
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/4A0A2DC8958011EE91C9DF80C4F9AE02.roa
File: 4A0A2DC8958011EE91C9DF80C4F9AE02.roa (raw, json)
Hash identifier: v4CW92nKKjR4N5nAx8mvTdZBK8rztBKfOKYHOWpOwjg=
Subject key identifier: 1E:A5:69:09:BC:2D:0F:3C:87:BD:73:ED:5A:F8:14:97:2D:91:33:7F
Certificate issuer: /CN=A9182FD0/serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B
Certificate serial: 01F6
Authority key identifier: 7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/4A0A2DC8958011EE91C9DF80C4F9AE02.roa
Signing time: Fri 03 Jul 2026 04:30:56 +0000
ROA not before: Fri 03 Jul 2026 04:30:56 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 45177
IP address blocks: 103.68.58.0/24 maxlen: 24
103.68.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl
rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:42:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 502 (0x1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182FD0, serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B
Validity
Not Before: Jul 3 04:30:56 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a473b00-3c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:a4:c9:f7:5b:15:b3:4f:25:d6:dc:ad:ca:
00:2b:ab:00:87:6b:1f:f9:00:7b:e1:70:29:41:d8:
58:6e:ce:15:bf:36:98:ab:8a:8a:61:66:90:9f:7e:
ba:37:c0:96:48:56:88:a1:57:1b:b4:8a:a7:3e:b7:
4e:d6:c6:ef:2e:a1:77:7f:9f:fe:48:db:f5:aa:30:
cc:4f:70:47:22:fe:3b:64:17:89:82:0b:3d:41:61:
e7:47:f1:dc:a4:31:7a:cc:04:14:7b:af:ed:50:04:
f9:2f:45:71:97:35:d0:78:b5:d4:f8:31:8e:1d:37:
a0:0f:ab:8f:dc:ff:0c:69:73:da:d2:f9:4f:d3:0c:
f9:49:af:d9:35:cc:ce:3b:83:3e:e8:26:ce:db:f7:
1f:72:91:f7:f9:84:f4:39:e1:c1:ef:15:84:3e:1a:
2e:30:3c:a8:cc:4b:5f:69:3a:d2:14:8e:02:c8:de:
d4:64:93:42:13:18:0e:2e:04:1e:fe:5a:5f:3d:a7:
8a:78:d9:78:fd:9b:68:48:44:26:ea:43:6b:16:8d:
3f:11:ed:77:92:1e:fa:5e:00:00:06:8e:d0:49:1b:
f8:a6:47:5e:8b:9e:1a:2a:59:b3:d0:aa:2f:b4:00:
fc:75:3a:76:04:d8:40:78:fe:37:67:82:c6:07:29:
8d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A5:69:09:BC:2D:0F:3C:87:BD:73:ED:5A:F8:14:97:2D:91:33:7F
X509v3 Authority Key Identifier:
keyid:7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/4A0A2DC8958011EE91C9DF80C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.68.58.0/23
Signature Algorithm: sha256WithRSAEncryption
90:4e:68:34:95:1d:85:94:ad:6e:82:9c:72:b7:db:a8:24:d5:
1c:b9:d2:87:da:78:ab:b4:f4:c4:8c:a0:b9:de:66:84:56:e8:
1f:16:d0:45:c7:11:5b:88:29:ac:c0:24:be:61:02:86:d6:a9:
71:2e:3b:47:09:e9:17:b8:bf:9a:81:0b:18:6d:31:dc:cd:0e:
71:45:f6:b2:d7:1a:d1:c9:d4:a7:78:11:2c:db:ec:a1:1c:3b:
b6:0d:8b:f8:97:3a:1f:6d:97:34:4b:fb:92:06:50:57:0f:40:
85:1f:79:53:c6:18:98:61:a3:a9:82:b9:0e:c6:4a:17:59:d0:
54:66:16:42:f7:ed:bd:1a:22:c5:09:72:a9:65:0d:3b:d2:2a:
23:71:e4:c0:fd:53:a4:92:03:47:ac:32:26:33:39:81:bf:f7:
e7:f7:e2:85:77:de:f1:dc:70:4b:01:ea:f7:de:58:8a:8b:ae:
b5:7c:d6:91:4c:94:4d:ce:3f:27:aa:cf:b5:6e:3d:fa:fe:2f:
f9:83:ec:7f:05:58:2b:08:b6:22:c4:c3:db:57:d0:10:54:6c:
19:9c:40:7a:42:fd:ff:0a:f2:27:0d:a9:f1:5d:90:44:38:08:
b8:2d:7d:6c:01:75:0d:84:c8:6b:38:e5:c1:30:46:9a:88:33:
65:88:1e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:54 2026 by rpki-client