
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/0463FF50526C11EC80A31615C4F9AE02.roa
File: 0463FF50526C11EC80A31615C4F9AE02.roa (raw, json)
Hash identifier: B7D8niZNdbXyarYIfRZsjMzyjFHUhkkg3AnRqhXzd3I=
Subject key identifier: 70:98:24:56:12:47:D5:7D:9D:7A:42:8F:39:2F:6D:71:43:34:80:E0
Certificate issuer: /CN=A9147DCA/serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9
Certificate serial: 070E
Authority key identifier: 2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/0463FF50526C11EC80A31615C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:13:13 +0000
ROA not before: Wed 02 Jul 2025 23:02:27 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 36351
IP address blocks: 43.245.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl
rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1806 (0x70e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147DCA, serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9
Validity
Not Before: Jul 2 23:02:27 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a44979-f619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:05:d6:ee:28:39:99:5b:e9:ca:76:be:28:19:
b5:71:c0:f6:a0:be:d9:5f:99:27:12:b0:b9:8e:40:
e2:4d:26:f9:14:8b:ab:78:3b:ad:2e:57:36:18:2e:
ef:3e:d9:50:f6:ce:c6:d5:ae:3e:3c:04:b7:ca:b5:
e3:95:a5:d7:bf:bf:19:2f:07:8d:00:0f:e8:b1:40:
06:09:04:38:a6:6b:ca:f9:86:af:67:54:7c:2a:54:
23:4f:fb:d8:ec:c8:5a:5f:6d:26:c5:a2:88:e9:97:
f6:41:83:87:13:07:c1:ca:40:36:79:56:ad:35:62:
7a:3d:6e:f6:ba:bf:f6:52:5d:9f:49:63:18:65:a1:
50:50:cf:2e:68:bf:90:44:92:05:6a:cf:9a:5e:d3:
f8:4c:0d:65:27:e4:23:bf:f5:55:19:be:7c:85:d6:
92:5f:db:7a:fa:4a:bc:7f:86:2a:88:f4:54:04:6a:
43:65:21:cd:21:c5:4a:f6:cc:e3:d2:d9:4a:b5:c1:
fd:ef:04:05:9f:c1:36:0a:97:9f:51:31:13:58:72:
a1:a1:33:89:82:80:e3:c7:e8:11:b0:8a:4c:da:bf:
db:2d:4b:a1:9e:4c:64:02:4b:09:c1:76:56:71:b4:
b4:20:bc:f6:3c:a4:a3:7f:6c:d0:c4:bf:cf:30:48:
0c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:98:24:56:12:47:D5:7D:9D:7A:42:8F:39:2F:6D:71:43:34:80:E0
X509v3 Authority Key Identifier:
keyid:2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/0463FF50526C11EC80A31615C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.245.168.0/24
Signature Algorithm: sha256WithRSAEncryption
41:6c:63:76:f8:68:0f:66:bc:ad:f1:48:c3:4c:31:c9:bb:1c:
51:11:04:d4:a7:ef:fa:3d:8f:c3:ce:24:b5:2b:94:03:cc:93:
b4:55:24:72:fa:b6:d8:19:fc:03:ee:a7:9a:a1:2f:ed:54:13:
38:9f:b8:2c:39:1c:02:75:76:61:21:8a:fa:9f:14:34:e1:66:
b1:80:d4:bd:f6:e7:70:f4:20:f1:be:f7:6d:5f:3b:6e:43:a5:
ae:4b:51:e3:e6:81:b7:58:88:ce:27:87:2f:f0:ee:9c:d1:cc:
82:6b:7a:ed:79:8e:52:00:60:a8:ae:b5:e4:56:43:68:c7:b8:
7d:10:59:9a:c1:08:0a:9a:a6:ff:4e:93:57:ed:a4:cb:9f:97:
28:e7:0f:1c:3f:e1:71:73:ec:70:38:ca:91:aa:f4:9a:e7:4e:
ca:8f:09:a2:34:e1:3e:21:49:f1:c9:c5:04:ef:5b:eb:a8:b8:
60:29:f8:de:6b:c8:ec:4b:ea:c4:2f:c1:65:07:b2:9f:5f:76:
1a:26:be:73:40:e0:fc:9e:7d:57:42:7c:71:ce:8f:43:4b:a1:
e9:94:d3:9a:20:90:9b:d7:9a:f2:d4:86:b8:41:2a:7c:9b:a8:
4a:70:ab:6f:31:d6:de:de:28:8d:58:07:74:6a:72:8d:62:6c:
4d:af:34:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:13:35 2026 by rpki-client