
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/1E85ABA6231E11EFA893585AC4F9AE02.roa
File: 1E85ABA6231E11EFA893585AC4F9AE02.roa (raw, json)
Hash identifier: uE9BZOQRvrYyitomF6RoiQleo5uOBCO+TRSMtaSljks=
Subject key identifier: 5C:57:4E:14:A9:C6:C2:92:65:89:2E:03:27:09:CC:14:62:C6:60:A8
Certificate issuer: /CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16
Certificate serial: 017E
Authority key identifier: 22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/1E85ABA6231E11EFA893585AC4F9AE02.roa
Signing time: Sat 23 May 2026 05:36:37 +0000
ROA not before: Sat 23 May 2026 05:36:37 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 9934
IP address blocks: 202.37.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl
rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:35:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DFDA, serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16
Validity
Not Before: May 23 05:36:37 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a113ce5-148f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:a5:fd:cb:53:9c:f9:5a:3a:6b:cf:ab:7e:
53:a8:68:08:3e:2d:07:8b:16:96:73:a4:da:40:0f:
8f:e8:69:89:38:18:ef:52:2d:05:47:85:32:12:38:
30:84:1d:bc:b0:39:69:50:c1:61:54:0a:7b:46:73:
77:38:2b:f3:8b:ec:e9:b6:ea:32:6f:6e:c2:39:b7:
98:a7:b9:01:14:7e:32:1f:77:fc:ca:63:bd:52:9e:
7d:3c:50:73:48:38:4b:6a:cd:3f:80:5e:d5:a9:f2:
11:de:bf:cf:cd:8c:79:07:3d:32:ab:01:55:5c:22:
1a:eb:45:19:4b:49:73:aa:bf:07:4f:ad:db:9a:74:
f7:f1:58:b4:d7:32:30:2c:10:fd:36:35:49:bb:14:
5a:e6:c3:49:f7:e4:78:af:11:db:b6:91:79:ad:5f:
a8:a9:1b:7f:c7:4a:14:67:e6:5b:4e:b5:56:cf:69:
0c:25:55:db:45:f1:87:10:ab:16:f2:2c:05:b2:34:
c6:f7:e3:da:db:ff:bd:a9:b8:22:ee:39:18:8d:36:
16:fb:f9:fb:cc:6b:8c:d3:ad:7c:7d:0b:13:08:00:
83:7d:51:83:90:b4:22:f9:3c:62:bc:7c:53:8a:e7:
8c:39:14:25:57:26:aa:9d:40:ee:aa:2f:6f:e8:45:
37:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:57:4E:14:A9:C6:C2:92:65:89:2E:03:27:09:CC:14:62:C6:60:A8
X509v3 Authority Key Identifier:
keyid:22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/1E85ABA6231E11EFA893585AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.37.235.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:d3:a5:24:2a:e6:5a:63:cf:cd:1b:51:3a:75:c0:99:0b:8a:
dd:bc:fb:ae:50:50:ed:dc:7a:2a:eb:5a:9b:5d:82:95:e6:a1:
b7:03:22:31:45:2c:d6:e5:8d:b9:db:9d:28:cb:97:f2:e3:a9:
83:be:34:88:6a:32:7e:8b:ad:c7:de:46:a7:13:16:47:ad:8f:
55:c1:e1:e8:98:6f:66:62:98:a8:fb:13:4b:dd:6e:ae:6c:3a:
ae:6a:05:e7:d3:32:6d:ce:1d:ec:05:a8:1d:12:60:53:f0:52:
96:53:a9:d9:bb:62:5f:e1:74:c4:d5:6d:5b:09:61:14:f8:06:
02:89:21:67:00:05:aa:45:a6:de:24:80:f9:5b:d2:40:0a:69:
60:ac:79:e1:cb:56:e1:a2:31:5a:75:0f:6b:7b:6d:91:09:8c:
78:d4:df:bb:fe:b8:f3:a7:52:1a:8b:72:39:27:ee:fb:ae:08:
cb:c0:2f:5a:fd:8f:1e:92:da:2a:b1:09:88:bc:9b:36:f3:66:
6f:da:da:4a:ee:ba:2d:37:ed:5e:8a:c5:8b:28:ea:98:f5:d5:
c4:dc:96:99:29:98:5a:de:66:dd:54:50:7b:35:53:a4:6e:7e:
ad:0a:94:fe:41:8d:3a:9d:36:f1:c1:f0:44:66:75:88:b3:1e:
bc:17:af:1f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0RGREExMTAvBgNVBAUTKDIyQUZENENERDlDNEY0QzM4Mzc2MkIzRTkzRUVDRjFB
RTZGRjlEMTYwHhcNMjYwNTIzMDUzNjM3WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTExM2NlNS0xNDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxT+l/ctTnPlaOmvPq35TqGgIPi0HixaWc6TaQA+P6GmJOBjvUi0FR4UyEjgw
hB28sDlpUMFhVAp7RnN3OCvzi+zptuoyb27CObeYp7kBFH4yH3f8ymO9Up59PFBz
SDhLas0/gF7VqfIR3r/PzYx5Bz0yqwFVXCIa60UZS0lzqr8HT63bmnT38Vi01zIw
LBD9NjVJuxRa5sNJ9+R4rxHbtpF5rV+oqRt/x0oUZ+ZbTrVWz2kMJVXbRfGHEKsW
8iwFsjTG9+Pa2/+9qbgi7jkYjTYW+/n7zGuM0618fQsTCACDfVGDkLQi+TxivHxT
iueMORQlVyaqnUDuqi9v6EU3IwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFxXThSp
xsKSZYkuAycJzBRixmCoMB8GA1UdIwQYMBaAFCKv1M3ZxPTDg3YrPpPuzxrm/50W
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REZEQS9BRjJENTBFNjIz
MDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlNT0RkaXMtay03UEd1Yl9u
UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lxX1V6ZG5FOU1PRGRpcy1rLTdQR3ViX25SWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0RGREEvQUYyRDUwRTYyMzAwMTFFRjk0NURFMzgyQzRGOUFFMDIvMUU4NUFCQTYy
MzFFMTFFRkE4OTM1ODVBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyiXrMA0GCSqGSIb3DQEBCwUAA4IBAQCb06UkKuZaY8/NG1E6dcCZ
C4rdvPuuUFDt3Hoq61qbXYKV5qG3AyIxRSzW5Y25250oy5fy46mDvjSIajJ+i63H
3kanExZHrY9VweHomG9mYpio+xNL3W6ubDquagXn0zJtzh3sBagdEmBT8FKWU6nZ
u2Jf4XTE1W1bCWEU+AYCiSFnAAWqRabeJID5W9JACmlgrHnhy1bhojFadQ9re22R
CYx41N+7/rjzp1Iai3I5J+77rgjLwC9a/Y8ektoqsQmIvJs282Zv2tpK7rotN+1e
isWLKOqY9dXE3JaZKZha3mbdVFB7NVOkbn6tCpT+QY06nTbxwfBEZnWIsx68F68f
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:24:37 2026 by rpki-client