
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/4699D9EADB0B11F0B7B5790A82D3641D.roa
File: 4699D9EADB0B11F0B7B5790A82D3641D.roa (raw, json)
Hash identifier: T2Foy9ASPzGFF0amgq/n/ifzed5ff9yCRwIVozmPQbI=
Subject key identifier: 4C:FE:29:9A:32:5E:6C:F9:54:E3:23:25:50:22:FB:83:61:8C:C3:FB
Certificate issuer: /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Certificate serial: 01BB
Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/4699D9EADB0B11F0B7B5790A82D3641D.roa
Signing time: Sun 01 Mar 2026 18:25:21 +0000
ROA not before: Mon 29 Dec 2025 04:23:41 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 6453
IP address blocks: 124.4.120.0/23 maxlen: 24
124.4.122.0/23 maxlen: 24
182.94.236.0/23 maxlen: 24
182.94.238.0/23 maxlen: 24
182.94.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:11:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443 (0x1bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135B49, serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Validity
Not Before: Dec 29 04:23:41 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a48491-4f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e0:33:b9:d6:28:9b:b8:2a:36:95:62:8c:a3:
ad:57:e9:1d:f9:4a:91:1a:16:97:18:52:b3:d6:ab:
15:68:f9:e1:df:1e:9f:14:04:b3:45:38:e9:a9:7f:
58:63:29:79:3f:0d:ba:9a:cb:3a:7e:fc:af:24:92:
ee:2e:54:bd:de:a2:8c:7e:9b:4a:22:56:bf:7b:22:
37:6a:b7:18:b8:e6:52:5f:76:02:f8:4a:29:56:8b:
f7:88:61:d7:8f:ff:39:27:8e:7a:07:92:9b:20:c3:
44:c0:72:da:92:54:ba:8a:92:cc:f4:d9:01:da:29:
ca:3b:7b:6e:ab:de:e2:f7:09:7f:9b:f7:9e:1b:23:
32:fb:e4:25:d0:3b:93:b3:9f:2c:1f:0d:61:14:49:
0b:f4:ca:fd:36:34:94:e3:b3:e7:01:26:ed:f7:56:
af:b9:92:d4:d4:7c:cf:e1:ac:de:20:08:68:fd:bb:
eb:c9:a9:53:7d:22:42:6a:ad:6a:ab:1c:80:4e:18:
7f:40:4b:b4:27:eb:71:34:b7:9b:5e:0d:b1:57:2e:
a8:f1:fb:29:01:da:ba:ea:6d:41:3d:bf:7c:b3:93:
ff:cd:62:d4:c7:a0:80:2f:b6:86:2d:11:09:70:0a:
16:6a:b0:f4:3a:a0:2d:5f:2d:d7:ba:77:c9:a4:ec:
bf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FE:29:9A:32:5E:6C:F9:54:E3:23:25:50:22:FB:83:61:8C:C3:FB
X509v3 Authority Key Identifier:
keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/4699D9EADB0B11F0B7B5790A82D3641D.roa
sbgp-ipAddrBlock: critical
IPv4:
124.4.120.0/22
182.94.236.0-182.94.240.255
Signature Algorithm: sha256WithRSAEncryption
d0:8e:7c:df:40:11:d3:ac:ff:b2:6c:1b:be:20:d7:97:ea:5b:
2d:8a:ef:b2:20:88:c4:8a:23:ae:c3:e4:18:70:20:52:72:19:
40:b5:d2:bd:61:a0:ad:c0:e5:a0:4a:f2:b3:12:89:7f:8e:d2:
67:72:d4:5b:b8:55:2d:7c:cb:23:a3:85:d3:06:16:91:25:7b:
35:1c:c3:69:cd:0c:c3:31:c4:62:64:40:fd:a3:76:ee:60:ba:
f9:69:48:73:f8:60:7b:e4:47:ce:c3:da:35:f6:c0:18:a2:ff:
c2:5b:25:e2:90:9d:8c:e7:ff:ed:ae:31:03:ab:89:b7:6b:72:
3b:4f:e7:81:c6:10:38:5a:e4:9e:14:98:e9:c5:25:67:40:e2:
ce:d2:57:86:be:f3:bf:a8:3d:9a:a4:ae:10:03:9c:90:6a:59:
65:e7:16:68:95:07:8d:3a:23:27:fd:e5:06:50:8e:08:5d:60:
e3:e3:e1:d0:84:cc:c9:5c:29:6c:9c:16:c3:8f:47:c3:b5:24:
ad:e5:0a:ea:8a:5c:17:cd:e9:83:9e:67:db:68:d5:df:3d:4e:
cd:49:a5:74:22:98:5e:60:b1:a7:05:aa:8d:1b:62:f6:f0:c7:
4d:09:ac:48:0e:45:6a:e2:51:93:ea:ad:0f:71:64:f1:0d:20:
64:65:a3:d2
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzVCNDkxMTAvBgNVBAUTKDRDMzY1RTM2QTY0NzlEOEVCMEI1MEQ5MEYzNkQxRDdC
MTlFRjg0RDMwHhcNMjUxMjI5MDQyMzQxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODQ5MS00ZjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiuAzudYom7gqNpVijKOtV+kd+UqRGhaXGFKz1qsVaPnh3x6fFASzRTjpqX9Y
Yyl5Pw26mss6fvyvJJLuLlS93qKMfptKIla/eyI3arcYuOZSX3YC+EopVov3iGHX
j/85J456B5KbIMNEwHLaklS6ipLM9NkB2inKO3tuq97i9wl/m/eeGyMy++Ql0DuT
s58sHw1hFEkL9Mr9NjSU47PnASbt91avuZLU1HzP4azeIAho/bvryalTfSJCaq1q
qxyAThh/QEu0J+txNLebXg2xVy6o8fspAdq66m1BPb98s5P/zWLUx6CAL7aGLREJ
cAoWarD0OqAtXy3XunfJpOy/owIDAQABo4ICbjCCAmowHQYDVR0OBBYEFEz+KZoy
Xmz5VOMjJVAi+4NhjMP7MB8GA1UdIwQYMBaAFEw2XjamR52OsLUNkPNtHXsZ74TT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0OS81MzE4QTEwODEy
MDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5ZNnd0UTJRODIwZGV4bnZo
Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1REWmVOcVpIblk2d3RRMlE4MjBkZXhudmhOTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzVCNDkvNTMxOEExMDgxMjAxMTFFRkFEQzg1MzQ1QzRGOUFFMDIvNDY5OUQ5RUFE
QjBCMTFGMEI3QjU3OTBBODJEMzY0MUQucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa
BAIAATAUAwQCfAR4MAwDBAK2XuwDBAC2XvAwDQYJKoZIhvcNAQELBQADggEBANCO
fN9AEdOs/7JsG74g15fqWy2K77IgiMSKI67D5BhwIFJyGUC10r1hoK3A5aBK8rMS
iX+O0mdy1Fu4VS18yyOjhdMGFpElezUcw2nNDMMxxGJkQP2jdu5guvlpSHP4YHvk
R87D2jX2wBii/8JbJeKQnYzn/+2uMQOribdrcjtP54HGEDha5J4UmOnFJWdA4s7S
V4a+87+oPZqkrhADnJBqWWXnFmiVB406Iyf95QZQjghdYOPj4dCEzMlcKWycFsOP
R8O1JK3lCuqKXBfN6YOeZ9to1d89Ts1JpXQimF5gsacFqo0bYvbwx00JrEgORWri
UZPqrQ9xZPENIGRlo9I=
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:27:41 2026 by rpki-client