
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/476C306204A711EEA68A0D2FC4F9AE02.roa
File: 476C306204A711EEA68A0D2FC4F9AE02.roa (raw, json)
Hash identifier: ZdlJs5j59OTdtMykqgkEo4kSJVyRSWRBfHHhWT67xiU=
Subject key identifier: 69:0D:27:BE:14:F7:E3:61:8C:E2:E7:51:00:FC:D4:0F:F5:A5:04:C2
Certificate issuer: /CN=A912AF79/serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7
Certificate serial: 025A
Authority key identifier: 6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/476C306204A711EEA68A0D2FC4F9AE02.roa
Signing time: Sat 01 Aug 2026 03:52:57 +0000
ROA not before: Sat 01 Aug 2026 03:52:57 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 151329
IP address blocks: 103.170.98.0/24 maxlen: 24
103.170.99.0/24 maxlen: 24
2001:df2:7440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl
rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 02:21:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 602 (0x25a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AF79, serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7
Validity
Not Before: Aug 1 03:52:57 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a6d6d99-ae54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9c:6e:96:c6:9b:e9:52:0c:f6:46:04:83:51:
3b:dc:f2:26:54:62:2a:cb:9e:a0:7e:84:59:f6:95:
55:04:2c:39:f7:11:20:6d:7a:cf:28:33:23:a5:22:
e0:82:63:06:58:31:06:16:d3:fd:4b:67:58:47:9d:
84:f3:5f:1a:1a:fd:95:d5:b2:20:c2:85:d6:7f:5e:
9d:0f:a6:a5:b5:67:6e:1b:01:13:58:48:a5:65:da:
60:52:75:73:78:c9:d8:92:c5:f0:39:40:e7:5d:36:
60:65:0e:e5:17:fe:c0:26:17:01:8b:2c:1e:0c:a7:
78:6b:ee:d8:c7:cf:40:87:f7:8f:bb:ac:3a:4c:d8:
b5:35:b5:bf:7a:eb:52:de:7a:09:2b:f3:56:6c:74:
8c:5c:70:69:c0:f7:7e:aa:d2:b9:4a:1f:01:7e:f1:
57:7a:ff:21:d8:5d:c7:59:cc:38:e4:37:d0:8d:08:
34:e2:2f:2e:7a:18:fb:b5:16:b9:34:ca:b7:d7:5c:
e3:44:c7:61:95:47:56:ca:6e:9c:8d:14:5b:4d:04:
e3:40:06:7d:22:89:38:32:b2:04:7e:69:b8:e3:8b:
df:4f:7b:85:e0:43:12:9a:2a:9f:2e:15:c8:5c:05:
fc:5b:4b:43:25:60:6b:ac:dd:fc:8b:da:3c:98:71:
67:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0D:27:BE:14:F7:E3:61:8C:E2:E7:51:00:FC:D4:0F:F5:A5:04:C2
X509v3 Authority Key Identifier:
keyid:6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/476C306204A711EEA68A0D2FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.170.98.0/23
IPv6:
2001:df2:7440::/48
Signature Algorithm: sha256WithRSAEncryption
64:26:78:72:11:85:95:73:76:e5:60:9e:21:71:d8:02:53:a3:
aa:c0:2a:e4:61:16:f3:e9:60:49:7e:fc:86:be:2a:27:25:4b:
6f:1e:19:ed:10:bc:e9:aa:e6:13:42:57:9f:d8:5d:0e:28:76:
43:0d:d2:64:21:38:d5:af:52:31:0a:d9:ab:1f:ed:35:c2:64:
27:83:9c:ee:03:b8:dd:ec:f8:d8:0f:c5:f6:e9:c4:72:30:91:
30:a5:3f:b3:17:55:23:19:ab:de:e0:58:01:c3:79:72:94:ca:
eb:f2:5a:4c:63:1a:46:37:23:c9:74:3d:4d:20:fc:2d:79:dc:
61:1f:a0:f9:ef:24:b7:fa:22:15:56:fc:30:1f:c3:c3:66:b3:
5a:76:be:07:36:bf:fc:f4:a8:b5:b0:cb:01:a6:75:3b:79:48:
a7:b3:a9:1a:6c:22:60:9c:f3:b2:d7:3e:6f:ac:6f:98:d5:c5:
bd:aa:99:5d:fa:c4:12:99:e4:41:a3:25:1b:41:39:1d:c9:b4:
7e:c7:4b:ff:d3:5a:92:de:be:57:18:ba:d4:c2:6d:40:b3:c0:
75:4d:98:a6:61:22:18:f7:3d:40:46:17:6b:d0:bc:2a:f9:29:
1f:12:d4:1b:4a:0b:7c:f1:b1:aa:14:99:0b:a6:87:65:33:4d:
b8:83:fe:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:16:27 2026 by rpki-client