
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/7DBDA87C561A11E79F98831DC4F9AE02.roa
File: 7DBDA87C561A11E79F98831DC4F9AE02.roa (raw, json)
Hash identifier: cd9leBQhaKt9bKQi4UOp7rnPXgkIwJXtv0eToRe3iAU=
Subject key identifier: 0C:53:CA:5C:CB:74:C3:1A:C1:2C:3A:C7:A0:8D:39:34:35:1A:A4:49
Certificate issuer: /CN=A917B4C6/serialNumber=02230D954E4F3D6AAD4495D74CDB3EE0F287CA07
Certificate serial: 2453
Authority key identifier: 02:23:0D:95:4E:4F:3D:6A:AD:44:95:D7:4C:DB:3E:E0:F2:87:CA:07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/7DBDA87C561A11E79F98831DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:27:59 +0000
ROA not before: Mon 28 Apr 2025 16:23:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18014
IP address blocks: 113.29.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.crl
rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9299 (0x2453)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B4C6, serialNumber=02230D954E4F3D6AAD4495D74CDB3EE0F287CA07
Validity
Not Before: Apr 28 16:23:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a422bf-0b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cf:e5:77:72:01:49:f7:5e:12:51:1d:d5:cb:
82:c3:82:57:1f:b6:07:b2:3f:cc:e8:14:23:93:83:
05:c0:5e:58:e3:ed:c2:0f:37:d4:29:9e:1a:58:1f:
7e:37:43:50:3e:52:6a:e6:d5:f4:5b:e9:64:27:a0:
a4:64:76:d4:6c:7a:b9:b0:e7:a2:86:19:9f:6d:99:
3c:39:d9:e3:54:22:0b:8e:fe:3a:4c:47:e5:35:a4:
85:9c:2a:18:87:fb:9f:04:3e:2d:dd:fd:2d:bf:e6:
84:15:cf:62:f5:d4:52:dc:f8:c2:ec:05:0e:a4:7c:
97:3c:4d:e3:98:84:33:f8:25:fb:d4:fe:11:c4:14:
55:af:79:f5:60:96:23:26:dc:de:76:bc:e2:bb:66:
59:a1:03:79:02:d5:3a:40:0e:5f:99:71:41:18:fd:
7f:87:c8:23:a5:44:43:95:5f:aa:b2:7c:75:f6:06:
d6:15:9c:f8:de:c3:31:b0:d6:66:fd:b6:ae:b4:50:
3c:f3:29:89:32:e8:b1:8c:61:f3:08:b2:2c:e6:35:
d7:e9:3f:d1:e4:14:e9:57:04:c0:23:60:0a:aa:76:
95:66:4b:55:1a:e8:37:f9:9d:e3:f9:4c:ca:6b:fb:
64:64:f3:80:d0:45:1c:0f:50:75:2e:ff:5f:b1:d7:
c0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:53:CA:5C:CB:74:C3:1A:C1:2C:3A:C7:A0:8D:39:34:35:1A:A4:49
X509v3 Authority Key Identifier:
keyid:02:23:0D:95:4E:4F:3D:6A:AD:44:95:D7:4C:DB:3E:E0:F2:87:CA:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/7DBDA87C561A11E79F98831DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
113.29.248.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:0e:57:ee:2d:6a:c6:23:e7:1d:28:23:10:d0:90:4e:32:df:
03:c2:08:2f:68:c0:7b:90:d7:97:bc:43:d5:d0:7a:34:28:d1:
b4:83:72:ca:2e:5a:90:96:55:dc:b0:34:05:2c:ce:34:59:db:
c6:3b:dc:c5:14:d0:cc:66:6f:bc:61:de:4f:ba:7a:9f:04:85:
30:b4:bc:c6:24:45:c8:fe:4b:05:8b:e2:ec:8b:34:f7:5e:0e:
ae:3a:1f:74:b6:2a:40:58:98:c1:97:bd:44:e3:a1:21:90:e2:
9b:62:4d:ba:a3:cf:00:76:70:5b:cc:a5:d2:b4:e5:dd:02:9b:
d6:25:f9:0b:23:1b:a2:a3:8f:fe:9d:35:0c:7c:ec:8d:2e:3b:
38:97:24:14:7f:91:f1:59:7c:cb:b6:95:96:f4:85:bb:08:af:
a9:62:73:ad:78:14:2f:f5:8d:7d:70:9a:39:9e:51:b4:18:0c:
d7:3d:b2:67:ea:d5:4e:3d:e3:ec:db:44:2a:29:71:04:eb:8b:
c3:ea:78:15:31:bd:a1:24:55:b7:20:83:90:4e:a2:c7:7a:fa:
66:d6:c7:da:d0:0c:da:8c:8b:3d:86:59:ed:ee:e4:62:7f:bc:
34:69:86:82:31:15:ca:f5:57:d3:cf:2e:e4:ec:2e:a6:ba:26:
65:0d:89:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:06:44 2026 by rpki-client