
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/C4D5BB009B5411EFBBEFF384C4F9AE02.roa
File: C4D5BB009B5411EFBBEFF384C4F9AE02.roa (raw, json)
Hash identifier: 7qtTMrlJ+v5el8z+vHfrMcFg6dLXSpVi2HhEvJvP10s=
Subject key identifier: 3E:30:03:26:6F:9E:ED:8C:EB:2C:B3:6A:D3:48:55:D5:04:B2:D7:39
Certificate issuer: /CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Certificate serial: 0201
Authority key identifier: AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/C4D5BB009B5411EFBBEFF384C4F9AE02.roa
Signing time: Mon 02 Mar 2026 05:22:11 +0000
ROA not before: Wed 11 Jun 2025 03:42:06 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 24413
IP address blocks: 103.166.174.0/24 maxlen: 24
103.166.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl
rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:37:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513 (0x201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185673, serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Validity
Not Before: Jun 11 03:42:06 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a51e83-8d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a3:c8:76:4b:87:7d:0c:7e:21:de:aa:32:c1:
b2:ff:2a:c8:19:66:7d:b0:9a:09:54:86:91:7b:da:
17:1d:d3:97:65:27:65:ff:52:ab:81:46:21:a2:72:
4c:09:a8:40:c5:8a:41:e5:3b:cf:d7:68:80:45:aa:
6e:53:2d:5d:a9:8a:20:20:74:c6:49:b0:5d:e7:06:
69:9e:7f:a1:a2:a3:61:89:70:ee:88:1c:9f:34:07:
d9:ae:12:8e:50:96:d7:b9:a8:dd:bc:58:38:67:67:
1c:be:58:98:5f:87:16:36:c1:cc:c7:47:41:88:de:
fd:fb:4a:f7:49:37:06:f3:28:7c:fd:23:14:9c:24:
61:55:0a:0f:c3:67:a6:b2:75:57:97:cf:c4:c2:58:
17:d3:2d:34:ca:14:dc:60:09:9e:26:b4:d4:1a:77:
e0:f9:b1:eb:d9:3d:3a:c8:f5:96:fe:05:cd:d1:60:
a3:95:39:d6:d7:b1:38:23:40:b6:47:d6:4b:26:0e:
f9:e7:16:0a:5e:6d:81:5c:39:35:4b:94:dc:23:6c:
30:7f:4b:f3:db:db:43:6f:a6:69:cf:af:70:c9:be:
80:a4:57:3b:05:85:9d:61:39:00:db:77:c8:e5:e3:
fa:6b:77:f1:02:8e:fd:d9:63:5a:6a:73:0b:e6:50:
ff:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:30:03:26:6F:9E:ED:8C:EB:2C:B3:6A:D3:48:55:D5:04:B2:D7:39
X509v3 Authority Key Identifier:
keyid:AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/C4D5BB009B5411EFBBEFF384C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.166.174.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:0a:74:07:8b:75:47:9f:da:47:6a:1d:aa:f7:a9:16:90:cb:
ec:c0:09:9e:81:ac:dc:a3:08:3d:eb:f6:7f:38:12:9b:46:96:
c1:7f:d0:b7:fd:77:db:40:a0:da:ba:d3:f6:98:c1:80:8d:c1:
c7:dd:13:70:49:58:51:bb:70:2d:47:02:25:ec:4c:d2:f9:4f:
99:c1:14:ee:db:92:75:72:d0:5b:a1:3b:7d:b4:63:26:2b:06:
2e:8e:2c:3a:ea:23:64:24:cd:ca:cb:ea:44:6f:bb:70:e5:0a:
c5:03:e7:4d:80:30:58:08:7f:f5:47:f9:a8:61:70:d9:4e:51:
c1:e4:3b:c3:fa:69:d4:00:db:e2:d1:0a:c0:6d:6b:b3:92:8a:
6c:8b:75:c2:9c:6a:a4:61:5d:d9:82:fe:d8:58:ab:fe:0d:bc:
0c:79:a4:e6:9c:76:57:bd:f2:75:9f:a9:6a:80:6d:7a:50:1e:
2e:e9:59:2e:87:c1:dc:08:52:3d:d9:3b:a7:0b:4e:3a:c9:db:
69:c6:4e:70:a7:76:4f:d7:4d:7f:61:a5:0e:6a:58:12:5f:7a:
ab:f2:73:10:be:bc:c2:cc:e8:ca:ad:a7:bd:1b:d5:de:8e:e1:
ed:fa:64:53:1b:61:42:3e:06:6b:1a:28:2c:fc:11:ca:14:c8:
f4:f7:2d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:24:33 2026 by rpki-client