
$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/6AACACDA794A11F1A904CD4C78A30FBC.roa
File: 6AACACDA794A11F1A904CD4C78A30FBC.roa (raw, json)
Hash identifier: Z4hEG0Trz/N76cx/x1yyhLUeztFJFgTEceRK4a+RR2U=
Subject key identifier: 3A:5F:E0:31:8E:0A:4D:60:56:9F:8F:29:A9:01:F8:07:6A:A3:C5:F8
Certificate issuer: /CN=A917748E/serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Certificate serial: 02E4
Authority key identifier: AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/6AACACDA794A11F1A904CD4C78A30FBC.roa
Signing time: Fri 24 Jul 2026 12:10:29 +0000
ROA not before: Fri 24 Jul 2026 12:10:29 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 394695
IP address blocks: 43.225.52.0/22 maxlen: 24
103.21.58.0/23 maxlen: 24
103.50.160.0/22 maxlen: 23
103.195.184.0/22 maxlen: 23
103.224.23.0/24 maxlen: 24
137.59.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 740 (0x2e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917748E, serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Validity
Not Before: Jul 24 12:10:29 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a635635-1388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:06:98:29:43:77:29:e2:67:ef:bb:08:ad:8d:
03:98:07:0c:ad:3a:6e:15:4a:4f:1f:36:9a:ae:4d:
e8:cd:b0:a2:d6:b6:81:e4:18:5c:df:1e:15:81:2d:
64:dc:f2:31:44:99:3b:34:2d:f9:7e:de:87:67:ef:
59:ca:98:69:e4:8a:67:2b:81:83:1c:ee:fa:13:29:
11:31:66:17:75:37:70:9a:c0:96:c0:68:31:67:aa:
a4:98:78:a4:ab:49:7d:33:f6:a3:38:f8:8b:22:48:
08:66:3a:bc:d0:34:54:f7:ae:de:d9:49:e4:06:e1:
36:c2:af:96:c6:11:54:04:a0:9f:ad:3e:6c:aa:f3:
b2:33:1e:fc:69:59:b9:d7:9c:c1:4c:00:93:ed:1a:
c9:81:60:7f:1b:9e:4a:d5:f9:a7:1f:6e:8b:a8:93:
8a:15:5f:59:a8:30:ec:d5:5d:d4:34:1c:55:48:b1:
17:78:cb:de:98:56:4d:de:0f:3a:15:72:8b:b4:a0:
dc:d8:3d:54:53:f4:cc:e1:5c:7a:30:46:6d:43:d3:
90:05:05:cc:82:e5:13:27:15:41:e5:9c:69:eb:f9:
ff:6a:15:20:a5:74:e9:c9:ea:aa:88:32:16:e0:86:
22:ab:1e:69:17:4c:75:dd:5f:18:78:9b:1b:9c:e0:
e0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5F:E0:31:8E:0A:4D:60:56:9F:8F:29:A9:01:F8:07:6A:A3:C5:F8
X509v3 Authority Key Identifier:
keyid:AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/6AACACDA794A11F1A904CD4C78A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
43.225.52.0/22
103.21.58.0/23
103.50.160.0/22
103.195.184.0/22
103.224.23.0/24
137.59.148.0/22
Signature Algorithm: sha256WithRSAEncryption
db:4b:93:0d:d9:53:e9:f5:f9:1e:6f:dc:94:1d:37:07:cb:15:
29:b0:54:e6:a8:0a:7b:ba:4f:28:d5:5a:6e:2c:14:b8:4c:3e:
f9:a1:63:a4:5d:aa:d2:24:1d:79:85:bd:1c:fc:57:36:b8:a0:
f1:86:7a:92:a5:6b:a4:56:5c:58:e8:b8:82:00:f8:20:5f:d8:
60:b3:d5:7c:ff:e0:29:c5:0e:e5:8c:5a:e1:26:12:5d:69:86:
de:c6:41:b9:df:c2:f8:4a:e1:c9:f0:2e:b7:8e:73:2c:e0:31:
8f:17:65:32:d2:51:f7:3d:77:26:8a:d5:e2:a3:47:ba:47:16:
14:aa:7c:1b:d7:92:79:a6:81:91:4b:77:9a:68:b5:4c:3a:6b:
94:17:dd:a6:3f:24:d9:99:37:8a:1e:fd:d5:25:ce:0c:d8:40:
9c:df:c7:41:b5:ff:ed:ae:cf:89:9e:cc:f8:ed:72:9a:f3:7d:
32:2b:d0:bd:94:0c:cc:d9:ce:6b:b8:3f:d8:ce:e8:f2:e8:ff:
1e:8f:c4:cd:fc:8e:f6:e2:dc:68:28:fb:a0:be:8d:8c:80:41:
f9:bb:85:d1:2c:62:c9:4c:1b:a1:00:41:da:16:2b:e9:25:27:
1b:79:1e:b4:f7:0f:84:3b:10:54:b0:1d:ea:5c:e3:27:9d:d2:
32:ef:d5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:35:46 2026 by rpki-client