
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/E685F69A372D11F1A4767B088F833773.roa
File: E685F69A372D11F1A4767B088F833773.roa (raw, json)
Hash identifier: Qin1CSenHeWf6qKBdgvv65CH/jbRnOCli4KnV1U3QUw=
Subject key identifier: 9E:F0:BC:40:6C:C3:39:3F:BF:07:5B:55:82:3D:91:52:A9:59:0D:35
Certificate issuer: /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Certificate serial: 03
Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/E685F69A372D11F1A4767B088F833773.roa
Signing time: Mon 13 Apr 2026 11:42:51 +0000
ROA not before: Mon 13 Apr 2026 11:42:51 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 132165
IP address blocks: 151.123.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Validity
Not Before: Apr 13 11:42:51 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69dcd6ba-4a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:37:d5:35:c7:a8:27:e1:e0:f3:b8:7a:4d:55:
e3:8d:0c:4c:66:a6:7a:60:eb:70:a2:d3:75:d5:94:
33:a6:60:8c:05:14:51:8e:44:23:d5:29:ce:b5:bd:
87:2c:ff:75:de:bc:fe:a8:18:b7:3e:32:6e:04:08:
26:84:07:f6:4a:f7:ce:af:7b:4c:50:71:62:ec:7b:
f5:8b:3c:52:82:3d:de:19:16:9c:da:0b:9f:d4:02:
d5:57:52:8b:e8:dc:26:84:60:71:b7:98:67:51:4c:
b2:a9:e0:1f:e8:4d:60:6f:80:8d:a1:49:9a:3b:75:
d9:61:92:ea:79:68:0f:d6:b9:01:a1:79:39:8b:39:
ab:32:e9:7c:17:3d:1d:7e:5e:52:89:6f:e3:7b:8c:
0d:50:db:15:3c:0f:26:c4:51:43:9f:e4:90:e8:d2:
a0:43:79:2b:ea:e0:d9:33:77:eb:0e:32:20:66:fa:
24:48:60:09:23:82:f8:9e:ee:37:a1:ab:0d:02:5d:
10:13:7b:5a:7f:52:ab:cf:37:fd:36:68:84:39:b5:
6b:a3:96:af:3c:57:11:35:bd:b5:ca:06:bb:ea:69:
71:a7:fa:54:47:75:d3:65:9e:ae:f6:dd:04:32:b8:
a2:17:cc:c7:bb:c5:99:86:f7:56:09:b9:d6:61:61:
09:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F0:BC:40:6C:C3:39:3F:BF:07:5B:55:82:3D:91:52:A9:59:0D:35
X509v3 Authority Key Identifier:
keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/E685F69A372D11F1A4767B088F833773.roa
sbgp-ipAddrBlock: critical
IPv4:
151.123.224.0/19
Signature Algorithm: sha256WithRSAEncryption
48:5b:52:7f:d8:4f:57:c1:d9:26:31:65:ba:fe:b7:05:e0:d5:
b1:ae:95:4c:64:a8:d4:83:8e:43:50:0c:52:8a:03:41:e6:80:
e8:b7:92:1d:ac:1e:a0:77:63:70:2c:cc:41:60:f6:9b:8e:ea:
9e:d2:5e:95:0e:78:2e:6d:87:8d:22:a9:47:ed:8f:aa:06:ff:
0c:75:87:63:57:71:cd:d0:67:a4:6f:59:8e:09:67:1b:17:a7:
f2:50:cd:85:4f:66:1a:3b:7e:99:be:4c:9f:d2:66:2d:b0:38:
ff:18:8f:04:20:ae:e1:34:65:b0:87:a0:c5:ee:00:38:52:ec:
3f:38:64:68:71:50:8f:90:a0:83:d3:6b:7c:99:68:02:55:05:
52:71:e4:4f:b9:50:25:34:0e:a8:21:a1:b7:aa:00:b1:91:24:
da:65:96:af:46:22:c9:96:32:75:93:74:fd:ca:a0:89:b6:7a:
47:eb:eb:09:4b:ed:09:31:ed:0b:64:f1:f7:29:91:d2:6c:3e:
9d:1d:53:31:8f:06:d2:20:ee:12:5d:03:3b:89:2d:db:3c:6f:
54:ac:2b:ea:34:20:21:d9:86:87:2c:e1:ce:d9:ca:4d:5d:28:
9f:5a:14:e4:ab:15:44:a3:08:97:70:59:5c:eb:a2:63:3c:27:
cf:b1:e6:17
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:20:45 2026 by rpki-client