
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/4495F306772E11EEB7DE544FC4F9AE02.roa
File: 4495F306772E11EEB7DE544FC4F9AE02.roa (raw, json)
Hash identifier: QMRLPWLbyJt3Y3sf3W4kTGlpvnSbMzh/1dBw79mmT2Y=
Subject key identifier: FC:1C:D4:61:2D:0A:A8:F4:C5:2C:78:77:68:F0:CF:F1:78:5B:19:77
Certificate issuer: /CN=A9148B17/serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C
Certificate serial: 01D4
Authority key identifier: 8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/4495F306772E11EEB7DE544FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:22:44 +0000
ROA not before: Sat 29 Nov 2025 01:59:20 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 151957
IP address blocks: 202.61.82.0/24 maxlen: 24
202.61.83.0/24 maxlen: 24
2401:4460::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl
rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:51:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148B17, serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C
Validity
Not Before: Nov 29 01:59:20 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a41374-cbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8b:c5:50:45:01:80:ca:bf:93:07:8f:1b:5d:
0d:88:a2:01:f7:ff:15:3b:ca:08:46:1c:45:28:d2:
5b:5c:21:a8:3a:bd:59:a4:f0:93:97:51:71:7f:76:
74:91:f8:1d:71:47:a5:6a:64:f9:da:14:24:5c:7f:
67:27:95:26:9a:38:f8:c9:58:e1:16:3a:b2:b9:a8:
e4:e7:bb:08:73:68:85:19:6c:a4:ad:fd:48:d4:07:
69:e0:ef:64:1d:c4:c5:12:48:21:9b:06:63:e0:68:
ce:cf:3c:29:c1:d0:70:5c:65:94:bc:31:e0:fc:17:
a8:9b:05:a5:e0:d6:a4:14:ff:a1:5d:81:b2:f9:67:
80:8b:52:e7:a7:6d:4d:5f:67:e8:c6:1c:55:e9:c7:
a3:e2:f6:84:4b:54:7b:0f:90:46:97:81:cb:fe:08:
3f:85:9a:61:5a:fa:c1:70:7b:07:bd:12:4a:4a:23:
96:49:cf:1d:30:81:b6:85:47:a0:c6:86:99:48:48:
30:53:e5:2f:de:73:14:88:46:e9:a4:2d:88:02:1f:
66:e3:22:eb:c2:0a:55:11:27:38:56:f8:4d:05:f5:
fa:4d:9f:0f:60:76:46:37:01:f6:79:5b:4e:b2:b2:
df:9d:df:db:f1:93:32:fb:29:b2:0c:52:04:7b:b9:
d7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1C:D4:61:2D:0A:A8:F4:C5:2C:78:77:68:F0:CF:F1:78:5B:19:77
X509v3 Authority Key Identifier:
keyid:8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/4495F306772E11EEB7DE544FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.61.82.0/23
IPv6:
2401:4460::/32
Signature Algorithm: sha256WithRSAEncryption
1f:ee:d4:d7:79:d4:a6:a1:44:16:1c:f4:65:59:fb:26:5b:51:
49:a0:32:c2:13:ac:14:da:9f:ee:8e:c1:ce:9f:f0:3e:af:84:
b8:66:84:83:b0:91:55:22:20:44:71:49:a0:1d:79:53:a4:89:
ca:d4:74:c8:c5:36:6a:5c:74:c3:bc:8c:c2:b1:e1:18:9c:51:
ad:87:aa:b4:52:a4:2a:08:4f:dd:8d:59:33:6c:34:66:1d:45:
41:d3:3f:95:8e:96:da:99:d5:66:1e:fb:98:e1:da:c7:09:85:
2c:dd:32:02:51:d2:90:a6:91:60:54:d5:56:18:35:81:56:40:
d6:45:35:5c:a4:e2:76:80:98:97:54:8e:7a:eb:f5:8a:50:f4:
63:0c:04:75:30:1d:db:ab:d9:08:b1:16:10:00:af:17:d8:a6:
ce:23:15:bd:c1:d4:f0:54:9d:df:53:27:29:d5:ad:32:8f:2e:
81:fc:88:a5:54:65:d3:67:b6:65:44:6f:a9:c5:9c:68:ba:1a:
93:ef:65:61:ef:5c:0a:80:0d:d9:b9:27:e3:14:7c:47:d4:7c:
8b:d7:92:e2:5c:eb:99:26:47:bd:fb:9b:78:9b:b6:7d:89:60:
5e:e2:fb:b1:a3:38:3e:13:d0:a0:1d:fa:2c:6e:fc:29:bf:3f:
74:70:22:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:33 2026 by rpki-client