
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/4197AB74735611F080D68151C4F9AE02.roa
File: 4197AB74735611F080D68151C4F9AE02.roa (raw, json)
Hash identifier: kivBXOd2lZU5WJsdaMJuH7XTLp3xzvhG27t6AlFFi0w=
Subject key identifier: 70:53:73:EB:23:F6:01:D5:D9:BD:E8:0C:94:B1:C5:74:3F:73:58:98
Certificate issuer: /CN=A917E27F/serialNumber=D8E7B15F9CB91674E5127FD406D7D9E718E08AB0
Certificate serial: C8
Authority key identifier: D8:E7:B1:5F:9C:B9:16:74:E5:12:7F:D4:06:D7:D9:E7:18:E0:8A:B0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/4197AB74735611F080D68151C4F9AE02.roa
Signing time: Wed 19 Aug 2026 07:56:05 +0000
ROA not before: Wed 19 Aug 2026 07:56:05 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 133908
IP address blocks: 192.84.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.crl
rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:44:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E27F, serialNumber=D8E7B15F9CB91674E5127FD406D7D9E718E08AB0
Validity
Not Before: Aug 19 07:56:05 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a856195-62da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1e:52:af:c2:a0:98:2f:47:cf:b6:f4:46:b1:
87:56:03:38:db:82:d9:43:46:2f:2e:28:ca:3e:93:
6d:2d:b9:70:8f:b4:f6:a0:c9:c6:3d:91:d2:48:06:
d9:fd:d6:ca:5e:03:c2:2d:35:7f:b5:5d:11:1b:50:
3a:a7:60:71:ee:81:12:20:10:c3:32:8c:62:55:50:
6c:66:86:5d:ec:07:b8:9b:f8:39:0f:6b:63:b6:e2:
21:5b:1e:3d:7a:3b:78:8e:df:4b:e3:f9:fd:a7:74:
94:67:ff:4e:7d:30:6d:7c:7e:0e:6f:dd:7d:48:0d:
90:36:7e:26:ed:8e:96:e4:dc:fa:17:d2:46:c7:cd:
cc:00:e6:d7:c2:4d:e8:6a:3c:f9:c9:ff:da:1d:2b:
41:74:ee:c5:65:87:6f:e2:61:59:5b:02:27:34:6a:
f7:2b:8c:c7:b6:60:d1:05:f6:2e:29:5c:7c:4c:0a:
5d:9e:5f:01:16:9f:aa:02:94:f4:6e:12:0c:02:fd:
df:92:aa:91:49:ed:87:65:33:4f:2e:d9:ae:9f:1a:
94:91:d9:57:03:c5:df:04:1a:1f:8d:26:db:37:15:
d7:db:13:04:67:06:b7:62:f6:6e:cf:4b:f3:b7:76:
58:f3:6e:16:26:f6:8d:27:15:61:d7:5e:b8:c2:f8:
50:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:53:73:EB:23:F6:01:D5:D9:BD:E8:0C:94:B1:C5:74:3F:73:58:98
X509v3 Authority Key Identifier:
keyid:D8:E7:B1:5F:9C:B9:16:74:E5:12:7F:D4:06:D7:D9:E7:18:E0:8A:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/4197AB74735611F080D68151C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.84.219.0/24
Signature Algorithm: sha256WithRSAEncryption
74:eb:d6:e4:7c:94:af:75:2a:3a:11:48:f7:c0:73:73:b2:dc:
28:9c:c0:bf:7b:fc:e7:03:92:53:2c:31:6b:74:cb:da:ce:70:
4c:b6:49:33:63:73:57:ac:6f:8d:15:d7:e2:09:6e:56:c8:07:
b4:78:e0:09:6a:bc:54:d1:89:b9:51:1d:a8:11:5a:37:00:44:
67:26:e4:1d:e5:8b:1d:85:1e:03:5f:52:ac:1b:37:48:a7:16:
c3:d5:db:3f:eb:ee:52:fd:f7:87:3c:24:d5:c4:39:10:c2:3b:
2c:e3:80:3c:f5:37:40:1f:b4:77:63:9c:0f:24:01:9e:1a:f2:
e3:74:3c:b9:8a:8e:8f:ff:ca:c7:95:df:52:da:2f:fb:d4:4e:
17:93:81:f9:33:8f:b3:20:2d:d6:a3:73:0d:a1:1d:25:2c:e9:
9b:53:cd:bb:1d:84:81:7f:e1:bc:db:4f:5b:1c:cd:16:ad:b2:
96:92:46:a9:af:56:56:36:f5:c1:ba:64:c7:ad:aa:dc:2a:5b:
30:7f:b3:f3:16:00:48:26:d7:0e:fb:23:bb:4c:75:99:05:e0:
5a:3f:2f:b8:7f:05:eb:28:e2:fb:1d:a1:da:88:65:b4:de:0d:
7d:ab:c3:c5:ef:b7:94:35:dc:a2:ad:e9:1f:7a:90:6b:ab:76:
43:7d:a8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:46:55 2026 by rpki-client