
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/5D81654A561E11E7A4FFF329C4F9AE02.roa
File: 5D81654A561E11E7A4FFF329C4F9AE02.roa (raw, json)
Hash identifier: QQcQcj/8H3ULQhlPhT3i5+E0PJvkpwvZGLnuOlY+020=
Subject key identifier: 9F:8F:2B:D7:5A:41:92:4E:7F:83:CD:3C:C4:A4:D1:D7:20:FE:5C:5B
Certificate issuer: /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
Certificate serial: 35AC
Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/5D81654A561E11E7A4FFF329C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:40:42 +0000
ROA not before: Wed 04 Feb 2026 15:10:07 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 23755
IP address blocks: 202.7.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl
rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:58:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13740 (0x35ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174880, serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
Validity
Not Before: Feb 4 15:10:07 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a46c0a-db1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b5:92:19:c5:08:a0:c3:85:1c:8a:7c:03:bb:
42:b8:35:4e:0a:f7:7a:9c:fe:d3:96:21:c9:a2:06:
8b:d4:94:c5:ac:99:02:b5:40:86:47:e5:f8:b1:e9:
cc:19:fc:91:70:f0:bb:08:9b:83:33:c5:9f:83:e5:
fa:2d:3c:30:5a:32:5a:77:09:34:d4:24:83:b7:37:
72:97:80:2f:7a:33:e9:0b:45:cd:51:2f:f5:02:b2:
2b:44:c2:72:59:c7:ed:d6:75:6f:30:c7:67:fb:ac:
03:82:dc:76:88:cd:1b:32:3f:10:04:2b:eb:b4:7a:
79:40:28:6a:ff:87:a2:51:94:33:bd:c4:63:ed:28:
5b:58:59:a4:c9:7a:21:37:e2:16:73:ac:ef:85:9e:
80:ca:f4:27:e6:c2:40:c1:c3:48:db:f7:b1:45:46:
ca:b3:f1:c3:11:0d:eb:08:41:d1:88:54:9e:e7:e5:
40:69:eb:cc:43:33:79:ee:29:b8:cb:54:8b:3b:f2:
aa:f1:60:0d:4c:bd:5f:78:75:46:58:19:c9:77:3a:
e0:12:af:be:0d:63:2c:13:6b:0f:09:8d:ba:50:8c:
74:6a:0d:ca:ac:0c:bb:06:b4:b4:28:7f:15:22:30:
c1:e7:74:8f:f8:bd:dd:f1:2f:5e:eb:b1:28:a1:02:
0f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8F:2B:D7:5A:41:92:4E:7F:83:CD:3C:C4:A4:D1:D7:20:FE:5C:5B
X509v3 Authority Key Identifier:
keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/5D81654A561E11E7A4FFF329C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.7.4.0/22
Signature Algorithm: sha256WithRSAEncryption
07:df:6d:03:5c:cc:d4:fa:30:d0:ff:b8:be:85:82:ed:d4:c3:
75:ad:e7:24:f6:a9:4c:aa:19:f5:28:91:6c:f6:40:75:66:92:
de:33:6b:5b:85:f4:26:f7:e1:bb:04:36:95:1b:0d:be:8e:de:
81:da:35:af:10:57:25:30:10:08:90:1d:be:69:41:99:de:3c:
a0:95:24:db:7d:7d:9c:07:70:17:e4:c1:78:85:fd:36:f8:c7:
a3:f5:43:a5:b4:d4:35:3a:54:15:b3:2f:08:1b:c2:19:c2:f9:
99:d5:aa:7e:7f:33:cd:27:32:cf:7a:0e:fa:be:8d:7b:33:53:
2a:53:32:fb:81:23:10:a9:1e:1e:db:32:a1:48:1f:b6:30:cb:
99:2c:db:6c:ae:de:e1:f1:b0:e4:02:e3:87:28:37:8e:29:e2:
5f:25:5d:bf:62:c3:2f:3a:57:1a:ca:e0:ce:ea:55:a7:71:99:
1e:89:cd:0d:cb:f5:06:4e:be:b9:ef:c5:f6:93:12:7a:f9:58:
c8:34:f2:53:eb:0b:a3:8b:b8:50:a7:00:5c:61:ae:8b:0a:e1:
24:51:28:09:2a:2b:93:df:cb:e7:be:0d:7b:52:5e:e7:07:17:
ca:74:c9:94:91:6b:30:cd:21:eb:9c:6b:27:4a:81:4d:b6:a4:
12:c3:58:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:22:20 2026 by rpki-client