
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/6313DADA500011EBB74A2C2AC4F9AE02.roa
File: 6313DADA500011EBB74A2C2AC4F9AE02.roa (raw, json)
Hash identifier: h/xjw2uGVTtL8b2ydd+g45aswVdSOXMWt+z5VztwbYw=
Subject key identifier: 33:FC:7A:19:37:A6:A9:71:29:D2:2E:83:10:FC:2F:A6:CD:35:52:98
Certificate issuer: /CN=A917C422/serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91
Certificate serial: 2C03
Authority key identifier: 35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/6313DADA500011EBB74A2C2AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:25:45 +0000
ROA not before: Fri 12 Sep 2025 14:50:29 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 9584
IP address blocks: 152.104.0.0/18 maxlen: 24
152.104.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl
rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11267 (0x2c03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C422, serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91
Validity
Not Before: Sep 12 14:50:29 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a45a79-a358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:5d:c7:2f:2c:86:f5:db:7a:bb:8d:d6:13:
c9:e0:58:c7:fd:5d:4b:98:34:77:ee:81:82:5d:a6:
ed:e7:61:20:da:33:d4:ec:d8:59:03:6a:7d:65:b0:
00:00:f0:9a:1e:55:5b:e0:bc:9b:2a:f5:cf:56:41:
6a:25:8f:27:12:56:27:df:ae:44:6e:95:30:b9:af:
b4:71:a5:e4:96:78:da:20:da:ca:dd:4e:77:07:1b:
f6:b8:fc:fd:06:d1:38:d3:d6:24:f6:c5:43:10:dc:
64:0b:71:41:1a:32:ed:73:f7:a3:37:a3:65:54:b7:
2f:68:7f:e3:5e:d7:31:23:af:2f:b5:c4:5f:18:33:
c1:03:ef:02:ba:09:6d:2c:c9:e5:63:92:8e:8a:78:
16:71:47:0a:db:4f:a0:34:d1:be:12:f4:8c:38:c4:
d5:1b:9f:8a:b2:4c:7f:b3:62:97:c4:54:da:7b:b4:
30:e4:fa:36:09:4b:15:cf:91:11:1f:a7:1f:fb:58:
b2:26:81:5b:8a:65:ec:93:ab:66:4a:e2:d2:0f:d2:
b5:59:64:cb:3b:37:c9:3c:a4:8d:f2:da:63:d9:15:
a0:0c:5e:d3:83:b8:41:a5:1e:19:2a:4f:25:c8:35:
a9:7f:c6:7d:04:96:22:ce:9b:5a:c7:f0:99:ef:2a:
8a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FC:7A:19:37:A6:A9:71:29:D2:2E:83:10:FC:2F:A6:CD:35:52:98
X509v3 Authority Key Identifier:
keyid:35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/6313DADA500011EBB74A2C2AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
152.104.0.0-152.104.95.255
Signature Algorithm: sha256WithRSAEncryption
02:f6:f8:d0:f8:c6:f6:83:89:a6:df:81:28:e4:06:25:5f:21:
4f:e9:a5:2f:8b:5e:c5:a0:5f:da:1f:de:ca:bd:93:16:e3:20:
c8:fc:25:23:e7:c2:4e:cd:a5:7a:9e:8e:9c:cb:95:93:19:97:
dd:b3:fb:96:67:af:57:fa:f7:38:a8:43:9d:db:e7:52:4b:d2:
a7:d3:3f:90:f5:d4:15:aa:0f:e2:34:df:2b:d0:e1:88:fc:34:
5e:6b:c3:38:8f:a4:45:6c:0a:25:1e:19:47:e2:79:24:fc:c8:
c3:24:5d:16:ca:ee:06:d6:a2:46:77:0a:97:4e:7c:b9:71:28:
fe:32:6a:83:b7:6d:6f:fb:c2:0e:b5:89:ea:7d:04:27:f1:54:
5b:27:ef:3b:8d:0c:08:63:35:88:d9:bd:00:81:fb:55:cb:8a:
c6:cf:84:07:81:17:8c:0f:46:86:ab:e3:5b:14:7e:91:ce:a0:
59:f7:25:d9:67:c5:e1:62:5c:41:b7:c1:15:15:a1:d8:38:4b:
13:24:fa:dc:5e:9f:7c:a8:e4:fa:db:d8:9b:99:15:06:ad:d8:
04:a0:0c:5f:98:dc:9b:7d:92:19:92:a9:74:b6:d1:a1:d4:92:
af:44:55:a0:0e:e3:b1:f0:85:0e:3c:cc:86:15:67:8f:d7:90:
ae:d3:6d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:25:32 2026 by rpki-client