
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/46F4E81842B611F1BDBC0B88BD833773.roa
File: 46F4E81842B611F1BDBC0B88BD833773.roa (raw, json)
Hash identifier: bjvoF+HUltCMZqOM/EeOs1/NfOSmFvhkJtwfMjdbJBk=
Subject key identifier: C9:CE:8A:5A:A5:10:19:BE:B3:B9:F0:B8:42:CB:61:69:0A:EE:FE:5A
Certificate issuer: /CN=A9138447/serialNumber=1F6C334EBC6462A26452867ABB5F84EF68ADC02C
Certificate serial: 099A
Authority key identifier: 1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/46F4E81842B611F1BDBC0B88BD833773.roa
Signing time: Tue 28 Apr 2026 03:56:47 +0000
ROA not before: Tue 28 Apr 2026 03:56:47 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 55707
IP address blocks: 103.1.108.0/22 maxlen: 24
103.23.104.0/23 maxlen: 24
103.23.106.0/23 maxlen: 24
163.47.252.0/22 maxlen: 24
203.31.114.0/23 maxlen: 24
223.25.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.crl
rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:05:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2458 (0x99a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138447, serialNumber=1F6C334EBC6462A26452867ABB5F84EF68ADC02C
Validity
Not Before: Apr 28 03:56:47 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69f02fff-9887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:60:05:a7:52:a4:93:cd:ac:60:78:ce:b3:
23:31:bc:69:ba:b4:06:5f:12:e3:5f:6d:c5:81:78:
45:aa:07:d9:ab:37:3a:0a:a8:37:ca:1a:35:56:66:
6f:3b:91:07:f1:9f:ab:4a:75:b6:e3:a5:fa:3b:c3:
b8:44:31:20:cc:29:93:ff:50:f0:31:ec:01:84:2f:
71:c7:ea:9a:3e:31:b7:4d:49:a3:eb:26:5a:b9:d9:
4f:0c:b5:89:0b:46:b5:4d:35:9a:13:2a:54:d1:84:
29:3b:b6:24:08:bf:a0:0c:ee:98:f1:e6:7f:f0:65:
69:62:56:7f:19:0b:0c:cb:d8:60:79:3e:d3:86:cd:
76:b6:ce:b4:f3:df:f0:1a:46:55:04:48:c6:30:4f:
ea:76:01:1f:1f:69:31:a8:b8:40:34:e7:a4:70:8b:
a2:63:79:4d:23:cb:c2:36:fb:7e:fa:91:db:9d:85:
10:78:79:2c:23:9c:c0:30:2e:b5:19:8c:67:d3:df:
aa:ee:64:ef:a3:bf:2c:c5:30:04:4f:08:b5:a1:a5:
d0:da:3d:61:66:d6:3a:7d:a6:d2:69:19:08:f2:d5:
0c:8f:fa:98:ae:51:f9:2a:37:58:d2:aa:50:5e:47:
75:0e:cc:0b:b4:8a:83:b7:25:c3:a8:01:ec:c0:9c:
4e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CE:8A:5A:A5:10:19:BE:B3:B9:F0:B8:42:CB:61:69:0A:EE:FE:5A
X509v3 Authority Key Identifier:
keyid:1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/46F4E81842B611F1BDBC0B88BD833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.1.108.0/22
103.23.104.0/22
163.47.252.0/22
203.31.114.0/23
223.25.112.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:c1:79:f2:38:f1:ef:a2:c1:0c:bf:d8:3e:50:fb:22:9f:de:
3b:53:b0:98:a4:aa:f9:08:aa:d4:4c:77:11:ef:bf:5a:99:63:
6c:47:e9:b2:92:b0:da:cd:f3:45:34:47:bb:27:b5:fc:60:07:
ea:01:16:2a:11:17:1b:80:14:06:cc:1f:d0:57:11:6c:2d:7c:
ba:68:aa:f3:d7:c0:39:aa:f8:83:9d:a9:25:4d:d3:e5:d3:57:
d7:af:bf:6b:34:74:12:72:d9:bc:d2:da:96:bb:86:cc:9f:c3:
af:a5:90:5e:a6:bc:de:01:de:2d:49:11:7e:40:20:97:f1:3e:
e7:b7:d9:20:df:aa:6c:49:2b:f0:c4:bf:be:a1:de:67:42:9f:
52:ab:df:4c:13:4e:74:3d:dd:e9:1a:10:44:e0:f6:90:93:05:
ff:87:41:6a:72:89:c3:02:ac:37:58:7e:0e:80:d2:7e:39:65:
02:3a:bf:d3:f5:18:a2:3c:22:83:49:08:e0:1f:f5:f6:24:6c:
ce:f3:6a:08:fe:c9:ab:ba:ce:12:e3:6a:02:25:e3:3a:84:1d:
5d:cb:42:c8:03:2e:a5:15:18:22:c8:52:39:73:69:13:d3:eb:
f7:81:e5:a2:0e:bf:cc:28:43:af:f6:46:ae:b6:76:46:92:cd:
99:11:c2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:41:52 2026 by rpki-client