
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/4532BD9C14EF11ECA529523DC4F9AE02.roa
File: 4532BD9C14EF11ECA529523DC4F9AE02.roa (raw, json)
Hash identifier: 6oqBivfV20ZCwWDrvfDszw8M0HSCjMHWk8bUvCdKaCc=
Subject key identifier: 79:1B:E7:69:89:49:C3:19:14:C6:8F:8D:9F:EC:48:D0:87:B7:D6:AE
Certificate issuer: /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Certificate serial: 1AE1
Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/4532BD9C14EF11ECA529523DC4F9AE02.roa
Signing time: Fri 08 May 2026 17:20:22 +0000
ROA not before: Fri 08 May 2026 17:20:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9901
IP address blocks: 203.98.42.0/23 maxlen: 23
203.98.50.0/24 maxlen: 24
2001:4400::/30 maxlen: 30
2001:4403:0:10a::/126 maxlen: 126
2001:4403:0:10a::4/126 maxlen: 126
2001:4403:0:116::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:24:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6881 (0x1ae1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146AD7, serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Validity
Not Before: May 8 17:20:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69fe1b56-86fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:cb:03:5d:97:47:37:03:44:1e:73:5d:b4:
6b:4e:31:ca:d6:46:16:d4:bc:e6:57:8c:3c:29:b7:
b4:1f:7d:0a:91:d6:ba:ea:be:99:52:56:d0:12:3c:
f6:17:46:24:8d:4b:c9:2b:8b:2f:fa:e9:ea:02:30:
ff:db:25:41:08:c8:0a:0e:84:39:de:88:43:19:a4:
02:97:da:5b:c4:5b:cc:46:1a:c8:90:4b:84:ee:e3:
cd:3c:ef:f1:a7:10:41:3a:e5:b4:05:91:c8:1b:1c:
55:07:57:51:b7:fc:d0:5d:4c:1c:1e:d3:c0:74:95:
88:e4:4c:f3:12:9f:78:de:d4:26:3b:ef:3f:81:6c:
b5:01:27:7b:e5:1a:66:fb:83:7c:25:20:54:c9:92:
dc:91:8e:c0:66:ac:4d:1d:a8:c6:b7:7d:3a:ce:27:
ba:c5:12:3d:75:e2:45:d5:b2:b6:c5:1b:e3:c2:4e:
68:2f:67:e6:0e:ee:55:c2:a5:71:a3:96:25:4f:53:
fa:34:b2:bc:33:8d:0b:4b:ea:29:cb:ba:da:69:7b:
70:a0:e7:33:f6:a0:f2:05:bc:02:7f:b7:66:89:7c:
8f:64:51:03:1f:05:9d:6d:8e:96:34:af:c3:07:dc:
2b:86:30:09:ff:d9:47:43:db:3e:e1:6d:bc:7c:c4:
74:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1B:E7:69:89:49:C3:19:14:C6:8F:8D:9F:EC:48:D0:87:B7:D6:AE
X509v3 Authority Key Identifier:
keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/4532BD9C14EF11ECA529523DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.98.42.0/23
203.98.50.0/24
IPv6:
2001:4400::/30
Signature Algorithm: sha256WithRSAEncryption
16:73:3b:79:37:d7:c5:51:00:4a:2d:29:71:35:ab:6d:29:86:
