
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/4EDC52B27B3B11EFAF3B4433C4F9AE02.roa
File: 4EDC52B27B3B11EFAF3B4433C4F9AE02.roa (raw, json)
Hash identifier: yIcsvpO9j5iT5Hoaa5ncOSMVc7rBW3HdtnPtPKSbcUk=
Subject key identifier: 29:AD:00:9B:C0:7A:93:CD:A0:7B:35:FC:2E:08:FD:50:96:9A:AD:5F
Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Certificate serial: 07BC
Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/4EDC52B27B3B11EFAF3B4433C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:55:29 +0000
ROA not before: Fri 20 Jun 2025 22:11:29 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 63440
IP address blocks: 36.255.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl
rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:59:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1980 (0x7bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1FE, serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Validity
Not Before: Jun 20 22:11:29 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a47d91-54ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ee:93:dd:27:b2:86:fd:ea:fd:73:89:b9:6c:
2e:b8:26:65:ab:ef:a2:50:0c:de:30:1b:aa:93:29:
c8:65:cb:1e:ea:00:12:34:94:80:27:aa:8c:b6:02:
fb:85:e9:16:89:3b:71:06:55:40:46:28:d5:b3:63:
da:5a:55:a8:25:d3:41:37:f2:b7:59:ca:c7:87:b7:
36:4f:9c:4e:be:24:72:ec:62:da:d5:72:e8:8d:40:
fa:73:13:73:e4:9d:5b:10:6c:77:4c:4b:72:b1:46:
40:e2:3b:06:8f:4c:54:a8:05:2c:40:0d:b6:eb:7f:
f1:93:17:90:b8:81:de:33:15:2c:55:66:82:d2:70:
84:78:00:8b:a8:45:ba:21:a8:35:20:98:37:f1:3d:
ff:7f:30:eb:44:b0:8d:9c:f7:01:1d:1f:bf:5a:8c:
8b:46:a4:db:d5:41:d4:26:86:80:40:a7:51:6f:ea:
5b:4f:40:bd:8a:cf:65:df:a2:61:51:92:92:db:94:
23:2e:92:45:e2:08:ad:40:06:0c:83:ea:5d:7d:82:
fd:74:bb:93:18:c9:af:8e:93:2b:cb:70:84:87:dd:
64:b5:2c:3c:46:ae:b3:e3:6b:bc:7b:85:74:33:86:
2a:af:b2:b3:5d:12:3e:40:12:38:96:28:0e:69:1a:
98:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AD:00:9B:C0:7A:93:CD:A0:7B:35:FC:2E:08:FD:50:96:9A:AD:5F
X509v3 Authority Key Identifier:
keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/4EDC52B27B3B11EFAF3B4433C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.255.198.0/24
Signature Algorithm: sha256WithRSAEncryption
30:52:43:19:a4:24:8b:6b:61:40:2b:6d:fe:cb:d8:10:d6:aa:
52:af:14:17:31:7f:6c:38:ac:07:cd:4a:58:c0:40:0c:fb:0d:
c3:21:0e:ea:79:5d:bd:8f:00:c5:fd:75:b0:6d:72:a5:e3:3a:
08:a4:cd:4d:8a:19:17:a5:f8:d6:33:1e:33:d4:5d:27:b1:d9:
38:5e:f1:2f:e7:0f:e9:d8:bc:9e:c5:ee:cd:be:59:e0:6c:cf:
17:57:b2:91:43:0a:6c:96:75:52:83:09:8c:69:98:d8:07:0e:
29:0b:bd:4e:30:d0:e2:0a:c4:80:0e:b9:ad:51:ba:5e:59:21:
96:39:9c:d1:b2:81:a5:2c:a0:8b:2b:2a:b8:37:04:82:7d:40:
fa:9f:d5:5e:ef:7e:42:fc:aa:75:52:11:76:d5:60:49:b7:2c:
f1:a0:ff:4a:a7:4d:66:a3:59:4e:ba:0c:d3:33:1b:6c:ec:5f:
81:3d:03:bf:4d:75:35:da:e4:8c:28:95:9d:59:e2:1b:93:34:
1e:3a:92:f2:aa:09:27:3e:c2:ac:52:b8:14:f6:e1:cf:0c:3d:
7e:27:51:6d:93:25:97:86:53:e4:47:59:58:f3:21:b8:42:16:
5a:d6:14:13:23:46:a1:4f:01:d0:17:fa:1d:03:ce:33:06:3c:
2d:c5:80:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:00 2026 by rpki-client