
$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/A4B9732E372211F088B77741C4F9AE02.roa
File: A4B9732E372211F088B77741C4F9AE02.roa (raw, json)
Hash identifier: 3TNlyeCxwMy8NOZgnGPzQndaWXiemPUyKwLX2o1mWQM=
Subject key identifier: 29:64:48:57:B5:6B:7A:03:6E:68:9D:63:E9:D4:B4:4A:B9:23:3D:C5
Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Certificate serial: 024D
Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/A4B9732E372211F088B77741C4F9AE02.roa
Signing time: Fri 31 Oct 2025 02:16:09 +0000
ROA not before: Fri 31 Oct 2025 02:16:09 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 394695
IP address blocks: 66.116.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 589 (0x24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Validity
Not Before: Oct 31 02:16:09 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69041be9-77d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:a2:77:72:0f:c5:c4:e8:17:aa:82:6a:f6:
8d:f2:88:58:b6:ab:d8:6e:88:8b:c1:87:89:6b:aa:
70:ac:4c:c5:24:66:b0:03:78:5c:77:7e:59:80:28:
8f:c7:41:79:fd:7c:3c:d7:54:76:c5:51:8b:62:cb:
4d:27:14:56:e6:5b:b2:23:64:3a:43:3e:87:c4:fa:
1d:75:f1:e1:a2:58:eb:59:16:1e:e6:9a:f5:da:84:
fc:09:c8:8a:06:61:3f:77:a3:1d:a4:81:b3:59:ea:
71:69:c2:97:bd:01:05:d7:b2:83:6d:97:94:b2:80:
01:b5:b8:11:39:1e:71:70:a4:9b:b6:cc:bf:de:2b:
b4:07:79:01:84:e6:28:04:c6:f6:67:bd:43:5d:4f:
dd:25:7c:7b:22:1c:06:00:1c:fe:c9:60:f2:af:12:
27:4e:a6:48:55:8b:d4:3a:a6:0b:84:1b:cc:82:ec:
c7:b4:85:3c:da:67:2b:d6:3a:fa:b6:f6:83:e1:88:
e4:f4:5e:5b:cc:6c:65:15:33:12:a9:1d:9f:21:ed:
15:ac:2f:d0:63:ed:5d:27:e5:91:d7:46:f5:f8:56:
2d:04:fa:94:f4:04:a1:f4:b4:a0:6a:56:d0:89:ae:
8b:41:db:39:e3:cf:d8:af:94:20:b6:20:65:02:0d:
c7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:64:48:57:B5:6B:7A:03:6E:68:9D:63:E9:D4:B4:4A:B9:23:3D:C5
X509v3 Authority Key Identifier:
keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/A4B9732E372211F088B77741C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.116.128.0/17
Signature Algorithm: sha256WithRSAEncryption
ac:cb:76:59:5b:38:34:48:4f:16:0a:cb:69:8e:83:dc:7c:14:
e9:8b:0a:e9:6f:fd:bf:84:e4:84:a2:ea:1a:57:fa:ab:e0:8a:
7b:ae:d2:ab:0f:f5:d6:78:65:7c:ed:39:44:c8:cd:59:c9:13:
43:59:a0:66:46:4a:ca:c0:0d:9a:02:41:6c:74:ed:1c:2b:02:
7b:63:2e:35:47:1a:0b:91:e4:de:db:92:94:28:73:b6:11:61:
49:52:13:fb:d5:9a:7f:45:b8:d4:06:5a:d3:bb:e2:3f:e5:ee:
f7:1a:27:7e:8a:6d:0c:e6:3a:4f:27:30:8d:d0:56:0f:c9:23:
87:1a:a3:61:07:12:4f:a1:5a:68:b1:d8:04:9f:80:77:59:75:
dd:d7:4f:b9:b4:78:71:8c:1f:19:fe:e1:9e:c4:c7:a9:91:db:
95:eb:36:b3:c4:b2:7e:e1:2f:0e:88:24:a3:c4:4d:62:77:6a:
e3:55:75:c4:6f:d8:0b:6f:6d:e9:30:78:3a:91:c5:d3:99:6f:
c0:b5:cc:ad:1a:ba:8b:bc:ef:4f:2b:02:9f:c2:14:fa:3e:7f:
8d:61:7c:bc:48:5c:64:70:d5:72:5b:56:b1:a9:3e:a1:fd:a4:
9b:c8:72:50:66:90:43:18:d2:35:08:a5:11:fb:b8:bd:39:8c:
cb:6e:9a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:33:17 2025 by rpki-client