
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/EC39CCB479B911F19EDAB94259A30FBC.roa
File: EC39CCB479B911F19EDAB94259A30FBC.roa (raw, json)
Hash identifier: /nPdTpPq5UDEumxLQj4O8mM0ae+/XLWju2fFQo05p0w=
Subject key identifier: 69:03:5C:6C:A0:4A:7E:61:07:E3:99:87:D0:DA:B5:F1:06:04:87:9C
Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial: 0164
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/EC39CCB479B911F19EDAB94259A30FBC.roa
Signing time: Sun 04 Oct 2026 20:41:20 +0000
ROA not before: Sun 04 Oct 2026 20:41:20 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 9304
IP address blocks: 74.52.2.0/24 maxlen: 24
74.52.7.0/24 maxlen: 24
74.52.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:43:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356 (0x164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Validity
Not Before: Oct 4 20:41:20 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ac2b9f0-722a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f3:d1:20:6d:f3:02:01:11:c1:ee:14:2e:25:
00:59:1d:fa:61:32:d4:b0:ae:90:6b:1b:d0:fe:94:
f8:93:ff:85:4f:a8:9d:cb:eb:f5:1a:c6:d7:2f:99:
81:0f:0b:da:41:2e:41:d6:c1:99:70:8f:43:55:a7:
23:16:23:fc:65:fa:3c:e9:65:5d:8a:e9:8d:b1:62:
41:0c:76:18:46:08:e1:b3:1c:ba:a2:0a:cf:bd:78:
e4:ad:b8:76:c4:26:96:0a:24:de:a9:ad:af:7d:fd:
e6:a6:b1:c4:c1:21:2a:d0:20:ee:1b:8e:c2:60:63:
5a:06:8b:28:82:50:0d:68:86:df:35:0a:71:f9:bb:
1d:4a:23:7d:ca:46:a4:15:b8:23:bd:a6:5b:a5:f9:
a1:9b:19:7a:14:7a:b7:12:92:ff:83:39:5f:48:c9:
70:ac:1b:95:2e:b4:39:7f:fa:60:ec:ac:a1:23:ae:
86:af:cd:ad:a3:b9:13:6d:7a:ae:22:c2:4b:c7:08:
86:53:72:50:91:f8:48:93:f8:d1:1e:3f:51:03:28:
a8:47:32:59:7c:b7:33:0b:54:15:f3:2d:bc:27:b8:
b8:6e:d9:07:28:ca:08:46:57:72:91:98:a9:a0:82:
8e:09:ef:17:9f:56:a5:64:9d:e4:03:05:ff:45:39:
5c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:03:5C:6C:A0:4A:7E:61:07:E3:99:87:D0:DA:B5:F1:06:04:87:9C
X509v3 Authority Key Identifier:
keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/EC39CCB479B911F19EDAB94259A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
74.52.2.0/24
74.52.7.0-74.52.11.255
Signature Algorithm: sha256WithRSAEncryption
50:21:41:a9:32:1d:8b:aa:7f:03:da:1b:2b:64:78:17:80:4a:
ba:10:98:1f:ab:a9:64:79:ee:5f:87:6e:b5:a0:59:01:e0:a7:
0f:47:de:a5:bb:35:fe:2b:de:f5:7b:43:38:69:72:30:a7:e6:
a7:71:2d:73:7b:e4:34:ec:75:59:e0:fe:c8:f6:3d:f2:e4:c8:
c0:9e:fb:70:9b:a8:20:f7:53:ef:bd:4e:e0:a0:24:24:36:cf:
5b:7a:11:a8:0c:46:7f:51:60:b6:5e:c1:63:ac:02:22:6d:98:
27:ee:01:24:82:45:d4:ca:93:25:d6:8d:04:a4:2d:21:a0:b1:
cb:17:8d:88:c5:44:a6:d4:20:76:2d:47:ee:05:b9:7c:ba:79:
80:3e:3d:22:be:5e:f6:46:23:64:84:09:fc:1f:e3:91:8e:0b:
45:c9:cd:8c:ed:e9:06:a4:5f:4f:de:5a:27:97:82:7b:07:23:
38:f1:04:3d:fd:74:05:ec:ce:ec:86:a8:e9:e9:b4:e9:7c:07:
9d:8f:db:14:e3:73:f8:82:3e:b8:0a:01:a8:51:ef:35:85:05:
fe:7c:27:13:1c:83:2b:e4:de:75:e3:e2:d4:a2:ca:06:b2:73:
22:bc:32:73:8d:36:8c:ef:76:3f:5d:55:57:f8:bf:51:6a:ce:
29:4b:2f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:57:52 2026 by rpki-client