
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/CF834404B27511EFA614D07EC4F9AE02.roa
File: CF834404B27511EFA614D07EC4F9AE02.roa (raw, json)
Hash identifier: 7X7AGoKUY7IvCl+YtIzQ3NkVlncfFcuN4u+QALvLv7Y=
Subject key identifier: C3:74:85:EB:CE:01:C3:8E:FE:90:04:1C:03:AF:2D:56:3A:47:CC:20
Certificate issuer: /CN=A919FE07/serialNumber=7BD4D5C5A8EF5CDFC74C59A09364594E5EF9FAE7
Certificate serial: ED
Authority key identifier: 7B:D4:D5:C5:A8:EF:5C:DF:C7:4C:59:A0:93:64:59:4E:5E:F9:FA:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/CF834404B27511EFA614D07EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:58:08 +0000
ROA not before: Fri 06 Jun 2025 19:14:43 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 17995
IP address blocks: 123.253.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.crl
rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:55:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FE07, serialNumber=7BD4D5C5A8EF5CDFC74C59A09364594E5EF9FAE7
Validity
Not Before: Jun 6 19:14:43 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a48c40-62f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:18:98:fa:63:42:a4:24:e3:8d:74:0a:65:
19:7f:0b:88:31:42:d6:c7:4a:9a:e6:ee:6b:d1:e9:
81:91:56:57:56:c2:5c:48:a0:4b:e4:7f:28:b4:39:
f6:3a:5c:fd:d8:3a:56:e3:bc:b2:e3:02:78:98:80:
87:32:05:c5:8b:d7:8c:08:2e:47:fd:d3:51:a1:24:
65:aa:e1:6f:65:79:98:3a:d2:70:83:4b:92:e7:32:
b5:c8:a2:25:fc:9d:43:6e:c2:32:6e:5a:f4:03:29:
07:a8:26:7c:d1:70:cd:66:97:d9:cd:73:c4:36:a5:
cb:3d:ef:9f:a7:7b:38:d7:77:d9:d5:a9:d8:e6:c4:
67:47:bf:a2:32:19:36:ad:48:80:31:79:6a:bc:93:
24:3e:8f:e3:bd:7f:82:82:98:ed:a9:71:a1:0f:a2:
79:49:5c:9b:b0:e0:f9:84:c3:11:d9:e8:cf:00:c5:
27:82:12:83:1f:2e:fa:f6:d3:46:8c:75:a1:05:c4:
03:0a:7a:e2:bb:c9:aa:83:25:5a:bf:9b:d6:40:8d:
50:04:1d:eb:f6:82:f1:e4:72:85:bb:a9:19:7b:34:
6a:b0:aa:1d:93:ed:e6:1d:02:d7:6c:53:a7:5a:01:
95:e8:45:a2:c1:ee:7c:af:02:6f:8d:a4:fd:1f:96:
a5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:74:85:EB:CE:01:C3:8E:FE:90:04:1C:03:AF:2D:56:3A:47:CC:20
X509v3 Authority Key Identifier:
keyid:7B:D4:D5:C5:A8:EF:5C:DF:C7:4C:59:A0:93:64:59:4E:5E:F9:FA:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/CF834404B27511EFA614D07EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
123.253.76.0/22
Signature Algorithm: sha256WithRSAEncryption
95:8f:fd:5c:26:87:fd:d9:6d:11:16:70:ae:fd:2c:32:54:aa:
6c:92:89:ba:fb:d3:86:d9:16:ff:0e:3e:92:f7:8d:8d:47:dc:
ca:f4:c1:40:94:48:88:e2:dc:d6:9b:9b:de:c6:d9:15:db:e8:
52:65:8a:13:36:77:37:ae:1d:a8:80:2a:d2:86:cb:61:75:35:
50:11:5f:c8:91:05:ce:e4:fd:cc:5a:ce:3d:d4:fa:ab:12:a6:
43:3c:a5:27:fd:c4:f0:7f:5d:be:d9:3d:38:fe:6a:24:0e:d2:
93:d8:e3:ef:59:e2:49:f3:2e:60:3b:d5:29:7f:58:eb:a0:78:
9b:31:c3:d6:48:57:88:7d:52:d1:6a:4a:17:2d:96:6d:fb:9e:
4a:f3:84:94:66:30:5a:2e:6f:96:60:bf:56:51:66:95:a6:07:
bc:20:29:93:69:6c:14:cd:bf:04:87:4c:a7:14:ee:88:72:58:
6d:1e:88:1f:c3:fc:ff:0c:54:a5:12:aa:8a:8a:44:58:37:df:
e9:37:d2:9b:b9:2a:7f:6a:6d:b4:ae:d7:3e:69:8f:7d:b4:6c:
20:52:30:d4:6f:fb:71:90:f1:0f:29:e9:c1:0c:53:59:b6:67:
76:7a:04:5a:89:d5:01:66:19:6b:f7:ab:b9:a7:6f:03:4b:39:
e1:90:92:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:58 2026 by rpki-client