
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/2357FC145F8D11EF94E7303FC4F9AE02.roa
File: 2357FC145F8D11EF94E7303FC4F9AE02.roa (raw, json)
Hash identifier: gVapXsxz8qTnLdO52OE1oddtuxrXU7Y55OD5E65Sa4A=
Subject key identifier: 6D:77:FA:2F:96:02:53:FE:31:B5:DE:1E:8A:09:EB:D8:1C:23:0B:65
Certificate issuer: /CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897
Certificate serial: 1710
Authority key identifier: E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/2357FC145F8D11EF94E7303FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:25:38 +0000
ROA not before: Sat 12 Jul 2025 16:55:29 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 17819
IP address blocks: 27.111.183.0/24 maxlen: 24
2404:6900::/33 maxlen: 33
2404:6900:7000::/40 maxlen: 40
2404:6900:7001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl
rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:27:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5904 (0x1710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172D91, serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897
Validity
Not Before: Jul 12 16:55:29 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a46882-343e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:30:14:c9:f0:a8:2d:e6:11:f5:bf:5c:33:
75:f9:7f:1b:54:5a:e4:9b:ad:f1:c6:f5:90:f9:f3:
7e:ce:c3:44:18:1b:8f:50:d8:9c:4f:c3:5c:e8:e3:
48:59:c8:25:5a:85:6a:9d:c4:92:3e:63:20:e9:04:
f7:76:3e:df:e8:11:17:d3:e4:f8:d1:3a:ac:6e:81:
0e:6c:67:ea:f7:bf:41:72:b2:c9:10:02:d0:79:da:
79:94:c8:88:23:92:21:17:d2:c4:51:82:80:26:87:
a0:cb:b3:b3:c4:8e:44:91:ff:ac:15:35:a1:70:76:
25:1a:3a:ae:69:b0:05:76:89:95:bc:1a:31:c1:23:
7f:f0:69:53:e9:6d:6d:f9:43:4d:f1:dc:0c:9b:87:
73:56:7c:42:9a:be:04:7c:bc:c5:82:af:41:c8:9f:
25:91:f3:67:b7:de:31:e0:f8:32:23:a9:df:2a:44:
a5:8a:67:16:57:9f:58:7b:14:6c:fe:41:4e:3c:b0:
57:51:ae:f9:9d:a8:c9:17:b2:e8:11:7a:8b:15:e5:
6f:2b:e0:89:50:fc:c1:8a:f8:d1:f8:f5:bb:61:a9:
b5:63:08:1b:01:0d:d1:cd:19:46:5a:51:0e:13:49:
29:5e:77:56:bb:4c:e2:a1:58:8b:83:d2:74:e4:ae:
2c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:77:FA:2F:96:02:53:FE:31:B5:DE:1E:8A:09:EB:D8:1C:23:0B:65
X509v3 Authority Key Identifier:
keyid:E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/2357FC145F8D11EF94E7303FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.111.183.0/24
IPv6:
2404:6900::/33
Signature Algorithm: sha256WithRSAEncryption
0f:33:8f:4a:aa:89:b8:88:8f:d7:87:0e:37:66:4c:d7:f2:90:
c1:ed:b8:e2:6a:18:78:f1:23:63:69:8b:9f:14:35:98:15:9a:
7e:12:9f:ca:17:91:cd:24:59:b9:c1:d1:d9:6d:01:19:21:75:
80:a8:a4:da:de:c6:28:50:8d:64:bc:fb:7a:db:69:da:b7:4c:
40:e6:c2:0b:2f:bf:30:59:55:03:5c:05:33:a0:83:e9:34:75:
40:6a:11:7c:1e:02:09:64:fc:12:b9:ad:92:1c:77:f1:d5:56:
0a:d5:14:7d:e3:23:09:8b:4c:09:d6:54:ab:85:29:96:3d:3f:
04:7a:d3:c5:2b:d1:41:6c:09:c0:71:8a:14:e2:a5:89:c9:e6:
d0:88:ab:40:d2:f0:70:ad:3e:03:84:c1:4a:6e:b8:6b:60:9f:
d7:b9:60:0b:35:7d:4d:1a:cf:01:2a:63:74:11:10:81:dc:b4:
a7:fb:18:2f:3d:dd:09:41:e6:df:86:46:83:23:57:04:25:a8:
88:cd:bc:5c:e3:08:06:ab:b1:cf:09:29:fe:6e:a2:f3:d4:dd:
ca:2d:11:e5:6e:3e:c5:25:8b:24:c3:09:23:2a:8b:a3:8b:8b:
cf:c9:e5:5f:6e:b4:0d:4f:b4:0f:db:ab:38:b6:4c:9a:9f:f4:
c1:05:34:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:36 2026 by rpki-client