
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/7DF47F46F95611E996377877C4F9AE02.roa
File: 7DF47F46F95611E996377877C4F9AE02.roa (raw, json)
Hash identifier: WNUk8jDYPlrb/rdVyo4XTCfnmiGld7eyz2MY75cZ7HI=
Subject key identifier: D7:00:60:12:CA:4C:45:DB:21:AA:DE:B9:F6:67:29:0E:D9:41:B8:81
Certificate issuer: /CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76
Certificate serial: 0D19
Authority key identifier: 4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/7DF47F46F95611E996377877C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:52:20 +0000
ROA not before: Tue 02 Dec 2025 17:48:35 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 138462
IP address blocks: 103.126.36.0/22 maxlen: 24
2404:3c0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl
rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 18:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3353 (0xd19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174DAD, serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76
Validity
Not Before: Dec 2 17:48:35 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a44493-84c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:07:e2:0a:e6:90:45:75:39:17:fa:d2:de:56:
b1:79:c7:70:ad:e1:8d:be:09:a1:e8:66:ba:68:34:
1a:6f:dd:cc:be:42:c3:d4:77:80:30:19:24:11:85:
91:47:2f:1e:37:f5:7f:87:39:4f:a9:91:a7:60:6d:
46:33:07:6f:91:63:70:07:30:5e:63:9f:4b:c2:41:
c4:5c:02:13:11:f8:a4:5f:65:66:0c:e1:8c:c4:18:
90:b8:5e:50:e0:a1:6a:2d:ce:f4:26:97:42:49:ab:
cc:90:a3:e8:03:02:dd:f8:0b:32:31:6e:c4:6a:3d:
1f:dc:f2:c6:89:87:a1:a4:05:58:05:94:90:28:68:
ed:8b:8b:d6:dd:9b:90:e8:dc:13:15:a8:2e:0d:a9:
f6:fb:07:74:71:92:ba:75:2d:c6:62:a4:b3:5b:80:
30:c2:e2:b2:a6:6f:15:93:49:ea:6a:da:ea:a9:1d:
dc:ea:14:a1:31:8c:6e:a8:09:94:22:cf:c4:bc:89:
72:89:82:ad:f3:7e:6d:d0:73:8d:93:6a:f8:a2:51:
89:fa:98:ac:3f:58:ad:43:74:02:ac:c5:f3:b9:6d:
53:f4:12:59:70:5e:29:1a:c8:df:90:f5:c6:00:9f:
c6:cc:a0:55:7a:9d:9c:90:fd:4d:fa:ff:cd:e6:fc:
33:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:00:60:12:CA:4C:45:DB:21:AA:DE:B9:F6:67:29:0E:D9:41:B8:81
X509v3 Authority Key Identifier:
keyid:4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/7DF47F46F95611E996377877C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.126.36.0/22
IPv6:
2404:3c0::/32
Signature Algorithm: sha256WithRSAEncryption
2c:e7:e8:81:96:9a:fc:4a:cc:d4:87:a6:0d:8c:74:ce:91:6a:
bb:f3:0c:fa:c6:7b:1f:23:04:05:de:db:e2:2f:ee:5e:7c:11:
93:84:e9:12:85:f6:44:8b:c5:e3:3f:ea:02:7f:93:5f:6f:0c:
4e:65:d7:5a:d2:ad:86:92:6c:32:08:7a:a5:70:1d:ce:b3:c4:
b5:91:87:27:fd:20:56:67:70:84:97:1b:c1:2b:0c:31:36:b7:
6f:dd:36:a9:88:39:6f:a3:4c:23:38:6b:0a:93:2a:ec:4e:ab:
b2:cf:0b:b3:a1:c8:49:c5:ed:92:fa:c6:39:ab:f0:98:3b:5c:
51:70:5b:02:3b:52:10:1d:be:b1:61:bb:c9:32:67:bf:92:fe:
71:58:3a:a4:03:70:29:f7:1a:7e:57:76:75:a2:b2:c5:2a:27:
35:5b:8f:74:6b:3b:c4:81:78:36:26:f5:d3:7b:d0:e6:91:65:
b6:57:e6:29:5a:17:13:80:d1:21:76:c1:63:5b:ba:c1:5e:21:
e9:83:0e:6f:de:52:8d:b6:de:7a:81:11:e1:38:1d:b3:d2:37:
7b:98:7b:04:4c:1a:46:e5:84:a9:3c:fd:23:0a:56:b8:f2:ab:
6f:f2:69:34:b7:b7:80:18:1b:c7:c7:c2:42:32:34:5d:13:44:
a4:85:62:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:11:11 2026 by rpki-client