd:8e:de:93:05:03:1c:85:9b:
d6:b4:e6:ea:29:9f:90:c5:10:e4:5b:f0:bc:42:35:6e:21:e1:
b1:53:e7:8d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA0QTkxMTAvBgNVBAUTKDNEN0IxNUJENzdEOUI5NzRFMzczNThEQTc1NERGRUE5
MjkxRTY4M0EwHhcNMjYwNzI4MTk0MDIwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTY5MDVhNC03MTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6KQGvbJ4iDFYy8T5JEXLSm9CqdkirO6kLGm/6c8NDRlH3S584vPJ3WPklUDo
n0kVYIsCk8LwD3tnANxOexQAfd+Iuy+QR4byqyVX1B6Mw9UNkXYA77CqWt+wV2KU
HUIqZWDHAN7Lu4V462L/7M8uq6YqqvCwi/9TVZuiJRMHCw+nMgXhXGA21pDg7gU4
erxIE+XBIlcK6WHVio0l2yGX3Cr9Lz86lyA6x3SSjEy5r2Ydp9PJk4LBXsajsCRv
GvHp0ZSZUWZeXYJgvYl8GI8dFrmFwr/EbUJ6vW13EoYVueaTWTb37zjV2/bYbq5e
zm5/cikUU+oNbI0m1ZIng7YK+QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCnsvmuW
0wIBGgMEb9U0lt0Uk80hMB8GA1UdIwQYMBaAFD17Fb132bl043NY2nVN/qkpHmg6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9GRDM3MkU0QTI5
NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS9QWHNWdlhmWnVYVGpjMWphZFUzLXFTa2Vh
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzA0QTkvRkQzNzJFNEEyOTQ1MTFGMUE3QUEzRUJEODRFRTUyOEUvMjQ0NzY0NUEy
OUQ3MTFGMTlCNjUyMUFFOTk4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAz+IZMA0GCSqGSIb3DQEBCwUAA4IBAQALPoXz1QGTMYSBneYrkiAa
cZan2XXNm55UI5q6qRpdxDJSZjagh6vmYHeZMrSCj3oH9HcfkhO055Fzb07Gi3mj
jGSnijY5t9hSPvQrjDL4pYgqMEAS4kZscBJusYKI95Dgxtojz3IUbxxuVn0HithT
BMMrNYw5oFP/RzYurNT9/QxBJrntJYpDRKSKu5Tvx2MAkdtG2epAFX6CT/avVAp/
fxqeRU1JpjWJAAeUGXU5lOtfyr49yerK5mmM1ie4Sp2KpZNQlcDZodYw5q+j7Qf+
lrO9E8S7y0TxIHhv+KeJbTDNjt6TBQMchZvWtObqKZ+QxRDkW/C8QjVuIeGxU+eN
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:02:05 2026 by rpki-client