
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/4E3439122B4111F19D37C4AC90833773.roa
File: 4E3439122B4111F19D37C4AC90833773.roa (raw, json)
Hash identifier: QQvgNRDiPl6A65a2LWGiXcir6fcA9w1PwW/VYZpOkXQ=
Subject key identifier: 5A:8B:91:E5:79:B0:2F:5D:41:C5:3D:62:62:80:86:B1:8F:02:AE:D9
Certificate issuer: /CN=A9173204/serialNumber=0ADDC504FB7430142BB6151472AD17FCF172315A
Certificate serial: 02
Authority key identifier: 0A:DD:C5:04:FB:74:30:14:2B:B6:15:14:72:AD:17:FC:F1:72:31:5A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ct3FBPt0MBQrthUUcq0X_PFyMVo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/4E3439122B4111F19D37C4AC90833773.roa
Signing time: Sun 29 Mar 2026 07:31:31 +0000
ROA not before: Sun 29 Mar 2026 07:31:31 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 154429
IP address blocks: 144.79.140.0/23 maxlen: 23
144.79.140.0/24 maxlen: 24
144.79.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.crl
rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ct3FBPt0MBQrthUUcq0X_PFyMVo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173204, serialNumber=0ADDC504FB7430142BB6151472AD17FCF172315A
Validity
Not Before: Mar 29 07:31:31 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69c8d553-76c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:72:3c:9e:15:44:c7:fa:2c:9a:46:87:27:
df:17:1b:c0:b0:46:8f:57:e6:bb:f9:5a:6b:a4:f7:
06:03:af:9f:ce:6c:8c:c1:b5:fe:7c:f8:aa:e1:4a:
d7:9f:42:6d:1f:f2:e2:a7:91:b9:24:07:2f:ae:4d:
04:3c:65:06:2a:b2:57:61:29:f8:6c:f6:45:65:c9:
19:8c:4f:b2:41:0e:04:8d:d9:bc:60:f7:cc:4c:8b:
ae:3c:8c:06:f4:0e:b9:e1:5c:38:15:23:5d:2c:0c:
7f:89:21:56:99:05:2f:8a:f4:63:91:5d:69:b7:b9:
5a:65:6e:55:70:46:f4:9a:c1:a8:8c:fc:08:b1:5b:
91:88:f7:79:07:fc:cf:35:df:69:55:9e:45:a8:cb:
af:46:16:c0:2b:37:4a:46:6c:ac:76:8c:b9:fc:63:
2b:76:ce:ee:08:00:10:f9:3e:1c:b5:b2:f4:23:a2:
0b:d2:44:d5:d8:c3:47:23:55:ea:3b:46:18:1b:b5:
c1:88:1d:8a:6c:77:4d:52:cf:ce:c0:37:2c:13:7f:
f7:d2:39:26:ff:4b:69:19:9e:49:05:fe:39:da:62:
f9:00:63:d6:8e:7f:4c:d1:5e:14:b5:a9:91:31:d1:
b4:c0:af:57:c2:ed:5d:3a:7f:53:d3:8b:02:d6:db:
2d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8B:91:E5:79:B0:2F:5D:41:C5:3D:62:62:80:86:B1:8F:02:AE:D9
X509v3 Authority Key Identifier:
keyid:0A:DD:C5:04:FB:74:30:14:2B:B6:15:14:72:AD:17:FC:F1:72:31:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ct3FBPt0MBQrthUUcq0X_PFyMVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/4E3439122B4111F19D37C4AC90833773.roa
sbgp-ipAddrBlock: critical
IPv4:
144.79.140.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:e0:34:55:e3:e0:ef:b6:94:b4:f6:41:b0:22:e2:83:e4:a0:
2d:6f:30:93:12:65:da:e6:c7:c1:f2:26:7b:20:d9:82:3b:47:
5d:ff:da:33:11:c8:0f:8b:d7:84:cd:e5:21:3f:89:61:87:fa:
1d:81:7b:66:af:43:78:2d:47:a0:2d:36:a8:e8:e0:14:fe:25:
52:fd:b7:b3:cf:7b:f5:f3:d1:95:da:86:d7:90:04:e1:fa:34:
b2:7f:7d:68:1f:81:83:8a:4b:b9:c1:a6:7b:b0:00:8a:74:ab:
b4:3d:ec:e3:4c:d8:74:6f:42:89:1d:e4:3a:f3:bf:26:1e:6a:
bb:27:7f:ea:e1:5a:5a:54:94:cc:9c:e3:b0:98:b2:ea:a6:d8:
ae:66:22:3f:e7:60:1a:63:a7:f1:cb:e0:9f:23:04:31:be:ab:
95:7b:6d:9f:14:1a:bf:12:31:bf:c5:cb:c3:77:1a:7b:15:12:
e1:a5:79:0a:7e:94:05:02:05:f6:1d:21:3c:01:44:2b:80:1d:
66:7c:21:65:66:9d:a2:48:89:47:05:a6:eb:ba:b6:19:eb:62:
dc:fa:88:b3:4c:bc:1d:3b:a8:01:30:84:e9:20:a4:aa:be:6d:
6f:31:a2:b9:d1:5a:85:6e:36:0c:17:07:36:7d:ca:40:a3:6f:
b1:a3:e9:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:44:56 2026 by rpki-client