
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/9E9FA4C40AB011EC8906F464C4F9AE02.roa
File: 9E9FA4C40AB011EC8906F464C4F9AE02.roa (raw, json)
Hash identifier: rVMgOf/LdOya/esBRnd1GGohhsXmnrr7k+gFsh7Hjfo=
Subject key identifier: 27:4C:FA:0A:7B:E4:E6:58:93:E7:75:D2:60:C0:AC:79:AB:82:CA:BF
Certificate issuer: /CN=A9174A5B/serialNumber=B4DFDE10248C90C5584B016EA6E6B49E781ED820
Certificate serial: 0729
Authority key identifier: B4:DF:DE:10:24:8C:90:C5:58:4B:01:6E:A6:E6:B4:9E:78:1E:D8:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/9E9FA4C40AB011EC8906F464C4F9AE02.roa
Signing time: Fri 06 Mar 2026 22:29:44 +0000
ROA not before: Fri 06 Mar 2026 22:29:44 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 141693
IP address blocks: 103.162.48.0/23 maxlen: 24
2407:fc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.crl
rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1833 (0x729)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174A5B, serialNumber=B4DFDE10248C90C5584B016EA6E6B49E781ED820
Validity
Not Before: Mar 6 22:29:44 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69ab5557-10d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bb:c6:ea:5a:85:c0:f6:ca:da:2f:b5:f3:da:
05:0b:46:68:40:78:61:37:b7:7a:97:8f:0f:bb:26:
ea:06:e9:1c:fa:ab:92:b4:06:d3:d7:af:8f:b1:56:
85:f6:19:5e:90:b5:8c:b5:6b:dd:32:98:83:b3:30:
6c:86:17:34:98:61:a8:30:14:7c:9f:58:4e:e0:17:
aa:a2:e5:c1:60:00:41:8d:2d:e1:07:72:95:bc:37:
0b:7c:f0:07:75:5d:31:6b:fb:65:1b:df:30:d2:57:
f5:51:5c:c2:38:e6:06:2a:10:18:27:91:c9:bb:12:
87:45:79:e1:e4:eb:68:52:8e:eb:f0:80:6c:78:59:
fa:c4:6e:2f:dd:74:fd:ca:49:cb:d0:e5:3f:f0:1c:
00:b8:b2:4e:8c:91:87:23:a6:c8:19:6d:c5:9f:ef:
63:e8:cf:2b:92:94:f3:96:66:de:4f:29:b8:de:71:
a3:1a:99:68:5f:12:d3:55:1e:8d:9a:fa:88:83:52:
ba:a9:9b:e7:48:4b:74:02:dd:d8:72:07:d3:60:eb:
64:15:9a:10:6b:85:9a:70:1d:52:13:b8:10:04:99:
32:45:51:78:a8:e9:ab:1c:5b:23:43:8e:4c:89:0e:
ee:35:34:e6:d5:2b:03:c2:e5:04:90:85:d4:f5:16:
02:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4C:FA:0A:7B:E4:E6:58:93:E7:75:D2:60:C0:AC:79:AB:82:CA:BF
X509v3 Authority Key Identifier:
keyid:B4:DF:DE:10:24:8C:90:C5:58:4B:01:6E:A6:E6:B4:9E:78:1E:D8:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/9E9FA4C40AB011EC8906F464C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.162.48.0/23
IPv6:
2407:fc0::/32
Signature Algorithm: sha256WithRSAEncryption
82:07:a0:59:63:88:2d:f1:36:c1:86:d1:db:c6:c8:13:65:cd:
36:7e:76:60:51:97:5b:e4:84:96:d3:d5:ae:39:d4:21:43:cc:
a5:09:bf:fb:ee:81:d9:40:ae:eb:78:19:47:df:b3:de:37:92:
20:9a:f3:96:26:60:c2:a6:bd:79:5c:99:94:1b:84:83:d3:c7:
a4:cf:4f:8f:f3:ab:90:1d:a1:95:19:b7:92:5a:a9:a9:9c:61:
76:3b:7d:de:4b:9b:41:eb:d1:61:0b:a7:e4:a7:c0:05:4c:10:
06:09:d3:37:6e:6d:ae:d8:59:b6:49:e2:65:46:11:4b:17:68:
7b:6d:fb:24:b7:03:f4:fa:77:42:15:e7:45:57:60:d2:6a:b1:
c8:bc:bd:46:ba:f4:14:13:35:59:cf:3e:2e:71:12:4a:b7:3b:
4c:59:d2:94:44:bd:0c:dd:3f:99:00:b1:f5:ea:5e:f1:90:a7:
3c:14:4a:56:2b:66:03:c5:9b:5e:e9:ea:bf:5a:c9:4c:6d:3f:
ac:70:3e:da:5c:16:f4:b7:cf:67:bf:c4:41:88:fd:67:40:b4:
7b:ee:49:b3:e2:48:6e:3d:a6:d7:a7:8b:0e:c2:62:a5:d0:3b:
d5:9d:37:a5:f8:6e:6f:e5:ac:b1:2a:4d:7c:38:9e:bf:9b:29:
24:81:29:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:26 2026 by rpki-client