
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/CDFD2B74077C11F18EF4B555073D8C67.roa
File: CDFD2B74077C11F18EF4B555073D8C67.roa (raw, json)
Hash identifier: dZLFkgjZ6cB+MOVGyrNrnBz98dfQGvpzebMnt+ZQuzI=
Subject key identifier: 80:F6:EF:68:D4:C7:57:A9:B8:CB:B0:C0:2C:7E:16:E0:4B:A4:DE:6B
Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Certificate serial: 07BD
Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/CDFD2B74077C11F18EF4B555073D8C67.roa
Signing time: Sun 01 Mar 2026 17:55:30 +0000
ROA not before: Wed 11 Feb 2026 19:06:44 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 132925
IP address blocks: 36.255.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl
rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:59:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1981 (0x7bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1FE, serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Validity
Not Before: Feb 11 19:06:44 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a47d92-9830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:43:a6:31:eb:ee:5b:34:58:22:87:3f:3d:f3:
16:43:cc:52:1a:d4:e2:ac:ce:ea:55:7e:6c:88:c7:
98:cc:3e:46:96:3f:c3:3a:86:2b:5c:ab:e5:30:24:
84:60:3c:8d:80:ea:3b:2a:76:55:dc:70:21:21:38:
92:cd:0e:aa:f4:ea:f5:2f:ee:d0:81:7c:60:c0:5e:
4c:37:4b:e8:63:49:42:f3:2e:c2:af:a9:cd:01:b6:
43:34:e3:65:38:9d:c3:d7:45:9e:ba:5d:ca:cd:ce:
3c:4d:5f:fb:c9:5c:a6:c7:90:0b:26:9d:22:3f:82:
d2:37:99:39:d7:a9:c3:1e:bb:6e:9a:e9:03:32:77:
af:16:d4:b7:c8:da:79:91:ac:2a:d8:32:7b:9e:b2:
04:13:65:cd:af:c1:76:88:73:9e:93:8d:60:3b:7e:
e6:fa:41:49:f3:67:71:8d:cb:dc:32:0d:56:f2:4c:
c3:8a:df:c0:54:64:29:90:92:13:3a:de:3b:ab:78:
52:cf:bf:cd:64:a7:23:2a:28:d7:32:d9:35:e0:50:
08:e5:a4:54:d2:c9:c1:a1:89:1a:81:80:b3:db:77:
d9:f5:12:e1:6f:4f:94:29:18:91:9a:93:46:8f:96:
0f:62:08:c8:d3:ff:66:53:dd:ba:b2:c4:63:e7:d2:
43:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F6:EF:68:D4:C7:57:A9:B8:CB:B0:C0:2C:7E:16:E0:4B:A4:DE:6B
X509v3 Authority Key Identifier:
keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/CDFD2B74077C11F18EF4B555073D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
36.255.199.0/24
Signature Algorithm: sha256WithRSAEncryption
33:c2:17:73:d7:a7:5f:09:a7:2c:d8:27:69:44:66:34:69:6f:
5f:46:ff:1e:90:6a:df:f3:b5:1c:46:a0:d8:a6:bb:db:9f:4c:
ce:90:b5:7e:79:ef:8c:9d:81:d9:57:71:99:04:c2:cb:d5:38:
f9:42:e5:b1:56:ea:1c:f7:1d:6f:86:9d:c9:8e:b2:e3:2e:bc:
a6:d3:5f:a3:80:d0:be:51:96:20:42:d2:06:6f:d5:af:15:6e:
c4:f5:1a:c0:2d:99:d6:06:21:fb:e7:04:a3:71:4d:97:0d:cd:
18:de:b1:71:ac:f7:ce:38:7d:ea:ee:af:6c:d9:8b:6b:c8:82:
77:1f:ba:94:7c:76:ff:82:5a:72:02:17:b8:d3:70:07:ec:72:
f4:34:8e:f3:10:22:1d:23:e9:aa:95:28:81:a2:ab:b6:e3:78:
e7:a2:87:52:0d:9f:b7:3b:de:3d:a1:e4:be:cc:2b:c9:4a:fb:
af:a4:65:2e:e9:d4:97:91:9c:74:a9:89:8e:7b:ba:42:67:3b:
54:12:2e:ab:02:d8:7c:c8:60:e4:de:e2:9a:e4:ce:e9:d5:e9:
a8:fc:96:24:22:5c:99:2f:af:7d:bd:00:1e:42:8e:18:06:47:
2b:50:ca:15:7d:70:83:10:a4:53:7d:29:4d:5f:6e:a7:db:38:
02:f8:9a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:40:28 2026 by rpki-client