
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/78BC7D28A87E11ED9AE70779C4F9AE02.roa
File: 78BC7D28A87E11ED9AE70779C4F9AE02.roa (raw, json)
Hash identifier: nzhO6pn9Jq+NWD376kohlETBIxuo3LM08XYnXIpmi24=
Subject key identifier: 73:04:46:B2:20:A1:CB:8C:64:E6:A8:09:C3:9F:27:AB:8D:74:48:96
Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
Certificate serial: 0373
Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/78BC7D28A87E11ED9AE70779C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:37:49 +0000
ROA not before: Sat 09 Aug 2025 02:39:21 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 210542
IP address blocks: 2400:9ce0:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl
rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 883 (0x373)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
Validity
Not Before: Aug 9 02:39:21 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4796d-1933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6b:97:73:49:80:8b:85:2e:3f:5d:4f:d8:6e:
d3:fc:73:1c:7e:08:ed:a3:b8:ae:f2:30:94:94:4a:
e9:13:86:0b:51:43:04:8f:09:10:18:9f:a5:a5:e1:
bb:47:43:87:74:00:b9:da:3b:63:fd:ab:4c:af:66:
2b:fa:34:fb:9c:41:e7:c9:73:68:2c:da:fd:cc:b7:
a9:ef:39:09:e1:36:f2:1f:7d:55:c0:aa:78:ff:93:
82:b3:d1:27:bf:cb:d4:f5:cd:db:fa:4c:c6:56:f8:
83:67:1c:c9:f3:9e:46:24:ac:5c:28:99:bb:49:55:
47:de:41:ca:f8:c6:3a:ba:a1:54:a8:9a:8b:6b:53:
c4:55:b0:aa:b5:c8:29:60:00:a4:4f:13:ce:1a:57:
92:17:fc:14:52:fe:80:a8:5c:39:54:dc:01:4c:b0:
24:ec:57:7d:4b:24:b4:00:7e:5e:06:a5:d0:28:1b:
cc:d8:aa:a0:31:6a:f3:35:05:4b:92:d2:e8:ed:c7:
50:ca:7b:4a:09:04:eb:84:08:07:2f:be:b7:48:75:
53:e1:6c:28:76:9c:c6:09:80:e0:5a:3e:76:3a:57:
59:bd:95:d2:f0:40:30:ae:7e:5a:ae:9c:88:2b:99:
bb:c9:75:e7:ed:c6:2b:20:77:12:53:08:24:90:ed:
6e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:04:46:B2:20:A1:CB:8C:64:E6:A8:09:C3:9F:27:AB:8D:74:48:96
X509v3 Authority Key Identifier:
keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/78BC7D28A87E11ED9AE70779C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:9ce0:3000::/36
Signature Algorithm: sha256WithRSAEncryption
c3:65:0b:2b:fd:9b:08:99:9e:cd:08:f0:27:0e:d0:9c:41:1b:
8b:7c:e9:da:b7:21:43:f3:a8:b4:26:37:12:c4:d9:c0:e8:c7:
2f:fd:fb:cd:ee:55:ae:cb:e4:f4:4a:c0:19:09:63:46:c8:ea:
3a:2b:16:ec:81:9e:34:03:3f:18:c1:b7:65:ac:e0:16:c3:2b:
e9:14:54:4e:9e:2f:60:87:9b:16:6a:f0:df:78:4b:53:ae:c1:
12:ce:3a:ca:43:06:aa:55:8d:3e:f3:75:f5:0c:d9:93:c3:d9:
81:04:67:66:68:fa:a5:6d:91:e8:57:eb:8a:5d:58:9f:29:44:
55:05:a2:26:15:96:9a:ba:f9:11:a5:d1:5d:51:5c:82:91:69:
47:3c:f7:c3:e8:d7:e9:7e:6e:7c:13:69:36:dc:c8:e8:2f:2e:
f2:54:ed:fe:01:85:38:7d:d3:c0:a5:71:1f:bc:0e:94:5f:23:
77:fb:99:6a:07:59:83:ee:18:09:08:ba:80:b6:57:0c:18:3f:
04:95:21:d1:c2:15:51:3b:5a:f3:ba:01:5b:0a:88:7e:11:72:
2b:60:56:df:61:11:33:f5:37:94:1f:e2:84:67:8e:59:6a:10:
05:20:25:12:6f:8a:f0:83:6e:99:05:05:17:63:bb:5b:35:e3:
c4:90:ba:e5
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgICA3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB
NkMxQUIwNjMwHhcNMjUwODA5MDIzOTIxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0Nzk2ZC0xOTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6GuXc0mAi4UuP11P2G7T/HMcfgjto7iu8jCUlErpE4YLUUMEjwkQGJ+lpeG7
R0OHdAC52jtj/atMr2Yr+jT7nEHnyXNoLNr9zLep7zkJ4TbyH31VwKp4/5OCs9En
v8vU9c3b+kzGVviDZxzJ855GJKxcKJm7SVVH3kHK+MY6uqFUqJqLa1PEVbCqtcgp
YACkTxPOGleSF/wUUv6AqFw5VNwBTLAk7Fd9SyS0AH5eBqXQKBvM2KqgMWrzNQVL
ktLo7cdQyntKCQTrhAgHL763SHVT4WwodpzGCYDgWj52OldZvZXS8EAwrn5arpyI
K5m7yXXn7cYrIHcSUwgkkO1uhQIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFHMERrIg
ocuMZOaoCcOfJ6uNdEiWMB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1
MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz
R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0JBQzUvNDcwQTYyMDQxNTMwMTFFREJBQTNEMDI3QzRGOUFFMDIvNzhCQzdEMjhB
ODdFMTFFRDlBRTcwNzc5QzRGOUFFMDIucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYEJACc4DAwDQYJKoZIhvcNAQELBQADggEBAMNlCyv9mwiZns0I8CcO
0JxBG4t86dq3IUPzqLQmNxLE2cDoxy/9+83uVa7L5PRKwBkJY0bI6jorFuyBnjQD
PxjBt2Ws4BbDK+kUVE6eL2CHmxZq8N94S1OuwRLOOspDBqpVjT7zdfUM2ZPD2YEE
Z2Zo+qVtkehX64pdWJ8pRFUFoiYVlpq6+RGl0V1RXIKRaUc898Po1+l+bnwTaTbc
yOgvLvJU7f4BhTh908ClcR+8DpRfI3f7mWoHWYPuGAkIuoC2VwwYPwSVIdHCFVE7
WvO6AVsKiH4RcitgVt9hETP1N5Qf4oRnjllqEAUgJRJvivCDbpkFBRdju1s148SQ
uuU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:53:23 2026 by rpki-client