
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/40F782C8B4AA11EEB330C137C4F9AE02.roa
File: 40F782C8B4AA11EEB330C137C4F9AE02.roa (raw, json)
Hash identifier: FPpOxqoZqRG2kj3GgFDrDDyQvTzjYGIWWyU3Fd62Dok=
Subject key identifier: DD:1B:80:FD:35:23:3D:AD:6F:31:9C:E5:21:50:88:7D:3F:38:07:7E
Certificate issuer: /CN=A9148526/serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344
Certificate serial: 01F3
Authority key identifier: CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/40F782C8B4AA11EEB330C137C4F9AE02.roa
Signing time: Sat 29 Aug 2026 03:53:17 +0000
ROA not before: Sat 29 Aug 2026 03:53:17 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 131296
IP address blocks: 103.68.228.0/22 maxlen: 24
180.222.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl
rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:06:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499 (0x1f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148526, serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344
Validity
Not Before: Aug 29 03:53:17 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a9257ad-e7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e4:b3:03:e2:28:6f:9b:3d:fc:50:83:52:06:
4c:84:7d:79:18:c8:35:1b:6f:e2:7b:37:99:9d:c8:
f6:f6:26:a9:e9:15:96:65:93:03:70:f8:3c:ff:27:
c0:25:9f:71:e9:f1:09:34:1f:00:ca:c4:65:63:f7:
2c:3e:bf:03:c0:ef:74:bd:26:98:38:f8:62:7e:ac:
87:6d:34:48:e9:63:07:4b:83:21:76:85:f0:93:f2:
34:cc:23:d2:b1:07:d6:b4:74:14:70:0f:8f:03:91:
aa:87:dc:48:8c:33:36:e5:43:70:99:7b:0c:5b:f0:
fb:64:3a:7d:bc:51:5f:8d:51:ac:e4:69:48:2f:f2:
d4:eb:82:18:e2:5f:2f:06:57:4e:0d:b2:3e:06:f4:
41:b8:77:b3:9e:b4:e1:f5:b2:4c:e2:0f:ee:68:fe:
70:ad:cf:08:38:f6:18:5c:4b:8d:43:95:8f:83:e3:
60:09:f9:2e:cc:5e:96:80:42:08:e5:f6:4a:b1:5a:
18:6b:1b:b0:25:c8:5c:37:84:41:a1:68:eb:fe:22:
9d:a3:f0:44:19:ac:af:34:9a:01:62:41:f2:4a:5f:
0f:15:05:79:b6:74:78:de:4d:f0:00:24:6a:d9:16:
68:86:e0:4d:46:b6:86:ca:62:09:fe:61:f8:f4:21:
27:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1B:80:FD:35:23:3D:AD:6F:31:9C:E5:21:50:88:7D:3F:38:07:7E
X509v3 Authority Key Identifier:
keyid:CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/40F782C8B4AA11EEB330C137C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.68.228.0/22
180.222.124.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:53:94:8f:c6:9a:4f:4d:92:1d:04:76:45:51:c6:51:a5:d2:
a9:cd:29:81:18:32:f0:58:fc:8a:c2:1a:11:12:f0:11:b0:58:
cf:03:27:c3:21:c2:f0:62:0b:38:ee:fe:b7:29:1c:59:88:95:
8e:8f:23:5f:80:c9:72:58:ca:5f:a7:08:a4:de:98:53:2a:93:
6a:f8:cf:95:33:c8:be:4a:3b:20:23:2e:d8:fe:fa:58:b9:93:
d3:07:13:b4:54:ce:75:7d:6e:93:d4:a4:b2:b4:95:50:a5:30:
dd:a4:f7:c4:a4:a8:44:f8:b0:9e:59:ab:77:27:f1:fa:42:31:
55:c6:ba:86:61:b8:82:3e:9d:0e:9f:95:e5:e6:bb:5b:c4:1b:
57:b1:40:a0:61:82:23:0c:3c:1a:db:88:13:7f:3a:b2:c8:9e:
73:25:fa:8f:e8:f4:15:da:fc:36:d8:74:65:c7:ca:59:d8:38:
ba:bd:a4:b4:ef:ff:ef:a5:96:a4:c5:53:19:32:f2:7f:24:85:
57:29:78:c6:1c:b9:b5:47:7c:aa:d0:99:e0:65:86:f5:f5:78:
ea:08:c1:23:e2:14:da:07:dc:bf:7d:e2:8f:d0:29:47:cc:6a:
9b:cd:eb:82:ed:e6:55:00:f0:ec:bd:e7:2c:51:ed:3d:f7:44:
2b:2c:7b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:35:26 2026 by rpki-client