
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/4DAFC184ADC011ED897A4050C4F9AE02.roa
File: 4DAFC184ADC011ED897A4050C4F9AE02.roa (raw, json)
Hash identifier: v2saofmL0m7GfqQUIwDfIhLfQiWIxApSuK3jNuC63SE=
Subject key identifier: 7C:26:FC:E6:04:2B:B5:FC:A1:9F:4C:F6:4E:11:23:4E:6B:9A:01:F0
Certificate issuer: /CN=A913A7A6/serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519
Certificate serial: 0AA6
Authority key identifier: 9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/4DAFC184ADC011ED897A4050C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:00:44 +0000
ROA not before: Thu 30 Oct 2025 20:09:09 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 58877
IP address blocks: 137.166.0.0/16 maxlen: 17
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl
rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:51:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2726 (0xaa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A7A6, serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519
Validity
Not Before: Oct 30 20:09:09 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a4468b-07b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:cd:75:f8:61:a9:4f:0d:4a:6f:65:6e:44:
91:5e:27:aa:17:59:d7:dd:d8:78:f6:67:d6:ee:5d:
4f:b5:61:04:9b:f9:23:0b:73:88:f5:b2:b7:44:63:
ce:ad:9c:be:1d:46:75:c0:4c:a8:8f:51:f8:f1:63:
2a:6b:ea:5b:5d:93:af:f5:6f:b7:a6:aa:15:41:49:
fb:9c:11:a4:9d:3d:30:e0:7e:7c:cb:c2:50:1a:95:
f6:b8:69:7f:24:05:ba:bc:80:be:98:6b:eb:bc:d5:
f3:99:36:02:23:01:c6:24:d0:7e:9b:bb:36:4c:04:
a4:fc:ce:62:8a:a8:91:c3:8e:76:1a:f5:11:2c:ac:
4b:17:56:b5:c9:d2:f3:63:01:fd:56:12:21:7c:b3:
64:00:da:d0:be:b2:79:12:8f:df:15:06:97:80:ec:
c9:5e:ed:aa:a4:91:77:d7:90:c7:44:d2:98:d6:d6:
e8:20:28:d4:f4:fd:f6:7d:06:ab:a7:f3:95:c7:77:
0b:d4:a7:d7:0b:a9:71:8c:08:44:1d:e6:cd:d9:f6:
da:d4:b0:6e:6a:79:36:c6:96:ab:83:df:1a:21:bf:
c0:8e:58:21:93:15:d9:5f:16:ab:62:3d:8d:e1:b1:
21:93:8a:89:9a:2b:5f:84:e4:a1:c3:49:5c:40:d0:
fe:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:26:FC:E6:04:2B:B5:FC:A1:9F:4C:F6:4E:11:23:4E:6B:9A:01:F0
X509v3 Authority Key Identifier:
keyid:9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/4DAFC184ADC011ED897A4050C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
137.166.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:75:64:2f:72:25:a9:17:c5:fa:6e:67:ee:8f:ca:98:c2:7e:
58:e4:96:d5:42:4d:0c:0e:e8:e7:52:f8:b0:82:46:76:bb:66:
62:96:f3:aa:26:c6:cc:2b:85:ab:ec:cc:c8:68:02:dc:10:1f:
e5:4b:fb:b1:17:12:71:7a:48:ca:75:f7:15:b3:d4:44:8d:a9:
af:3b:f3:62:92:82:53:cb:3d:d1:72:7a:1c:a1:d9:78:31:e8:
6b:a2:e6:91:4b:8c:44:b2:3e:68:b0:08:e0:99:c7:a9:be:79:
f1:07:eb:c7:b0:a4:fc:6c:cc:50:83:0b:d0:13:5a:e1:52:bd:
af:b7:1b:d6:0e:91:71:4a:40:5d:66:67:f5:60:07:70:9c:f1:
05:39:aa:4f:eb:e2:17:94:f2:10:26:04:fc:d1:77:96:56:0d:
c7:b9:a1:63:82:9f:bf:05:0f:35:a8:50:22:82:d7:2a:0b:9a:
e7:53:d6:39:0b:19:b7:26:22:74:c6:32:c2:da:cd:09:07:83:
17:41:3b:77:ed:68:b8:a0:11:c8:fd:19:96:0b:8c:d6:50:c2:
1a:1a:d5:33:ff:00:94:41:f2:56:63:cc:d9:6e:eb:e5:43:4d:
75:4d:d1:c4:c8:e6:31:ef:eb:a2:96:e7:c5:f5:4f:42:0f:77:
c3:3e:f1:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:09:02 2026 by rpki-client