
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/4E9801F4122311F1A005593E1F3D8C67.roa
File: 4E9801F4122311F1A005593E1F3D8C67.roa (raw, json)
Hash identifier: 9NUw/Vlq1cG4rvMjm7Tf+mY/SPVFiZPsiEtV3MAG4ts=
Subject key identifier: 24:00:1F:12:4E:0A:44:5F:72:25:CF:59:2F:AC:C9:0F:C5:AF:7C:B1
Certificate issuer: /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Certificate serial: 0156
Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/4E9801F4122311F1A005593E1F3D8C67.roa
Signing time: Sun 01 Mar 2026 18:05:29 +0000
ROA not before: Wed 25 Feb 2026 08:23:48 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 137967
IP address blocks: 163.61.16.0/24 maxlen: 24
163.61.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl
rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175648, serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Validity
Not Before: Feb 25 08:23:48 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a47fe9-c67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c1:0a:7d:17:73:50:15:8d:a2:51:86:df:72:
a5:ad:bd:60:22:2f:49:a1:c2:26:bc:02:22:b2:c6:
36:56:65:11:d2:fb:84:ae:3d:d5:7f:59:fb:0f:19:
39:fa:98:bd:27:10:9e:c8:64:8d:1b:df:f1:ff:99:
2e:e7:af:7f:69:5d:f5:f8:01:21:2a:85:b8:c8:73:
1a:ee:e2:eb:1b:63:b7:fc:0c:74:6b:40:56:e2:cc:
3f:dd:d9:33:18:d2:99:b1:8e:e3:b9:38:d8:45:cc:
28:47:ab:55:96:98:e9:3b:84:47:24:7c:91:12:00:
e3:d9:c8:3d:44:d9:2b:01:ad:d2:52:66:cf:f7:e8:
58:f7:73:97:a0:31:a0:dc:1f:83:07:6c:67:49:d2:
2e:a5:4d:38:b9:5b:cb:61:c3:20:1f:f3:37:c6:e2:
d2:52:63:8f:f0:85:fb:2e:3f:0a:51:9d:00:8c:eb:
4d:5c:7c:f2:55:49:6e:20:89:4e:d0:f3:31:6b:92:
3e:5b:2b:c6:ed:47:36:84:b0:1b:47:f5:54:42:47:
ed:b4:13:f6:db:9f:59:95:29:db:ba:5b:9c:24:60:
3d:85:c6:6a:7b:95:9d:28:67:9b:9e:54:1e:65:cd:
6f:d4:4e:61:93:5f:5f:64:71:70:c7:27:60:d9:a3:
a6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:00:1F:12:4E:0A:44:5F:72:25:CF:59:2F:AC:C9:0F:C5:AF:7C:B1
X509v3 Authority Key Identifier:
keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/4E9801F4122311F1A005593E1F3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.16.0/23
Signature Algorithm: sha256WithRSAEncryption
54:02:5f:ac:b3:e3:32:f2:a9:e0:d3:7f:2c:b9:25:23:79:77:
65:ca:3c:11:0d:b9:91:11:bc:63:32:f6:2c:3f:b9:8e:fd:a4:
50:25:86:0f:bc:0f:1c:cc:67:61:7c:90:bb:8c:1b:5f:6b:e4:
7a:d0:29:31:0c:00:1e:64:a1:96:90:c3:3c:3d:2f:70:4b:04:
fd:1a:c9:58:0a:e4:3e:55:d1:ad:ec:71:2f:ee:92:03:e4:b0:
23:b3:31:d0:0f:0b:c5:e6:36:e3:ba:c0:ff:f7:c3:26:fa:60:
8d:2f:2e:8b:a6:5a:d3:5e:eb:68:a2:e6:4e:98:73:b9:38:6b:
a0:07:e0:c8:a2:f2:e4:ac:c4:92:ad:0a:1d:fd:09:15:9a:12:
96:96:ec:71:a0:4e:b3:8b:58:49:e0:e0:c6:a2:45:88:f3:fb:
87:17:75:28:d1:05:9c:71:b4:17:7d:11:90:67:36:fb:89:01:
ef:d1:90:84:cf:29:f2:2f:c3:94:30:c2:8c:18:30:6d:2f:39:
24:07:ee:4d:3f:a1:2b:97:fa:dd:1f:85:a1:08:c3:04:c1:7f:
9b:91:cb:d1:99:ef:aa:30:90:c0:c4:07:ce:ae:ba:28:dc:b1:
18:81:45:f2:ab:eb:29:9e:ec:e1:82:74:cb:31:1d:67:62:53:
91:3a:73:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:34:24 2026 by rpki-client