
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/B4D8E692267111ECA0546981C4F9AE02.roa
File: B4D8E692267111ECA0546981C4F9AE02.roa (raw, json)
Hash identifier: CMK57h7d3VJ8Y5Z6L2ancbIus6PT121u0oU6HX7o5tQ=
Subject key identifier: 91:B8:31:72:D7:1D:76:5D:0A:AA:D9:FF:C8:6E:64:66:55:D5:9C:69
Certificate issuer: /CN=A919E3FB/serialNumber=5EB098EF4D5655CC66B6AF81C3CDE4062D802F3B
Certificate serial: 055B
Authority key identifier: 5E:B0:98:EF:4D:56:55:CC:66:B6:AF:81:C3:CD:E4:06:2D:80:2F:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/B4D8E692267111ECA0546981C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:43:00 +0000
ROA not before: Mon 06 Oct 2025 23:55:50 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 147180
IP address blocks: 103.173.174.0/23 maxlen: 24
2001:df7:a280::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.crl
rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1371 (0x55b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E3FB, serialNumber=5EB098EF4D5655CC66B6AF81C3CDE4062D802F3B
Validity
Not Before: Oct 6 23:55:50 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a43454-024a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:f8:71:c1:23:10:48:99:5c:bd:a1:90:c4:
b6:22:3f:60:b1:56:db:08:b7:b9:45:cf:d3:bc:6d:
62:d9:aa:2f:e6:0d:64:be:bf:fd:e2:3b:94:7f:97:
c0:40:4f:9a:11:d0:e7:59:ea:2a:c0:f0:1a:a1:eb:
56:72:8e:75:2e:db:ad:8e:09:a3:0b:3e:7c:2b:98:
0d:70:e3:98:37:dd:61:75:59:74:0c:76:1a:71:f9:
c9:0e:65:2d:33:35:8b:f3:28:20:e2:fb:ab:83:56:
cc:af:c5:6e:2c:47:e2:08:6d:47:61:17:6b:2c:4e:
63:03:d2:37:a5:33:27:c9:51:aa:cc:15:70:75:f9:
7d:03:36:92:4b:9b:83:15:ea:00:08:fc:c3:6d:cb:
a6:ca:77:32:2c:72:27:b0:9a:7a:05:2f:0c:e7:4f:
70:4b:a7:19:c1:b8:4b:0f:9e:d7:a1:66:3a:a4:2e:
3c:2d:48:8f:3d:12:12:a0:bb:ce:d9:95:12:b4:6f:
be:c1:74:88:6b:66:59:83:5c:25:b5:85:78:6b:6c:
3e:70:85:33:b7:69:cc:ab:81:de:ac:19:bd:e3:bd:
ef:fe:d3:79:24:e5:58:23:8d:11:83:d5:8a:10:ea:
68:58:5a:1b:7e:25:5e:8c:f4:5d:c0:ec:ce:9c:a8:
e4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B8:31:72:D7:1D:76:5D:0A:AA:D9:FF:C8:6E:64:66:55:D5:9C:69
X509v3 Authority Key Identifier:
keyid:5E:B0:98:EF:4D:56:55:CC:66:B6:AF:81:C3:CD:E4:06:2D:80:2F:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/B4D8E692267111ECA0546981C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.173.174.0/23
IPv6:
2001:df7:a280::/48
Signature Algorithm: sha256WithRSAEncryption
56:3f:c1:06:6a:cb:ed:ad:4a:6d:93:a3:f7:47:c9:70:f8:61:
1f:14:3b:fd:c3:e3:75:76:05:45:da:c3:97:be:c0:d6:2a:3a:
e7:ca:ec:74:50:f3:26:49:07:6a:bb:4f:35:fe:0d:20:c1:82:
6b:48:31:81:54:0c:a3:49:fa:28:5a:51:16:c3:f5:1f:56:3f:
3f:ca:62:c9:fc:96:0a:20:35:a2:44:71:9f:8f:d4:5c:9c:6b:
17:e1:92:4b:5f:62:79:40:83:d6:c0:07:88:61:f0:a0:8f:a4:
bb:d8:b0:36:2f:b6:53:a9:ed:b2:67:a4:9a:26:ed:68:82:7d:
87:e7:be:1f:8f:c7:4a:65:92:79:93:fb:89:72:dc:4f:f2:1d:
90:3c:60:43:a1:04:0d:da:85:79:e8:08:55:28:15:b5:59:ea:
ad:4c:52:82:59:bb:27:7d:e7:40:33:85:0f:89:8b:02:52:7c:
46:d8:70:fb:93:16:e2:45:53:b3:d3:7a:64:69:ef:39:03:2f:
bd:40:e5:30:86:2a:ad:3a:8b:84:9c:4d:ab:f1:69:5b:38:11:
34:a1:48:6c:1c:75:08:d9:71:38:ce:70:f8:52:78:0b:a6:2d:
06:79:30:b3:4f:5e:c1:a4:58:07:da:43:eb:8b:fc:5a:18:31:
ed:13:0e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:17:09 2026 by rpki-client