a2:85:f1:42:f3:d8:ee:79:0a:6f:a7:42:04:65:d5:e9:96:0c:
5c:5b:97:4e:3a:80:c9:3a:e2:b9:77:5a:03:6b:c3:a7:7a:2f:
0c:39:41:e6:52:18:bb:6c:6f:23:24:f6:99:1a:1f:cc:eb:0c:
ce:94:16:f6:83:89:2b:06:1f:94:fa:af:d8:a5:58:89:4b:91:
2b:54:47:a7:f1:3f:56:32:9c:aa:b8:af:20:dd:d1:ee:b5:c6:
93:c2:81:de:d8:c1:ff:57:a8:7b:7c:4b:3b:11:2b:a8:dc:32:
bf:17:5e:d5:f3:6d:04:bb:48:96:45:68:39:4c:25:d0:38:27:
ec:ab:8d:5e:cb:a8:29:40:17:26:80:1e:1a:81:d3:67:21:45:
50:4a:73:8b:c0:4c:54:4b:d3:a0:94:9c:ac:61:4e:8b:97:24:
d4:27:71:41:26:af:2c:b6:d5:61:ea:72:e2:b4:0f:6e:42:84:
49:23:fd:72:36:87:5e:44:78:56:08:a3:8a:af:76:92:e7:92:
b9:a5:ee:4a:1a:31:fe:27:96:15:bc:e1:e7:36:db:6d:13:6f:
68:83:64:cb:4a:32:69:4e:89:00:0a:64:55:65:6f:43:d3:dd:
60:44:84:84
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICGuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZBRDcxMTAvBgNVBAUTKEJBRjVBREEzMkNBMEQzNENGM0NDRjUzQUJERjg2REU2
RjhFRDkwMDUwHhcNMjYwNTA4MTcyMDIyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWZlMWI1Ni04NmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwTzLA12XRzcDRB5zXbRrTjHK1kYW1LzmV4w8Kbe0H30Kkda66r6ZUlbQEjz2
F0YkjUvJK4sv+unqAjD/2yVBCMgKDoQ53ohDGaQCl9pbxFvMRhrIkEuE7uPNPO/x
pxBBOuW0BZHIGxxVB1dRt/zQXUwcHtPAdJWI5EzzEp943tQmO+8/gWy1ASd75Rpm
+4N8JSBUyZLckY7AZqxNHajGt306zie6xRI9deJF1bK2xRvjwk5oL2fmDu5VwqVx
o5YlT1P6NLK8M40LS+opy7raaXtwoOcz9qDyBbwCf7dmiXyPZFEDHwWdbY6WNK/D
B9wrhjAJ/9lHQ9s+4W28fMR02wIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFHkb52mJ
ScMZFMaPjZ/sSNCHt9auMB8GA1UdIwQYMBaAFLr1raMsoNNM88z1Or34beb47ZAF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkFENy9GOEJBQkFDQThC
ODkxMUU3OTAxMTVDM0ZDNEY5QUUwMi91dld0b3l5ZzAwenp6UFU2dmZodDV2anRr
QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V2V3RveXlnMDB6enpQVTZ2Zmh0NXZqdGtBVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDZBRDcvRjhCQUJBQ0E4Qjg5MTFFNzkwMTE1QzNGQzRGOUFFMDIvNDUzMkJEOUMx
NEVGMTFFQ0E1Mjk1MjNEQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQBy2IqAwQAy2IyMA0EAgACMAcDBQIgAUQAMA0GCSqGSIb3DQEBCwUA
A4IBAQAWczt5N9fFUQBKLSlxNattKYaihfFC89jueQpvp0IEZdXplgxcW5dOOoDJ
OuK5d1oDa8Onei8MOUHmUhi7bG8jJPaZGh/M6wzOlBb2g4krBh+U+q/YpViJS5Er
VEen8T9WMpyquK8g3dHutcaTwoHe2MH/V6h7fEs7ESuo3DK/F17V820Eu0iWRWg5
TCXQOCfsq41ey6gpQBcmgB4agdNnIUVQSnOLwExUS9OglJysYU6LlyTUJ3FBJq8s
ttVh6nLitA9uQoRJI/1yNodeRHhWCKOKr3aS55K5pe5KGjH+J5YVvOHnNtttE29o
g2TLSjJpTokACmRVZW9D091gRISE
-----END CERTIFICATE-----
Generated at Wed May 13 07:19:18 2026 by rpki-client