
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/4D470362C55811EB981FA987C4F9AE02.roa
File: 4D470362C55811EB981FA987C4F9AE02.roa (raw, json)
Hash identifier: wQ1ccwGJlTNocRYfMJoEjZ0WE0y8wwNJkSvp/kcCKyE=
Subject key identifier: 05:88:4F:AB:82:16:E9:9D:1F:A4:A9:5B:A5:4C:03:90:53:89:5B:56
Certificate issuer: /CN=A9148F32/serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78
Certificate serial: 0681
Authority key identifier: FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/4D470362C55811EB981FA987C4F9AE02.roa
Signing time: Tue 02 Jun 2026 23:27:06 +0000
ROA not before: Tue 02 Jun 2026 23:27:06 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 140072
IP address blocks: 103.166.172.0/23 maxlen: 24
2407:59c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl
rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1665 (0x681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148F32, serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78
Validity
Not Before: Jun 2 23:27:06 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a1f66c9-92e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:91:1f:d3:d4:63:fb:91:f9:e7:3b:2a:3a:
15:96:a9:00:c6:25:9e:6d:e0:ad:f5:b3:fc:a8:51:
af:be:b3:ba:88:34:e4:82:e1:b0:b5:50:72:99:0e:
fd:a7:da:36:00:54:62:57:4a:ff:74:5e:17:61:13:
7c:8b:1a:e2:87:df:56:54:c6:81:fa:e2:0d:31:11:
39:c3:d3:f9:2c:3d:28:c7:5f:b3:85:4f:5b:b2:4f:
7f:9f:91:3b:df:ce:40:3e:1b:5b:03:4e:e1:15:8e:
be:09:65:af:2c:15:49:90:f9:68:10:d3:29:b5:1f:
4a:32:20:8e:28:7d:23:d3:7b:d4:a0:29:65:bb:ca:
60:db:95:50:24:f5:91:79:c9:ef:0e:11:57:13:0f:
73:9b:42:ef:5c:72:25:87:64:83:df:9d:27:67:92:
2d:86:f9:23:d4:92:03:b0:93:83:3b:0b:5a:2b:fe:
7a:91:72:dc:7b:8a:1f:34:ac:3a:94:ef:e4:cb:4f:
ec:2d:48:ac:22:3b:a9:2f:72:19:9d:37:65:62:39:
f1:60:08:b6:a8:e6:1f:60:d9:cf:7b:4c:e9:46:04:
e7:e0:54:7c:06:60:2f:da:54:8f:b1:8d:e0:5f:24:
14:4a:67:88:9e:7f:58:ce:77:d9:5d:29:89:b3:b0:
6c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:88:4F:AB:82:16:E9:9D:1F:A4:A9:5B:A5:4C:03:90:53:89:5B:56
X509v3 Authority Key Identifier:
keyid:FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/4D470362C55811EB981FA987C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.166.172.0/23
IPv6:
2407:59c0::/32
Signature Algorithm: sha256WithRSAEncryption
c3:25:8f:7e:ae:d6:f2:8e:8a:97:de:fd:86:cc:19:4c:eb:df:
50:69:db:78:79:aa:29:d4:ea:27:1c:65:35:b6:77:fa:aa:39:
b7:27:b0:57:a3:bd:2b:70:c8:26:34:96:4a:cc:ad:6f:60:e0:
06:66:1b:21:59:1f:80:59:d2:96:14:a9:65:2b:23:09:7f:63:
0c:9b:1b:38:35:4a:84:8f:f1:e5:1a:c7:34:f8:15:9c:af:e1:
65:9c:02:1f:40:32:b4:0b:20:84:ef:7c:0b:e2:cc:dd:79:bb:
44:79:91:34:39:c5:af:46:d0:ea:7e:2a:46:d8:4a:16:9d:2d:
5f:5c:a0:4d:2d:34:d6:91:48:07:6b:ff:b8:70:ab:2d:ec:50:
32:4b:ad:56:a0:a0:43:7f:d9:0d:08:54:88:7e:40:63:ae:40:
0c:f1:8a:65:0e:4d:d4:af:86:aa:5b:06:e3:8e:5d:b1:d4:64:
74:2f:bf:94:30:fd:81:18:f7:e6:88:13:13:e2:2f:4e:67:83:
d1:8a:13:a3:0d:f8:cb:a7:e8:bf:9e:4b:30:b9:3f:91:b5:c1:
4c:c8:7f:7a:06:fe:b7:e2:9b:55:48:78:0a:ca:4d:c4:6c:7b:
3f:33:8a:fa:0c:86:cb:fe:3b:e6:1a:53:1a:df:b9:a0:00:9d:
51:b9:06:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:45:43 2026 by rpki-client