
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/778B08A40A4911EC8BC5AF5EC4F9AE02.roa
File: 778B08A40A4911EC8BC5AF5EC4F9AE02.roa (raw, json)
Hash identifier: vYjOUFbhsWomhdQCGDNjFRiRUNZnILccQOyVMSYu5mk=
Subject key identifier: E8:61:E3:67:19:2B:5E:EA:C0:60:CE:73:0D:86:47:7A:2C:D9:3F:9F
Certificate issuer: /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9
Certificate serial: 05B1
Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/778B08A40A4911EC8BC5AF5EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:06:40 +0000
ROA not before: Fri 19 Sep 2025 00:05:59 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 146991
IP address blocks: 2407:d4c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl
rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:24:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1457 (0x5b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174C15, serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9
Validity
Not Before: Sep 19 00:05:59 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a46410-f9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:e1:f9:b9:84:9b:78:f8:3a:b1:f1:6c:4c:
b8:5a:e7:73:59:d9:f8:6c:62:88:03:7c:8b:80:80:
dd:9c:af:b5:16:09:33:2b:00:25:f3:a2:1f:77:ed:
5f:45:54:3c:0f:00:bc:8c:d5:49:b1:9a:da:9c:08:
44:c9:69:ba:45:3a:94:d1:88:3a:a1:75:88:b8:3d:
0c:4b:04:2c:d9:49:ba:e6:eb:9c:84:7e:47:32:6e:
3c:46:38:ce:2d:91:35:5a:7a:15:ca:87:dc:d6:5b:
88:e4:ca:ae:5b:1d:b2:52:dc:d8:c2:61:45:63:f0:
89:bb:48:01:36:b9:28:78:96:a0:35:5c:3f:16:a9:
b3:c6:eb:9f:1f:d3:e5:36:3a:12:14:0f:35:17:8f:
ba:25:20:d9:21:b0:88:40:ef:00:6b:85:4d:f6:90:
cb:c0:9d:a0:2e:ae:1c:ce:9e:37:9d:f4:e8:99:46:
35:9d:c4:6a:77:05:49:51:b6:42:89:20:67:2b:44:
a4:98:ec:fc:c7:c4:97:c0:ed:e7:c5:00:07:22:92:
fe:61:2c:d8:6a:76:33:46:ec:4b:87:14:bb:4e:13:
0b:4b:73:01:9e:73:ff:32:45:68:df:26:f7:7a:d0:
b9:c8:82:e5:30:ed:48:93:48:fd:3d:2b:9f:df:12:
8a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:61:E3:67:19:2B:5E:EA:C0:60:CE:73:0D:86:47:7A:2C:D9:3F:9F
X509v3 Authority Key Identifier:
keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/778B08A40A4911EC8BC5AF5EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:d4c0::/32
Signature Algorithm: sha256WithRSAEncryption
12:88:ba:fc:15:81:ef:2c:7b:a6:18:43:d2:52:b8:f8:da:91:
b8:2b:dd:61:69:1d:8f:62:f3:ab:65:1a:9c:39:b6:b8:ad:48:
3e:cd:3b:89:c8:2e:61:23:c4:ae:2b:46:c0:87:31:5a:e2:4d:
85:0f:1d:ff:95:a8:94:27:3d:e5:86:fb:cb:66:07:e9:0b:b8:
73:18:38:81:b5:7f:c8:de:60:22:a8:f8:7f:5b:22:c9:5c:b9:
1b:e5:51:12:fc:ab:14:b7:4e:6d:fc:7f:e9:fc:2f:8e:8a:4b:
b0:5f:45:ed:87:2d:73:33:18:de:1f:6f:dd:d1:9c:72:3a:6e:
43:e4:92:03:83:26:f6:44:40:29:de:a5:2b:cc:62:dd:4f:97:
4d:ac:20:8a:ec:76:98:cd:0a:89:07:e3:ff:00:fb:a7:cf:47:
1c:2c:2c:7d:7b:f4:9e:5b:6b:40:a1:7b:61:6d:3f:94:92:c8:
fd:1d:ae:fb:a3:d4:05:c0:57:63:95:e4:e3:a6:ca:c8:e4:bd:
a7:24:61:38:f0:4f:c2:61:33:da:79:15:ae:32:1c:72:91:38:
91:21:5f:b6:75:17:c2:7e:ec:66:6d:d4:84:be:e2:0c:cc:24:
16:2c:80:19:01:b2:ff:4b:2d:a9:36:69:28:fe:d1:c9:13:9c:
4f:7c:6c:26
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICBbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzRDMTUxMTAvBgNVBAUTKEM3QjAwMDRGRjZCMTg2ODhDMTk3QkM0QjM5RkFDMTI1
RDQ5RkJDRjkwHhcNMjUwOTE5MDAwNTU5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjQxMC1mOWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr73h+bmEm3j4OrHxbEy4WudzWdn4bGKIA3yLgIDdnK+1FgkzKwAl86Ifd+1f
RVQ8DwC8jNVJsZranAhEyWm6RTqU0Yg6oXWIuD0MSwQs2Um65uuchH5HMm48RjjO
LZE1WnoVyofc1luI5MquWx2yUtzYwmFFY/CJu0gBNrkoeJagNVw/FqmzxuufH9Pl
NjoSFA81F4+6JSDZIbCIQO8Aa4VN9pDLwJ2gLq4czp43nfTomUY1ncRqdwVJUbZC
iSBnK0SkmOz8x8SXwO3nxQAHIpL+YSzYanYzRuxLhxS7ThMLS3MBnnP/MkVo3yb3
etC5yILlMO1Ik0j9PSuf3xKKrQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFOhh42cZ
K17qwGDOcw2GR3os2T+fMB8GA1UdIwQYMBaAFMewAE/2sYaIwZe8Szn6wSXUn7z5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEMxNS9BQzlDNkI1MDBB
NDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhvakJsN3hMT2ZyQkpkU2Z2
UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3g3QUFUX2F4aG9qQmw3eExPZnJCSmRTZnZQay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzRDMTUvQUM5QzZCNTAwQTQ0MTFFQzk0Nzk3RTUzQzRGOUFFMDIvNzc4QjA4QTQw
QTQ5MTFFQzhCQzVBRjVFQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAfUwDANBgkqhkiG9w0BAQsFAAOCAQEAEoi6/BWB7yx7phhD0lK4
+NqRuCvdYWkdj2Lzq2UanDm2uK1IPs07icguYSPEritGwIcxWuJNhQ8d/5WolCc9
5Yb7y2YH6Qu4cxg4gbV/yN5gIqj4f1siyVy5G+VREvyrFLdObfx/6fwvjopLsF9F
7YctczMY3h9v3dGccjpuQ+SSA4Mm9kRAKd6lK8xi3U+XTawgiux2mM0KiQfj/wD7
p89HHCwsfXv0nltrQKF7YW0/lJLI/R2u+6PUBcBXY5Xk46bKyOS9pyRhOPBPwmEz
2nkVrjIccpE4kSFftnUXwn7sZm3UhL7iDMwkFiyAGQGy/0stqTZpKP7RyROcT3xs
Jg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:03 2026 by rpki-client