
$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/C1ECF984D07411F0B0B35C27C4F9AE02.roa
File: C1ECF984D07411F0B0B35C27C4F9AE02.roa (raw, json)
Hash identifier: os69TIQA56BBN7T5iYLRdSgFw8k4d4WQd/V6IlYfL7M=
Subject key identifier: 25:4D:54:EF:4E:96:04:E6:16:D1:3F:8E:44:76:5E:BC:92:77:21:9D
Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Certificate serial: 029E
Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/C1ECF984D07411F0B0B35C27C4F9AE02.roa
Signing time: Fri 27 Feb 2026 15:17:18 +0000
ROA not before: Fri 27 Feb 2026 15:17:17 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 46606
IP address blocks: 65.254.64.0/19 maxlen: 24
66.116.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670 (0x29e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Validity
Not Before: Feb 27 15:17:17 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a1b57d-ecc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:09:92:37:37:83:51:28:b9:0e:7c:1e:49:
0c:0b:43:35:ba:be:3d:53:67:71:f9:39:4c:39:9d:
0c:1a:aa:5d:29:90:21:c5:32:ea:be:28:ae:d1:22:
e1:13:85:6b:4e:14:84:04:86:31:3b:02:1f:2a:8f:
6f:53:e5:90:b8:09:c8:ab:ee:a6:68:a9:ad:a2:13:
a0:54:26:49:ab:07:24:26:05:bc:1b:7a:71:86:9b:
19:27:03:44:ca:30:9f:f9:95:07:74:1a:98:4b:63:
7d:af:c2:69:2d:3d:e1:0c:40:9e:12:f1:6b:04:34:
2f:8e:7e:6f:4c:92:e0:91:26:34:62:03:6e:f3:53:
87:2f:56:a1:b1:75:e1:75:92:7b:f2:63:01:c5:9e:
b7:bf:9e:6e:27:74:46:1a:b2:04:d0:e3:3e:c3:69:
07:f1:a0:83:53:9a:85:f6:cd:a5:8f:17:c8:61:62:
67:7d:ac:5d:e5:c2:f9:46:d3:bf:2e:a8:08:2a:6b:
27:a0:d0:1e:59:72:dc:1a:94:3b:42:2f:4d:9d:bc:
fb:2e:40:6d:29:f0:c9:60:16:c6:50:7e:45:ac:4c:
4f:51:29:53:a8:18:b0:72:47:32:6f:de:e6:cc:e0:
9b:6d:bc:41:1e:ec:25:78:cb:c0:0f:43:6c:bb:4f:
0d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4D:54:EF:4E:96:04:E6:16:D1:3F:8E:44:76:5E:BC:92:77:21:9D
X509v3 Authority Key Identifier:
keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/C1ECF984D07411F0B0B35C27C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
65.254.64.0/19
66.116.128.0/18
Signature Algorithm: sha256WithRSAEncryption
81:31:63:85:aa:2c:93:b3:bf:ad:92:20:99:19:2a:98:7e:7b:
3f:6f:4f:28:87:8d:0a:03:4d:8e:38:50:54:2c:52:57:b7:a1:
ec:a5:a9:67:37:65:87:e7:6c:5e:8e:51:1a:c1:b7:77:7f:5f:
2a:18:ac:73:36:25:11:52:d9:cd:67:48:2b:77:b8:33:42:da:
b4:ef:af:23:f2:ff:2b:cd:f1:a2:a4:f4:3f:cf:41:b5:26:4e:
a7:74:56:16:4f:f7:f2:74:d0:a3:26:12:27:84:6a:ac:76:e7:
cd:88:ba:f2:c1:7a:04:d1:8f:02:a1:66:86:cf:82:ce:b0:b6:
70:0b:b3:20:1b:9e:86:f3:24:36:35:2d:18:56:54:49:11:81:
ad:d2:d2:eb:ca:37:97:2d:52:a8:5b:4b:9a:f1:be:1c:12:18:
b3:08:7a:6a:86:6c:e7:b1:3b:86:62:4b:23:af:19:70:58:d9:
1b:b4:ec:19:f0:7f:a0:59:e9:8c:2d:6f:9c:95:56:bc:a5:35:
96:ac:d7:00:54:ec:01:4d:20:09:39:dd:57:1c:2e:87:49:99:
51:56:42:51:8d:30:8d:b3:c5:8a:34:56:8f:26:ed:1f:4c:11:
87:64:f3:1b:26:86:06:35:a1:62:79:8b:c1:50:d2:2f:ef:37:
5b:7a:5c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:20 2026 by rpki-client