
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/3FF298D41AFF11EFB20C2648C4F9AE02.roa
File: 3FF298D41AFF11EFB20C2648C4F9AE02.roa (raw, json)
Hash identifier: F+xAnb9Dp/1DmyNH/5geMeagilcYVoZK5t/d04k7W6Q=
Subject key identifier: 47:5A:C8:74:CE:1D:1E:A2:6D:2C:7B:38:CE:CC:80:8C:70:7D:FD:D7
Certificate issuer: /CN=A9140BA4/serialNumber=E66BA892595014794BB6451D14281C8400206203
Certificate serial: 1549
Authority key identifier: E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/3FF298D41AFF11EFB20C2648C4F9AE02.roa
Signing time: Thu 16 Jul 2026 17:16:49 +0000
ROA not before: Thu 16 Jul 2026 17:16:49 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 4770
IP address blocks: 103.116.188.0/23 maxlen: 23
2001:df5:5d00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.crl
rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5449 (0x1549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140BA4, serialNumber=E66BA892595014794BB6451D14281C8400206203
Validity
Not Before: Jul 16 17:16:49 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a591201-cc9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4b:ca:bd:a1:3c:63:b0:77:1a:4b:17:16:84:
a6:36:06:35:92:b2:78:2b:77:d5:f2:a3:76:13:b6:
cc:8e:5f:63:45:ea:00:92:ba:84:9c:ad:36:12:41:
0d:44:15:18:3a:41:9d:b8:89:df:e8:ac:47:2e:1a:
41:5c:0d:df:ea:89:6b:aa:cf:7d:1a:55:8e:56:84:
b1:c0:21:bc:4a:67:1a:17:27:b9:e6:9a:f3:73:d0:
57:bc:43:f5:da:72:4d:77:1c:3a:b5:c6:44:e8:f2:
d9:68:70:cf:42:d4:3e:e7:ee:10:ed:5d:82:f1:ed:
49:ee:7b:81:7c:1f:fd:5e:8a:3f:fa:b1:0b:1b:66:
45:d7:fe:99:fd:7b:a2:ac:61:dd:5e:db:d9:09:08:
64:10:f2:4d:ad:d3:fb:38:7a:90:82:6b:bb:97:ac:
3e:6f:a2:de:1d:c0:86:7a:96:ce:7d:ed:69:93:79:
df:b9:f3:a1:1f:32:b4:08:6f:c7:df:db:57:c5:c9:
4c:fc:5b:29:e2:f9:1f:70:5d:1d:b0:a6:46:be:60:
c7:a3:2e:c6:79:32:35:94:ce:85:9f:a3:42:df:cf:
ba:2f:96:4d:91:02:24:fc:67:a5:49:91:55:04:d6:
ea:ca:89:28:67:83:43:20:16:8b:ba:f1:34:2c:3e:
55:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5A:C8:74:CE:1D:1E:A2:6D:2C:7B:38:CE:CC:80:8C:70:7D:FD:D7
X509v3 Authority Key Identifier:
keyid:E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/3FF298D41AFF11EFB20C2648C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.116.188.0/23
IPv6:
2001:df5:5d00::/48
Signature Algorithm: sha256WithRSAEncryption
a1:8c:52:c1:4a:92:13:73:a3:94:a2:fd:f4:72:c6:2f:27:b5:
1b:1b:25:9b:b6:68:f9:5e:c4:e6:ed:3a:29:55:25:b3:c5:41:
e3:67:9f:31:bd:18:da:e3:18:f9:eb:44:28:e0:f1:53:c4:f6:
3d:1a:0a:35:1f:15:53:c3:c2:be:a5:f8:27:23:6c:1e:a2:36:
05:c3:82:93:ed:b9:eb:71:93:9f:5a:1f:eb:e2:8a:7e:f4:67:
b3:5a:41:fe:31:15:96:50:93:af:ad:22:79:2d:16:59:3e:f7:
0a:2e:1b:c5:b5:89:5e:c4:2a:9e:a4:de:f8:ed:e6:66:3d:8d:
fd:4c:b7:69:b0:42:bc:69:2f:4b:7f:77:ec:c0:d8:26:ca:93:
39:27:64:5a:81:8a:77:ee:81:75:4d:ea:76:8a:76:62:3b:54:
3a:18:07:d2:1c:31:35:4b:47:6f:06:7b:56:6c:bd:8c:e2:c2:
c4:ce:66:a3:c0:6f:b9:07:ff:bd:06:22:21:7d:bf:7e:2f:30:
ae:b1:d4:0c:24:c0:02:83:9f:25:a2:48:f7:47:30:b6:86:f8:
3b:72:3f:cc:95:42:3d:dc:b2:c4:5e:c1:ce:27:f6:55:4a:c1:
4f:1a:68:87:bf:d2:53:7b:c0:50:8e:0b:f1:14:28:0f:9d:d2:
b5:b5:44:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:45 2026 by rpki-client