
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/A937C2200FA511EFBDB06936C4F9AE02.roa
File: A937C2200FA511EFBDB06936C4F9AE02.roa (raw, json)
Hash identifier: pdP88FVdHPxY3PkqXC05MPOqK1EiPFYmTPRjtQdhrbw=
Subject key identifier: 01:E4:76:8C:2C:EF:1B:64:58:45:A8:E3:AC:AE:72:C3:79:46:22:D7
Certificate issuer: /CN=A9176FD9/serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
Certificate serial: 01B3
Authority key identifier: 62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/A937C2200FA511EFBDB06936C4F9AE02.roa
Signing time: Fri 03 Jul 2026 05:31:26 +0000
ROA not before: Fri 03 Jul 2026 05:31:26 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 46015
IP address blocks: 45.127.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl
rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176FD9, serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
Validity
Not Before: Jul 3 05:31:26 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a47492e-8255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:d5:c6:5a:19:f8:d9:6b:4c:95:fe:fc:eb:
be:0d:85:9a:48:5c:e8:da:ff:da:6a:92:49:fc:b8:
c0:7f:0a:e0:f5:88:c3:18:66:ea:1b:39:79:22:91:
2d:c8:50:00:62:b1:5d:b9:2d:98:fe:1b:a8:d0:fb:
53:35:7f:73:0c:cf:33:2c:ae:0c:56:f6:af:0d:dd:
71:e8:5d:a9:a6:eb:8b:49:4c:77:77:07:ed:4f:21:
b8:93:b9:ee:36:ce:18:da:d5:79:a8:8f:41:e1:f7:
6c:16:77:dc:d0:5e:12:22:1b:47:71:95:49:03:b7:
ff:52:c6:09:08:39:83:77:27:e5:94:01:36:92:88:
ad:ba:b3:2d:b4:09:03:ed:21:19:5c:ee:0f:fb:58:
f5:b3:78:2f:c8:dd:62:85:61:2d:02:98:35:21:f9:
32:d0:f9:61:a0:dd:99:29:5b:c1:e9:84:38:40:02:
09:dd:40:9a:54:95:b4:ec:c6:2c:80:74:59:38:30:
50:16:11:c8:43:54:f0:aa:59:d6:ce:ae:b9:d7:5b:
da:87:88:1f:49:b6:4d:43:12:37:3b:4f:7c:5b:f8:
af:27:3c:de:bc:77:c9:78:a4:c9:bf:f4:e3:c4:f4:
32:bc:94:60:b3:b4:ca:f4:c9:87:53:9c:13:97:72:
d3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E4:76:8C:2C:EF:1B:64:58:45:A8:E3:AC:AE:72:C3:79:46:22:D7
X509v3 Authority Key Identifier:
keyid:62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/A937C2200FA511EFBDB06936C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.127.4.0/22
Signature Algorithm: sha256WithRSAEncryption
38:ed:13:75:9e:4d:d8:52:dc:9f:36:2a:8d:2c:92:f8:59:33:
f1:b7:15:fa:cd:b7:fb:bb:7c:d2:e5:d3:e8:d7:c4:e6:7d:63:
83:31:14:ba:b6:8b:13:60:35:e4:a2:e0:b1:1e:a1:38:5c:e7:
8a:e1:1e:c1:56:bc:9b:88:8a:ad:81:0c:9f:61:26:92:8f:5e:
02:7a:c4:43:36:d7:47:14:dc:7a:4d:9f:c9:3a:90:91:6b:43:
a8:16:be:31:5e:c1:38:75:a1:91:98:e4:5a:1e:56:94:a6:03:
20:0c:6d:89:99:55:7d:b2:02:a8:04:3b:4d:30:2e:22:39:7a:
05:da:71:80:53:55:62:ec:4f:cb:f7:3a:62:21:b0:f4:c8:cf:
ac:ac:2a:2d:ba:bc:5f:56:4f:4f:3c:ad:a5:81:2d:42:9c:9d:
39:66:0d:55:8e:c0:cc:84:aa:c3:97:9a:bf:72:42:07:51:7b:
29:28:0c:f5:a3:16:8a:e5:86:7a:5c:97:64:66:3d:07:f7:b4:
10:2b:43:fa:4d:bf:f8:01:79:09:f5:01:ca:5c:db:7d:12:2f:
bc:49:e9:c9:20:b7:c9:c2:cc:2c:c0:ac:b0:f3:2f:a1:72:a3:
c1:72:9a:3c:04:9f:34:bd:f4:ff:93:dc:8c:c7:4f:da:3f:21:
c6:25:d7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:44:42 2026 by rpki-client