
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/9A4656B4487911F181BECDDBA9833773.roa
File: 9A4656B4487911F181BECDDBA9833773.roa (raw, json)
Hash identifier: +2oc9IMIoRMKaYWaJMmtSakRscL+N50q6yL7CT1j1Mc=
Subject key identifier: 7B:3B:D2:56:A9:F3:5E:D4:BA:A2:17:9C:F6:4E:5B:3E:10:74:61:6C
Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Certificate serial: 07F5
Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/9A4656B4487911F181BECDDBA9833773.roa
Signing time: Fri 29 May 2026 18:28:53 +0000
ROA not before: Fri 29 May 2026 18:28:53 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 36.255.196.0/24 maxlen: 24
36.255.197.0/24 maxlen: 24
36.255.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl
rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2037 (0x7f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1FE, serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Validity
Not Before: May 29 18:28:53 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=6a19dae5-a35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a9:e3:0d:d3:bc:d6:89:95:8a:fd:e7:52:1f:
5b:23:f6:32:71:38:cc:62:80:db:4a:83:0d:31:bf:
be:34:04:66:25:a2:29:a5:5c:e5:53:f0:f7:37:e7:
bd:b4:6d:ec:ba:46:12:16:86:01:57:d2:f0:6f:9e:
f3:af:00:36:fe:86:fa:b0:02:84:d6:a7:28:b4:19:
1b:06:04:f9:db:f9:55:d0:e5:ba:15:a2:e4:71:50:
50:51:3c:18:43:30:7d:a3:12:2d:03:51:e6:14:c5:
f8:a6:f4:58:fb:55:bb:d2:16:5d:4d:19:30:5f:3a:
dd:3e:2e:24:95:a6:88:85:e8:d3:32:91:b4:ad:f1:
fb:74:ff:12:bf:b5:f1:cd:7c:47:da:22:63:f2:a3:
9d:6d:80:cf:a4:41:13:1a:8b:c0:4c:4c:d5:5b:72:
1d:0d:69:0c:c3:18:04:04:31:a7:81:ab:dc:e7:a2:
19:94:7c:54:b5:f5:1e:ec:49:70:5f:7d:f2:1e:a5:
15:49:1a:a7:06:76:00:6a:66:ff:82:d2:5e:a6:ba:
9a:7c:99:33:f0:be:23:8a:31:29:fe:0a:eb:6a:3f:
ae:95:b5:8f:46:f3:4c:ee:0b:c6:88:8f:1b:83:f1:
ca:3f:91:c1:64:43:63:7c:4f:09:7a:38:cd:18:2f:
bf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3B:D2:56:A9:F3:5E:D4:BA:A2:17:9C:F6:4E:5B:3E:10:74:61:6C
X509v3 Authority Key Identifier:
keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/9A4656B4487911F181BECDDBA9833773.roa
sbgp-ipAddrBlock: critical
IPv4:
36.255.196.0-36.255.198.255
Signature Algorithm: sha256WithRSAEncryption
5e:00:c0:5c:1b:da:86:8c:ba:47:2d:57:57:01:30:21:d0:a2:
5c:ce:82:9b:8f:df:81:6e:b2:da:d6:61:de:fd:6a:00:fc:74:
5d:0d:dc:23:d7:bb:38:dc:0d:59:23:c7:cc:66:de:f0:b9:64:
d4:42:c3:d0:95:bc:7b:50:86:bf:7a:bc:8c:52:3c:6d:10:54:
51:2d:40:05:22:dd:77:8b:a6:7f:96:ce:63:36:5d:c5:53:c5:
9d:47:49:81:eb:93:dc:8d:5a:a0:42:bc:4f:4e:f3:bf:60:dd:
55:87:60:2e:96:2a:95:4a:72:c9:6c:98:f9:9e:61:65:43:a0:
7b:2c:17:62:e7:01:48:c2:76:00:44:69:03:23:ed:9c:e7:0e:
26:72:97:4d:fd:75:ec:c5:15:92:6b:b0:67:20:18:8e:e6:41:
93:b5:8c:84:40:c5:8a:9d:06:43:b6:35:c5:26:e0:ba:1c:3e:
b7:1e:ef:2a:9a:e0:c0:82:dc:6c:66:b1:e0:b0:71:de:6f:27:
c7:b2:87:bf:75:a8:cf:99:45:b3:7d:e7:0a:db:4c:dd:73:0e:
7c:ed:c7:8f:78:a6:21:3a:67:0f:56:ed:04:f4:a7:ad:b4:e1:
40:79:85:09:eb:fb:48:27:57:0c:0c:d6:06:34:64:a2:18:0b:
ae:e3:66:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:31 2026 by rpki-client