
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/3218652829E811F18CA8F3909F833773.roa
File: 3218652829E811F18CA8F3909F833773.roa (raw, json)
Hash identifier: eU5ZrLctFwDk24jAlM3+JYuAwt/fHYDYFfG92ftHrG4=
Subject key identifier: 97:7A:71:FC:FF:98:DF:0C:08:6F:AB:AC:09:ED:0F:2A:24:7F:CC:6A
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: 0158
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/3218652829E811F18CA8F3909F833773.roa
Signing time: Tue 28 Jul 2026 19:40:46 +0000
ROA not before: Tue 28 Jul 2026 19:40:46 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 42475
IP address blocks: 205.177.67.0/24 maxlen: 24
205.177.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 344 (0x158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Jul 28 19:40:46 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a6905be-d81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0e:af:a7:99:b8:89:50:49:c0:1e:0f:bf:f9:
18:af:dc:26:4f:62:c4:d9:f4:9e:eb:07:f7:d2:c8:
7a:e5:82:54:f6:48:6d:b9:f6:3b:35:7a:e7:64:16:
8c:c5:1d:da:4f:58:f4:94:57:35:3f:5d:c5:5e:19:
c6:2e:40:45:56:34:ff:f3:cb:31:56:e7:fa:95:e6:
e5:fa:f8:2e:2f:49:ca:5d:29:e2:0f:ef:7d:82:cc:
42:c3:7b:9f:c6:81:c0:b1:8e:79:87:6f:76:c2:7a:
0c:7c:e7:39:ef:31:57:14:9d:0a:f7:b6:74:45:d6:
49:a2:4f:d3:ab:a7:91:b7:e4:8f:87:ce:99:f1:df:
ab:dd:3d:67:2b:b9:bd:2f:62:b1:0f:3d:07:83:35:
6f:74:29:e2:2a:22:ed:bd:ae:64:31:3a:ab:26:20:
69:97:be:e2:77:6d:06:03:f5:4f:99:7c:33:fb:46:
e1:23:5f:a3:a0:35:69:74:8e:d0:ca:b4:2a:45:5f:
f7:28:46:04:51:59:cf:f7:16:c5:0e:a8:bf:13:46:
ef:7d:48:98:ad:4d:c4:cd:92:96:16:ab:fb:3a:6c:
fd:fc:fa:36:1b:9f:09:c0:96:0c:0e:cd:7c:fc:09:
46:17:01:35:8c:24:ff:22:34:0c:0b:fa:32:60:95:
b6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7A:71:FC:FF:98:DF:0C:08:6F:AB:AC:09:ED:0F:2A:24:7F:CC:6A
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/3218652829E811F18CA8F3909F833773.roa
sbgp-ipAddrBlock: critical
IPv4:
205.177.67.0-205.177.68.255
Signature Algorithm: sha256WithRSAEncryption
21:e9:94:0d:8d:1d:4f:8d:75:9a:f1:12:7a:81:d3:09:da:66:
89:8f:51:2f:bd:5b:97:2a:eb:92:cf:ce:37:0b:9d:86:64:81:
fe:2a:e6:46:83:9f:61:24:a4:06:fa:41:8b:dd:e3:fe:cb:db:
5d:07:cb:d4:21:44:1c:86:64:77:3b:da:d3:13:c3:7e:ac:50:
bf:72:e6:94:49:27:89:0c:60:74:12:de:fe:f7:07:09:67:b6:
66:1c:ef:22:69:b8:53:d9:5f:05:98:4c:29:0c:5c:59:65:78:
d5:3b:36:e3:70:e3:9a:8c:c9:75:5c:4d:bd:d9:65:2a:ba:4e:
54:72:80:12:d8:09:56:d6:f8:42:b5:26:17:4d:0a:36:b9:f5:
30:ca:ad:04:5d:04:72:94:fc:a5:60:32:70:fa:ff:e3:43:db:
d6:d6:34:62:f7:0a:77:63:6a:70:48:f8:d3:06:07:a6:c4:e5:
43:54:86:c5:5d:bc:b7:eb:24:1a:b3:88:cc:92:e3:b1:ab:c3:
29:df:f5:10:ee:a6:8e:f6:af:46:6f:7e:96:0a:9c:24:9e:82:
8e:83:9c:46:e7:89:68:7d:e6:a4:2e:9c:45:41:65:f1:dc:49:
bc:5e:b0:6a:dc:ad:1e:da:57:d4:d9:de:94:a6:00:1d:5f:6c:
3d:b4:41:ef
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA0QTkxMTAvBgNVBAUTKDNEN0IxNUJENzdEOUI5NzRFMzczNThEQTc1NERGRUE5
MjkxRTY4M0EwHhcNMjYwNzI4MTk0MDQ2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTY5MDViZS1kODFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxw6vp5m4iVBJwB4Pv/kYr9wmT2LE2fSe6wf30sh65YJU9khtufY7NXrnZBaM
xR3aT1j0lFc1P13FXhnGLkBFVjT/88sxVuf6lebl+vguL0nKXSniD+99gsxCw3uf
xoHAsY55h292wnoMfOc57zFXFJ0K97Z0RdZJok/Tq6eRt+SPh86Z8d+r3T1nK7m9
L2KxDz0HgzVvdCniKiLtva5kMTqrJiBpl77id20GA/VPmXwz+0bhI1+joDVpdI7Q
yrQqRV/3KEYEUVnP9xbFDqi/E0bvfUiYrU3EzZKWFqv7Omz9/Po2G58JwJYMDs18
/AlGFwE1jCT/IjQMC/oyYJW2ywIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFJd6cfz/
mN8MCG+rrAntDyokf8xqMB8GA1UdIwQYMBaAFD17Fb132bl043NY2nVN/qkpHmg6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9GRDM3MkU0QTI5
NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS9QWHNWdlhmWnVYVGpjMWphZFUzLXFTa2Vh
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzA0QTkvRkQzNzJFNEEyOTQ1MTFGMUE3QUEzRUJEODRFRTUyOEUvMzIxODY1Mjgy
OUU4MTFGMThDQThGMzkwOUY4MzM3NzMucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBADNsUMDBADNsUQwDQYJKoZIhvcNAQELBQADggEBACHplA2NHU+N
dZrxEnqB0wnaZomPUS+9W5cq65LPzjcLnYZkgf4q5kaDn2EkpAb6QYvd4/7L210H
y9QhRByGZHc72tMTw36sUL9y5pRJJ4kMYHQS3v73BwlntmYc7yJpuFPZXwWYTCkM
XFlleNU7NuNw45qMyXVcTb3ZZSq6TlRygBLYCVbW+EK1JhdNCja59TDKrQRdBHKU
/KVgMnD6/+ND29bWNGL3CndjanBI+NMGB6bE5UNUhsVdvLfrJBqziMyS47Grwynf
9RDupo72r0ZvfpYKnCSego6DnEbniWh95qQunEVBZfHcSbxesGrcrR7aV9TZ3pSm
AB1fbD20Qe8=
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:39:42 2026 by rpki-client