
$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/E481FBD6F2A611EF8F8C0C51C4F9AE02.roa
File: E481FBD6F2A611EF8F8C0C51C4F9AE02.roa (raw, json)
Hash identifier: PAkIYZBg3WfFvlSAb1XDNPnjMRPmbNTXA0dJlYGNXu0=
Subject key identifier: EF:E3:93:E3:E4:D9:2F:C2:04:BD:FF:9F:71:B6:EC:F3:5B:05:75:60
Certificate issuer: /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial: 064B
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/E481FBD6F2A611EF8F8C0C51C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:29:49 +0000
ROA not before: Sun 28 Sep 2025 23:57:00 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 147002
IP address blocks: 103.172.134.0/24 maxlen: 24
103.172.135.0/24 maxlen: 24
2407:d340::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1611 (0x64b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917419E, serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Validity
Not Before: Sep 28 23:57:00 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4778c-ee50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d3:20:ab:f6:c7:25:68:a0:04:e0:11:5b:d5:
b9:73:cf:ee:e7:fd:66:fd:f6:ed:3e:06:4c:48:54:
a3:e9:2c:29:44:30:23:e7:7f:5a:d5:9f:78:c0:29:
3c:63:83:e2:92:aa:d1:47:f3:39:c3:46:6b:e5:27:
52:02:88:10:61:42:92:a5:b0:95:7a:3a:8f:7c:a7:
db:d7:3c:22:95:24:e4:86:e4:2d:c9:d1:70:ae:26:
93:94:3f:7f:c2:7c:59:ac:7d:96:d6:73:42:69:1d:
4d:c3:c9:f5:93:c0:70:91:49:ab:f2:11:be:4c:c2:
00:b7:4c:bb:60:de:40:e8:07:33:a6:34:b4:b1:47:
d2:a7:c8:b3:f7:d3:8b:2f:cc:7a:b3:5b:30:97:31:
8c:a3:43:56:d5:01:93:da:15:85:03:d8:d4:1d:b6:
cd:ba:ad:83:1a:ee:74:4f:e7:f5:75:77:2f:63:f7:
b0:11:2d:8d:dd:ab:f1:6e:73:a6:dc:f5:c4:5d:ea:
2a:91:f2:8f:37:34:d7:40:c3:cd:04:bd:9b:e7:97:
40:43:dd:65:fa:a7:63:a4:c2:67:c2:46:14:62:6c:
de:d9:a5:ee:e0:cb:d4:40:c4:e7:6d:9d:f9:c9:38:
fd:23:6a:09:2e:03:d1:bd:18:21:6a:de:a3:b6:12:
c5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E3:93:E3:E4:D9:2F:C2:04:BD:FF:9F:71:B6:EC:F3:5B:05:75:60
X509v3 Authority Key Identifier:
keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/E481FBD6F2A611EF8F8C0C51C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.172.134.0/23
IPv6:
2407:d340::/32
Signature Algorithm: sha256WithRSAEncryption
d0:1c:e2:2e:fb:ef:dc:c7:f4:de:b2:c2:32:5e:b7:a6:cc:eb:
24:7f:10:39:d1:d8:80:92:ca:16:da:af:04:f1:51:cc:63:23:
90:b2:a0:b8:26:8f:2b:b8:19:47:b5:32:23:08:d1:7b:35:36:
c9:15:e5:de:8d:f4:7e:24:bc:e5:84:e0:c1:29:e6:c5:33:4d:
92:11:79:06:ee:d4:09:51:43:b5:15:f7:ca:e4:bd:88:5e:23:
d0:89:eb:14:28:e0:98:dd:e6:e1:14:39:cf:31:85:e8:42:f8:
eb:69:b3:6d:8e:8a:8f:81:ef:56:dd:a5:fe:52:fd:18:fe:18:
76:b2:d0:fe:2c:19:ab:5e:25:02:ae:5f:71:66:c1:7b:f3:9d:
4b:90:94:e5:ff:3a:1f:86:7b:44:b7:a6:c5:6f:27:bb:1d:10:
2e:45:95:72:e4:7f:02:cb:81:67:a6:27:43:d8:6e:5c:15:06:
62:40:0e:52:c7:44:da:fe:a5:84:19:26:5e:f6:6d:70:92:08:
d7:52:61:a2:b9:0e:2b:21:69:e1:c9:d4:ef:a7:e0:bc:93:8c:
12:3e:d2:76:6e:3e:d3:c3:b6:89:1e:9c:9b:2e:4a:7f:17:67:
10:40:04:90:e1:92:ce:c3:d3:4f:2b:a6:e5:68:e6:c8:e5:74:
50:5d:84:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:30:04 2026 by rpki-client