
$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/4472E7B85B6011F0A2E8311CC4F9AE02.roa
File: 4472E7B85B6011F0A2E8311CC4F9AE02.roa (raw, json)
Hash identifier: 82CEt9VL/OD9TisSAa9TvwDZ8sCfGc7f8L0y9tiJpe8=
Subject key identifier: E8:9C:62:2E:85:10:94:17:AB:64:0A:66:83:8E:7E:82:B7:82:E2:7A
Certificate issuer: /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Certificate serial: 0566
Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/4472E7B85B6011F0A2E8311CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:18:09 +0000
ROA not before: Mon 12 Jan 2026 23:19:38 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 197537
IP address blocks: 103.168.154.0/24 maxlen: 24
103.168.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1382 (0x566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91618BC, serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Validity
Not Before: Jan 12 23:19:38 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a482e1-80c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8f:cd:d0:52:63:e9:0f:de:85:f1:07:51:57:
09:25:ef:52:bf:54:ba:06:e4:a6:7d:7b:a4:12:36:
30:4d:e3:f9:50:03:78:5d:31:4c:b6:65:18:6c:e0:
26:9f:d6:b3:bb:3f:12:33:b7:84:c2:ce:cd:b0:41:
09:99:4e:f0:f2:45:81:4e:39:a2:32:f5:98:a3:e4:
bf:66:f2:d0:6e:36:6d:06:aa:c2:38:6b:b5:47:10:
ea:ee:16:4d:98:0b:1d:ed:9d:6d:2c:4e:20:92:16:
34:d5:74:c9:cd:46:84:64:19:f5:28:d1:56:c7:54:
5c:08:c5:79:a2:20:38:e3:2f:45:5a:f5:e2:ff:dd:
2e:4d:03:f7:2f:d2:b7:e9:7a:39:6f:ca:d5:f1:b5:
18:fc:cc:d4:ce:37:4c:1f:7f:57:4d:c6:14:36:82:
00:f7:49:9b:c3:df:aa:5a:6d:8e:15:6f:ee:64:6b:
27:4e:06:e9:90:6c:92:b5:ef:73:29:47:02:7b:5c:
fe:6a:3a:95:a4:25:93:84:b0:54:57:ed:86:57:9b:
a1:8b:c4:6a:01:f6:c3:01:70:36:c1:26:b3:03:6e:
83:37:4d:94:c5:99:39:43:9b:1b:9c:7b:2d:91:f3:
63:c9:1b:c8:eb:52:0c:6b:cb:d7:3d:0a:99:25:6c:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9C:62:2E:85:10:94:17:AB:64:0A:66:83:8E:7E:82:B7:82:E2:7A
X509v3 Authority Key Identifier:
keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/4472E7B85B6011F0A2E8311CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.168.154.0/23
Signature Algorithm: sha256WithRSAEncryption
63:71:f9:18:6f:03:f5:df:51:16:e4:1a:01:aa:03:8e:4a:9e:
de:8b:6c:b2:19:2a:bc:66:9d:50:07:04:c7:c8:d5:70:01:4a:
5e:59:cd:42:7e:0b:cc:45:c9:3b:07:e1:30:95:c4:a9:9d:d1:
91:eb:12:7d:60:4a:de:03:35:c9:0a:48:5a:a1:b6:85:33:bf:
57:79:d2:43:d9:ad:02:ed:46:d1:2c:1c:24:76:38:60:22:1a:
29:2b:11:1f:35:6e:75:62:2a:c1:fc:e7:48:b1:a9:b5:4f:95:
42:4b:81:d7:8d:23:4b:e1:34:fa:d3:48:3e:ec:a8:d0:db:f1:
f6:35:d2:ec:a2:92:ce:2a:91:79:3a:22:96:e4:ae:39:c4:f1:
73:93:8f:38:a5:20:c5:b4:a1:76:a0:ce:19:3f:56:52:b4:e6:
c9:07:c9:09:70:41:94:65:38:ff:5f:88:6e:1a:e3:52:54:8f:
ae:7c:aa:b7:99:e5:81:9a:09:75:b8:82:58:62:c1:a6:bc:6a:
89:32:b3:c5:0b:8a:82:22:46:5c:64:26:00:6b:e2:f2:7d:94:
8f:78:97:be:ad:a1:71:44:31:72:84:c9:cc:0b:44:1b:b9:fe:
30:7f:2d:88:9b:ba:b1:d8:a0:5c:92:39:dc:10:37:a8:e9:6a:
c3:7e:6c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:23:06 2026 by rpki-client