
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/D69F6688CD8511EBB5252063C4F9AE02.roa
File: D69F6688CD8511EBB5252063C4F9AE02.roa (raw, json)
Hash identifier: 5H7jFR8PbzvOaXFxaLgu+GI1ic8LMgRyhhFbb7DKPOU=
Subject key identifier: 06:93:87:0C:C4:DE:80:D3:D0:BD:70:4A:DF:22:92:C4:D9:79:97:C7
Certificate issuer: /CN=A917C422/serialNumber=3E0CA33D76A75BA64F0DD6B06A442BE69586441A
Certificate serial: 3590
Authority key identifier: 3E:0C:A3:3D:76:A7:5B:A6:4F:0D:D6:B0:6A:44:2B:E6:95:86:44:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/D69F6688CD8511EBB5252063C4F9AE02.roa
Signing time: Fri 28 Aug 2026 15:13:22 +0000
ROA not before: Fri 28 Aug 2026 15:13:22 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 9584
IP address blocks: 114.142.144.0/20 maxlen: 24
202.65.192.0/19 maxlen: 24
202.66.128.0/19 maxlen: 24
202.134.64.0/18 maxlen: 24
219.90.112.0/20 maxlen: 24
2001:eb0::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.crl
rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13712 (0x3590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C422, serialNumber=3E0CA33D76A75BA64F0DD6B06A442BE69586441A
Validity
Not Before: Aug 28 15:13:22 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a91a592-29e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:12:5a:60:42:b1:68:9c:63:5d:9e:b4:36:63:
18:12:48:3e:8d:85:1f:1e:e7:2c:81:a0:1c:fc:f7:
45:da:81:ac:91:3b:0b:f1:4c:34:e1:ff:9d:f9:56:
f7:fe:93:52:8e:52:6c:30:63:eb:da:a2:cd:b5:aa:
1a:6b:26:fe:91:8f:9b:0e:01:44:be:eb:70:49:9a:
ba:4c:a8:85:1e:d6:29:a9:6d:2c:c5:66:fc:cd:45:
28:e4:20:e7:5d:a2:a8:53:18:f9:96:46:40:b4:f2:
fd:ec:1f:f1:ab:5e:db:45:9f:3c:23:a3:f6:dd:6e:
6b:66:9a:96:cb:ca:69:30:fa:61:02:a9:b5:d2:5a:
08:87:91:fe:0c:8a:14:f2:3d:d8:45:3f:e5:1e:82:
00:c8:a9:4f:fd:26:41:37:cc:8f:4f:e5:bd:6c:d1:
33:e3:90:b2:f5:6c:14:dd:2a:11:b4:74:90:75:c9:
33:ca:84:c4:14:31:72:94:73:fe:b0:23:bc:57:4a:
9c:9a:31:b1:4d:f4:e7:da:36:76:f5:17:a2:2f:cf:
2d:21:fe:e7:d4:e3:c9:31:60:29:0b:60:af:d3:05:
e7:92:d9:d1:7f:63:3a:8a:91:29:6d:5d:07:20:81:
77:36:43:30:43:ae:2f:fa:38:a6:e3:4a:71:20:fb:
ea:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:93:87:0C:C4:DE:80:D3:D0:BD:70:4A:DF:22:92:C4:D9:79:97:C7
X509v3 Authority Key Identifier:
keyid:3E:0C:A3:3D:76:A7:5B:A6:4F:0D:D6:B0:6A:44:2B:E6:95:86:44:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/D69F6688CD8511EBB5252063C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
114.142.144.0/20
202.65.192.0/19
202.66.128.0/19
202.134.64.0/18
219.90.112.0/20
IPv6:
2001:eb0::/32
Signature Algorithm: sha256WithRSAEncryption
19:ad:49:e4:74:63:10:f1:1d:3f:d0:22:5d:23:63:58:f3:b4:
ea:f8:d3:e3:b0:82:8b:f4:9d:4d:98:f6:a5:b4:6b:4f:57:f4:
df:7b:3e:9c:c5:e8:01:f4:a9:a1:4c:53:51:b3:12:67:5f:15:
5f:c7:10:21:af:59:db:98:04:75:c0:f1:4a:8c:01:1f:9e:f3:
2b:43:07:45:d0:9d:f6:eb:04:3a:e3:8b:55:46:55:ff:ac:e8:
f5:fd:f2:20:3e:63:fb:da:5e:d3:a9:db:5d:11:d8:63:f8:c0:
6e:30:c8:7c:79:60:39:e3:e7:b1:c6:d9:e1:00:c0:a5:6a:a3:
18:38:a9:ca:d5:19:41:bf:fd:cd:96:51:1b:94:f0:be:ae:d9:
0e:53:be:3e:6d:bb:c6:7f:cb:bb:88:8a:54:b6:2a:64:de:67:
56:50:e1:8e:c0:74:a1:a8:b7:8b:fc:4c:a0:50:85:79:71:a9:
eb:7a:f6:29:27:90:c8:77:1d:b3:a6:95:a6:e8:ac:fa:0c:c2:
57:5c:bb:58:b5:ad:e4:5f:74:12:b4:64:83:5f:90:81:f6:69:
59:62:f8:31:25:10:0c:0d:95:92:b6:68:a5:18:68:84:90:74:
42:d6:46:32:ad:b8:b1:99:7c:e4:33:3f:91:71:47:15:f4:80:
71:12:06:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:16:21 2026 by rpki-client