
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4CDDE8864EB511ED835E9C71C4F9AE02.roa
File: 4CDDE8864EB511ED835E9C71C4F9AE02.roa (raw, json)
Hash identifier: YakW0mO9rC58ksBrTcNuchI32vL7jFnTmkpkPkbVAPk=
Subject key identifier: E1:2B:DD:78:B8:2C:B0:79:EE:5F:3A:30:DF:F2:9F:A7:29:D7:94:2D
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3B7E
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4CDDE8864EB511ED835E9C71C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:29:09 +0000
ROA not before: Mon 14 Jul 2025 14:51:41 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 9464
IP address blocks: 171.102.164.0/23 maxlen: 24
2001:fb0:10b8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15230 (0x3b7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 14 14:51:41 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a49385-0fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:cf:b7:f9:7d:0e:b7:b1:2d:9b:6c:a5:05:
ea:69:5d:a4:54:38:0c:f0:b4:d2:4a:38:02:ca:7d:
f1:0f:e1:7e:bf:01:51:fa:9c:1e:f0:73:1a:8b:9e:
33:45:e4:ec:e8:64:ce:cb:b4:0f:61:f3:d6:d9:69:
9a:fc:9a:d6:d1:85:e7:8a:90:7c:02:09:80:59:5d:
86:39:57:fa:9f:9e:05:c6:77:db:d0:4f:73:31:a1:
be:eb:24:4f:59:71:83:48:59:ce:94:30:0e:89:a6:
6a:7e:ef:3c:dc:42:d3:95:65:e6:03:c6:33:13:cd:
56:bc:3a:76:58:ae:58:ec:a9:0f:67:ff:18:fc:cd:
04:c1:80:b0:07:14:24:7a:50:66:84:36:3d:f2:d9:
3c:c1:e9:a0:e8:96:24:fc:b0:f4:40:8d:86:3a:98:
f6:54:9b:fd:c8:64:91:e6:17:af:aa:94:87:1e:31:
27:ae:57:1c:ee:ce:e8:14:cc:eb:2e:ca:18:de:ec:
37:d8:2c:8e:85:90:3e:b7:b6:5d:ae:fe:81:46:94:
55:2e:13:ec:dc:ed:ec:19:bf:83:8e:63:c4:b0:20:
f8:1e:b0:f9:63:0b:f4:2d:d1:3d:4f:c4:cf:b6:8e:
0b:a6:33:5a:2a:4d:01:6d:42:5f:75:0c:db:6d:47:
aa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2B:DD:78:B8:2C:B0:79:EE:5F:3A:30:DF:F2:9F:A7:29:D7:94:2D
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4CDDE8864EB511ED835E9C71C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
171.102.164.0/23
IPv6:
2001:fb0:10b8::/48
Signature Algorithm: sha256WithRSAEncryption
0c:a2:a2:da:f5:55:7c:4d:16:f2:cd:dd:03:c7:75:7a:e2:db:
2e:ca:57:89:3e:38:b8:3d:7a:5a:14:b3:47:c4:04:11:16:81:
df:df:76:16:a6:6d:70:b7:77:b5:2b:25:53:e9:aa:7b:c5:ef:
b6:4f:94:1f:c5:a7:8f:01:52:56:ff:fb:01:da:42:cc:16:0a:
1f:06:4b:3d:10:91:ee:4a:b7:ba:ac:9b:ed:c8:3d:50:48:94:
7f:6f:d7:01:e7:ba:1a:c0:7f:a6:06:8d:65:b1:a6:c9:9f:be:
d2:3d:85:14:41:64:71:6c:7f:60:b4:f5:ab:a3:97:51:dc:60:
bf:85:fb:22:c8:13:b8:f3:9b:66:9c:d9:ba:a1:42:69:81:25:
a4:5f:8d:5a:d2:b4:d0:71:d4:69:83:15:5d:bb:c1:b4:c8:5f:
a4:bf:46:7c:23:9d:e0:45:14:71:d4:11:b6:2d:33:e3:ed:7a:
8a:d3:97:93:70:17:f4:b9:09:b5:87:b6:f3:3b:8d:c3:6d:cc:
a5:a7:2b:26:e6:62:79:72:12:bf:7e:da:c4:1e:b8:cb:a2:23:
56:bc:cc:e1:15:47:48:02:b6:1a:20:b5:be:74:d1:2a:c5:33:
5a:b8:a3:2d:a8:94:06:4e:75:75:c7:64:bc:58:3c:cd:0f:7a:
94:4e:00:c1
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICO34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MTQxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTM4NS0wZmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsBrPt/l9DrexLZtspQXqaV2kVDgM8LTSSjgCyn3xD+F+vwFR+pwe8HMai54z
ReTs6GTOy7QPYfPW2Wma/JrW0YXnipB8AgmAWV2GOVf6n54Fxnfb0E9zMaG+6yRP
WXGDSFnOlDAOiaZqfu883ELTlWXmA8YzE81WvDp2WK5Y7KkPZ/8Y/M0EwYCwBxQk
elBmhDY98tk8wemg6JYk/LD0QI2GOpj2VJv9yGSR5hevqpSHHjEnrlcc7s7oFMzr
LsoY3uw32CyOhZA+t7Zdrv6BRpRVLhPs3O3sGb+DjmPEsCD4HrD5Ywv0LdE9T8TP
to4LpjNaKk0BbUJfdQzbbUeqQQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFOEr3Xi4
LLB57l86MN/yn6cp15QtMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNENEREU4ODY0
RUI1MTFFRDgzNUU5QzcxQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBq2akMA8EAgACMAkDBwAgAQ+wELgwDQYJKoZIhvcNAQELBQADggEB
AAyiotr1VXxNFvLN3QPHdXri2y7KV4k+OLg9eloUs0fEBBEWgd/fdhambXC3d7Ur
JVPpqnvF77ZPlB/Fp48BUlb/+wHaQswWCh8GSz0Qke5Kt7qsm+3IPVBIlH9v1wHn
uhrAf6YGjWWxpsmfvtI9hRRBZHFsf2C09aujl1HcYL+F+yLIE7jzm2ac2bqhQmmB
JaRfjVrStNBx1GmDFV27wbTIX6S/RnwjneBFFHHUEbYtM+PteorTl5NwF/S5CbWH
tvM7jcNtzKWnKybmYnlyEr9+2sQeuMuiI1a8zOEVR0gCthogtb500SrFM1q4oy2o
lAZOdXXHZLxYPM0PepROAME=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:55 2026 by rpki-client