
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/CF834404B27511EFA614D07EC4F9AE02.roa
File: CF834404B27511EFA614D07EC4F9AE02.roa (raw, json)
Hash identifier: G0E5EHoZ2m+ZP72qtXoYNfTwv7b42TsAJHsBwT4R+qI=
Subject key identifier: 8D:9F:04:F7:43:7D:E7:BC:0D:22:09:FE:64:F3:C2:0B:37:D0:5A:3D
Certificate issuer: /CN=A919FE07/serialNumber=7BD4D5C5A8EF5CDFC74C59A09364594E5EF9FAE7
Certificate serial: 0120
Authority key identifier: 7B:D4:D5:C5:A8:EF:5C:DF:C7:4C:59:A0:93:64:59:4E:5E:F9:FA:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/CF834404B27511EFA614D07EC4F9AE02.roa
Signing time: Sun 31 May 2026 19:23:09 +0000
ROA not before: Sun 31 May 2026 19:23:09 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 17995
IP address blocks: 123.253.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.crl
rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:47:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FE07, serialNumber=7BD4D5C5A8EF5CDFC74C59A09364594E5EF9FAE7
Validity
Not Before: May 31 19:23:09 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a1c8a9d-49fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:d0:61:49:c4:e8:61:a3:3b:67:56:db:7f:
7f:12:bb:44:f9:ba:d4:82:6e:17:12:8b:d7:1d:8d:
56:04:85:dd:9f:2f:d4:41:26:3b:0e:c7:7d:50:36:
ff:09:5c:7a:ea:31:c0:d5:0b:5a:9b:ba:b1:13:00:
45:77:c5:38:b4:5d:83:b7:86:d3:a4:f3:f1:7a:97:
fd:77:c0:30:e1:7e:a1:1b:2f:15:00:3a:db:28:9d:
95:38:a8:8c:73:e1:e5:8f:eb:2e:51:83:47:99:f5:
25:36:06:82:0e:db:1c:6c:46:06:55:d0:d0:5e:90:
9a:bd:88:27:0f:40:ae:61:10:2b:ae:bf:94:92:63:
fe:08:d3:bc:a6:ce:8b:b2:1e:73:38:94:13:be:b7:
e6:cd:dd:40:28:a9:b5:ed:6f:4d:17:9a:07:46:20:
1b:a1:f2:2a:0a:a6:9a:0d:64:74:9f:f7:15:99:12:
cd:79:31:aa:5c:86:95:ca:30:1e:5d:f1:37:1d:12:
f5:b2:96:e3:22:5b:60:74:f5:e7:f6:b6:4c:e4:7d:
6a:5e:9c:eb:a4:84:4d:b9:cc:f0:d9:65:ef:38:71:
3c:9a:00:21:cf:19:86:3c:c7:97:2a:4f:9c:ff:96:
ed:d7:42:2e:bd:51:8a:b9:3a:ec:a3:53:6e:e3:b3:
f5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9F:04:F7:43:7D:E7:BC:0D:22:09:FE:64:F3:C2:0B:37:D0:5A:3D
X509v3 Authority Key Identifier:
keyid:7B:D4:D5:C5:A8:EF:5C:DF:C7:4C:59:A0:93:64:59:4E:5E:F9:FA:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/CF834404B27511EFA614D07EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
123.253.76.0/22
Signature Algorithm: sha256WithRSAEncryption
50:f2:dc:f9:77:db:9c:39:04:d6:e5:c2:f0:06:a5:13:c6:eb:
69:94:39:af:d1:fc:19:62:fb:37:60:b1:18:54:f1:2c:fd:02:
bf:e0:d2:a6:d9:09:0c:c1:aa:ce:d7:f1:db:bb:75:0c:ab:a6:
45:65:8f:e0:42:8d:c3:47:8c:9a:db:da:fb:c6:e5:d4:e4:fb:
1d:64:22:3a:d4:c1:8a:76:8d:0d:af:5e:48:ad:4e:49:fc:92:
0c:d3:f8:53:fa:33:6c:0f:0e:e3:3d:32:88:4c:91:b0:b9:8c:
80:70:0f:74:c7:40:15:f7:fa:25:9e:d0:7c:14:da:fa:9f:ff:
82:52:8b:0c:7c:28:29:02:51:13:d6:12:d5:03:95:31:13:a6:
28:f5:ed:37:f1:b0:a8:ba:9f:b6:83:0e:8a:be:db:31:f6:8e:
f3:00:91:a9:88:75:7f:82:24:d3:d5:60:d9:a1:e5:ab:5b:a4:
7c:e8:d8:94:67:73:a3:be:d4:3b:36:07:49:15:e2:24:21:28:
1f:55:b7:ac:13:fe:34:cb:77:14:82:75:21:c5:03:c2:ab:2a:
f5:86:af:ae:0c:6a:a9:21:ea:35:88:5d:75:4e:b2:1a:c5:8e:
6c:54:8c:c3:56:d1:54:68:00:15:2d:fe:da:f6:64:16:1f:32:
ea:1f:b9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:12:00 2026 by rpki-client