
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/4EB8310C43EE11F19AC895DFAD833773.roa
File: 4EB8310C43EE11F19AC895DFAD833773.roa (raw, json)
Hash identifier: ywh+EspzzTB1z73ivawXczceUdTNF+vMHbVnAWHY+X4=
Subject key identifier: 6C:FD:66:5E:5D:FF:50:E4:44:D2:31:9C:EB:2D:69:6B:FC:93:FA:31
Certificate issuer: /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Certificate serial: 0A2D
Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/4EB8310C43EE11F19AC895DFAD833773.roa
Signing time: Thu 02 Jul 2026 20:21:19 +0000
ROA not before: Thu 02 Jul 2026 20:21:19 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 38818
IP address blocks: 49.0.128.0/19 maxlen: 19
49.0.168.0/21 maxlen: 21
203.34.37.0/24 maxlen: 24
203.174.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl
rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:14:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2605 (0xa2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Validity
Not Before: Jul 2 20:21:19 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a46c83f-15f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d2:c2:c4:3d:3f:1f:04:a0:70:cf:6a:b4:b2:
db:29:86:71:ae:26:70:aa:21:de:c7:66:d8:93:48:
14:16:8a:c4:7a:32:c3:ed:44:db:b6:26:2f:57:dd:
1c:db:59:26:f1:26:3e:fc:6a:7b:0b:40:d2:02:fe:
53:b7:13:85:54:16:f4:22:d0:e6:b4:3b:b9:c7:0d:
b0:bf:5d:19:bd:50:f2:23:87:71:fd:35:98:83:97:
84:4f:3e:6d:7d:a6:08:e3:9f:c2:44:ed:23:c6:e4:
93:3c:75:e8:d1:15:8e:ea:93:c3:f0:70:2c:8f:01:
0b:c5:80:99:44:c7:57:82:57:80:54:ad:81:c8:cf:
c1:f9:5d:61:82:2d:4a:f1:4c:94:87:da:ea:6f:62:
07:02:44:9b:cf:db:05:db:ad:94:aa:11:5f:02:5e:
55:f6:17:6b:c6:c4:ca:2c:77:47:a9:10:64:5d:c2:
dc:49:4f:9a:10:50:8d:b3:d5:af:2d:07:37:82:21:
d2:ad:85:d5:bd:de:5f:ea:3a:51:71:e4:f0:d9:42:
06:1a:d2:9b:ec:e9:3b:72:7f:3e:64:23:34:5f:b5:
de:6b:95:42:34:b9:22:10:53:95:67:a3:99:be:d4:
ac:5c:6c:ef:30:3c:c0:28:92:73:f4:1b:f5:ed:6f:
93:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FD:66:5E:5D:FF:50:E4:44:D2:31:9C:EB:2D:69:6B:FC:93:FA:31
X509v3 Authority Key Identifier:
keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/4EB8310C43EE11F19AC895DFAD833773.roa
sbgp-ipAddrBlock: critical
IPv4:
49.0.128.0/19
49.0.168.0/21
203.34.37.0/24
203.174.26.0/24
Signature Algorithm: sha256WithRSAEncryption
85:8e:d0:15:fb:b9:df:f3:32:cb:da:15:5c:2c:97:b8:c3:fa:
14:f5:d1:f1:15:05:2d:af:5d:25:1d:4e:c0:3f:dc:55:6f:75:
0f:9f:05:8c:cb:42:45:aa:05:68:d7:1f:b5:9e:5c:25:79:d6:
8c:25:c3:d5:ec:22:13:b6:a7:1c:43:d6:54:84:39:78:dd:87:
83:d1:59:7e:91:f5:b3:4d:aa:03:ce:d2:3c:b5:ab:99:82:46:
dd:93:f4:c4:ae:2e:bc:4b:2c:f5:b1:4a:ee:e3:8c:5e:70:c3:
de:1e:3a:25:de:47:b0:f8:e6:34:af:00:76:51:a7:bb:63:be:
de:8f:fe:17:a7:9d:2a:1a:62:98:8a:a2:22:36:9c:0a:37:14:
44:14:f2:50:a4:99:4d:2a:4a:2e:4a:9c:1c:97:79:56:f1:ff:
95:93:31:82:14:77:aa:d5:ad:30:38:e9:62:c3:f3:64:1d:76:
aa:6d:ef:d6:a0:6b:de:96:26:3a:74:2d:25:a2:15:d2:2d:65:
39:3f:00:0c:11:12:88:b2:ef:a6:35:dc:b2:c9:62:2a:9d:b3:
44:ae:50:9b:a3:8d:93:bb:75:2b:2c:4f:c1:59:25:d1:2d:a6:
ef:72:9c:ca:77:59:b2:84:57:fe:b4:8f:b5:2e:12:5a:82:a2:
c6:66:9a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:29:44 2026 by rpki-client