
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/3768DFB41C6011EEAF58FB61C4F9AE02.roa
File: 3768DFB41C6011EEAF58FB61C4F9AE02.roa (raw, json)
Hash identifier: iodpqPzJXCkEMjXNizFOPmkITOS3ty8iD6q0/vbWTBk=
Subject key identifier: 18:DE:C2:93:5F:AD:76:71:E1:0D:23:59:1C:94:70:D3:30:FB:11:FA
Certificate issuer: /CN=A9174880/serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0
Certificate serial: 355E
Authority key identifier: EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/3768DFB41C6011EEAF58FB61C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:51:45 +0000
ROA not before: Wed 04 Feb 2026 15:10:05 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 132040
IP address blocks: 198.48.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl
rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:58:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13662 (0x355e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174880, serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0
Validity
Not Before: Feb 4 15:10:05 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a46090-53ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:97:f9:2e:db:b4:aa:bd:07:f0:e0:a1:48:04:
2d:54:1a:8b:3a:72:83:28:ee:de:6c:08:bf:e2:09:
92:96:e7:e6:e8:19:3b:e6:04:82:92:97:2a:74:a7:
b4:e2:f1:b8:0b:a0:1d:f8:d8:ee:a1:ca:c3:7d:05:
9d:ce:e9:ac:15:72:1d:b5:b4:76:92:54:07:aa:ec:
19:d3:e3:3a:1d:27:ad:4a:1d:d0:2d:b2:77:f0:cd:
ee:9b:6f:b6:d8:07:c9:98:c8:82:2c:62:0e:32:6b:
9b:7b:34:12:c3:53:62:a9:3d:4c:8b:21:c6:ac:b7:
f1:b0:02:59:a4:13:e4:45:02:91:4e:cf:d2:6f:9a:
80:8b:7c:3f:7b:ab:cd:ba:bb:52:2b:d1:fb:05:d1:
15:1f:98:02:3f:64:53:0e:a1:26:30:ec:7d:16:9e:
85:5f:7d:29:78:3c:e4:74:e5:cc:e9:2b:d2:9e:ef:
8e:1b:2f:21:e0:b6:34:6c:b7:6d:f4:9d:41:6b:c3:
e3:07:7c:2b:b6:e0:c0:b4:0b:2f:a5:63:5f:83:6c:
04:5b:82:51:c1:71:3b:3c:b9:25:61:5b:f4:a4:fa:
e3:32:34:1d:a7:d0:f4:2f:6d:f4:c3:fe:f8:6a:74:
6f:47:a8:ac:2b:81:2f:a9:89:21:1f:80:be:45:03:
b7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DE:C2:93:5F:AD:76:71:E1:0D:23:59:1C:94:70:D3:30:FB:11:FA
X509v3 Authority Key Identifier:
keyid:EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/3768DFB41C6011EEAF58FB61C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
198.48.0.0/22
Signature Algorithm: sha256WithRSAEncryption
29:b2:7c:96:94:bd:0d:78:23:6b:35:dc:eb:6d:43:69:8e:ed:
3f:ae:f3:eb:4b:eb:63:45:40:55:ec:29:b1:56:be:b4:30:c5:
04:13:bc:2e:81:4f:05:63:44:fc:13:85:f7:e0:ca:0c:f9:79:
19:2d:bd:cd:6e:c1:38:70:99:41:33:a7:81:2d:f3:dc:47:e1:
32:75:9f:ea:1c:3e:aa:ca:58:a3:45:83:b1:39:15:f1:85:d3:
3a:af:ca:07:4d:8f:b5:0b:3a:7b:ef:39:80:a5:30:9c:4d:34:
85:07:09:f2:b4:77:7f:df:b2:5f:48:2c:d3:ec:cd:60:a1:4a:
1e:64:2e:ac:09:33:ef:85:5d:6d:e0:f2:80:0f:0b:a3:fb:f4:
24:93:0c:f9:04:79:8c:7f:18:2e:e7:ca:a9:c8:54:f5:95:60:
83:58:52:28:f0:ad:ba:02:5f:7e:a9:79:a8:5b:2b:8c:ae:ea:
f1:4c:0e:e2:bc:ca:f6:a0:c8:67:ea:6d:c1:32:49:d5:33:ba:
75:32:2e:62:03:08:ab:ae:ed:e5:e8:64:e0:e3:bf:15:de:2c:
36:5b:67:b8:64:b9:48:29:f4:07:2e:29:df:4e:6c:24:00:69:
ff:3e:62:8c:32:1a:50:45:b7:f9:82:7b:3e:12:cf:b9:e0:c7:
54:5d:ac:82
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICNV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQ4ODAxMTAvBgNVBAUTKEVDMkM2NDA2Q0FBMUYzOUVCQ0Y0NTg3NTMxNTAwRDU2
Qjk1MzYyQzAwHhcNMjYwMjA0MTUxMDA1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjA5MC01M2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnJf5Ltu0qr0H8OChSAQtVBqLOnKDKO7ebAi/4gmSlufm6Bk75gSCkpcqdKe0
4vG4C6Ad+NjuocrDfQWdzumsFXIdtbR2klQHquwZ0+M6HSetSh3QLbJ38M3um2+2
2AfJmMiCLGIOMmubezQSw1NiqT1MiyHGrLfxsAJZpBPkRQKRTs/Sb5qAi3w/e6vN
urtSK9H7BdEVH5gCP2RTDqEmMOx9Fp6FX30peDzkdOXM6SvSnu+OGy8h4LY0bLdt
9J1Ba8PjB3wrtuDAtAsvpWNfg2wEW4JRwXE7PLklYVv0pPrjMjQdp9D0L230w/74
anRvR6isK4EvqYkhH4C+RQO3ewIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBjewpNf
rXZx4Q0jWRyUcNMw+xH6MB8GA1UdIwQYMBaAFOwsZAbKofOevPRYdTFQDVa5U2LA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC80RTg2NDUwQzFE
NkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1Njg5RmgxTVZBTlZybFRZ
c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzdDeGtCc3FoODU2ODlGaDFNVkFOVnJsVFlzQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzQ4ODAvNEU4NjQ1MEMxRDZBMTFFMkJCNzAxNEE4MDhCMDJDRDIvMzc2OERGQjQx
QzYwMTFFRUFGNThGQjYxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCxjAAMA0GCSqGSIb3DQEBCwUAA4IBAQApsnyWlL0NeCNrNdzrbUNp
ju0/rvPrS+tjRUBV7CmxVr60MMUEE7wugU8FY0T8E4X34MoM+XkZLb3NbsE4cJlB
M6eBLfPcR+EydZ/qHD6qylijRYOxORXxhdM6r8oHTY+1Czp77zmApTCcTTSFBwny
tHd/37JfSCzT7M1goUoeZC6sCTPvhV1t4PKADwuj+/Qkkwz5BHmMfxgu58qpyFT1
lWCDWFIo8K26Al9+qXmoWyuMrurxTA7ivMr2oMhn6m3BMknVM7p1Mi5iAwirru3l
6GTg478V3iw2W2e4ZLlIKfQHLinfTmwkAGn/PmKMMhpQRbf5gns+Es+54MdUXayC
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:53 2026 by rpki-client