
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/3C74C0E0799D11EF9547461CC4F9AE02.roa
File: 3C74C0E0799D11EF9547461CC4F9AE02.roa (raw, json)
Hash identifier: zR70IjBkFq8imIW3hGFMMhMRDbM40qlqunUzoF9Z2S8=
Subject key identifier: CA:7B:6D:63:67:6D:9A:81:1A:38:1E:2A:90:64:D2:DB:B4:BE:77:06
Certificate issuer: /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
Certificate serial: 0158
Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/3C74C0E0799D11EF9547461CC4F9AE02.roa
Signing time: Tue 02 Jun 2026 07:41:22 +0000
ROA not before: Tue 02 Jun 2026 07:41:22 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 14618
IP address blocks: 202.50.102.0/24 maxlen: 24
203.28.70.0/24 maxlen: 24
203.28.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl
rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 07:35:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 344 (0x158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F854, serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
Validity
Not Before: Jun 2 07:41:22 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a1e8922-bd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:97:aa:e7:69:f1:de:e7:07:c5:da:77:39:
75:a6:b7:da:6e:1d:fc:60:08:dc:c2:35:09:8c:26:
73:21:9a:fa:6a:93:e4:de:a6:a0:25:2e:1e:18:68:
1f:37:e8:06:92:bd:1c:0f:7d:4d:7a:83:26:d7:8e:
5a:10:46:46:57:a0:20:27:a7:83:82:61:61:16:25:
6c:40:bf:c7:f5:5e:31:2e:8a:14:06:b0:77:0b:68:
00:76:c0:06:8d:5f:b5:c9:3b:c8:29:49:bb:5b:5e:
50:3f:e0:a8:73:71:65:6b:61:a4:c3:76:e1:52:27:
70:f0:60:f0:20:95:d9:8e:4f:19:ab:13:79:6c:a3:
10:01:1f:2f:c7:eb:02:51:6d:20:45:95:4c:58:1b:
eb:43:31:f1:31:80:3f:0c:cd:1c:48:1e:8e:7f:dd:
7b:d6:57:31:8a:fa:89:2e:60:72:c4:a3:f0:04:ea:
82:a9:22:b3:4c:96:f2:d7:3f:22:87:1b:27:28:57:
aa:79:b5:c3:42:77:f6:54:14:cf:40:45:b7:8d:00:
44:eb:f0:54:fc:99:20:4b:f0:12:3a:a2:55:e7:22:
88:a1:ca:ff:0a:4b:d6:c2:3c:69:99:df:62:31:4b:
85:2b:e9:3f:34:27:83:17:02:87:3e:91:6f:32:d5:
2c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7B:6D:63:67:6D:9A:81:1A:38:1E:2A:90:64:D2:DB:B4:BE:77:06
X509v3 Authority Key Identifier:
keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/3C74C0E0799D11EF9547461CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.50.102.0/24
203.28.70.0/23
Signature Algorithm: sha256WithRSAEncryption
63:75:00:4d:aa:dd:dc:cc:4e:77:40:d8:17:fd:e9:8c:19:cb:
56:d2:6b:7c:84:42:4d:d2:10:dc:fa:57:7d:ec:f2:81:c4:c4:
52:83:e0:00:66:34:3f:4c:29:4a:96:1c:e2:d5:67:d8:ff:7f:
72:d0:33:2b:2e:a2:f7:45:27:43:00:26:fe:86:64:58:6a:de:
2e:94:bb:0c:c1:2b:76:82:0a:49:b1:e6:91:db:44:fd:da:71:
2b:13:cb:7f:91:8d:6d:ab:97:a4:3f:85:6f:04:fd:52:02:a8:
53:b8:2c:3d:ba:73:eb:3b:18:f5:ab:94:4a:6c:e8:94:e3:7d:
54:d8:86:f6:eb:a8:11:77:96:c2:1d:b6:df:f1:d7:76:ca:be:
99:de:66:86:f2:45:9a:9a:69:46:8c:94:4e:96:e9:f3:3d:59:
03:5c:2e:4d:6a:1b:e4:b4:e9:a7:19:1e:15:6f:41:b2:5f:fb:
e1:cc:8d:a1:87:be:fa:c4:e1:23:a8:d4:58:2e:13:f0:e0:ac:
75:cb:09:7f:b1:14:21:5f:e4:c9:bd:11:1e:81:a4:a9:d1:49:
d2:af:37:c6:f0:21:f6:ac:1a:c5:a8:0e:43:e1:f8:af:51:38:
79:d4:7a:53:dd:61:07:14:98:9a:02:e1:ce:02:ee:62:e8:a8:
c0:44:c9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:03:56 2026 by rpki-client