
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/49CE816E430A11EAA674EA74C4F9AE02.roa
File: 49CE816E430A11EAA674EA74C4F9AE02.roa (raw, json)
Hash identifier: nzu6xGAZVwQN3sFL3XLygbLgrfyY1tLxmnEus1wus5o=
Subject key identifier: 66:6B:DA:7F:87:B4:68:7B:18:F8:62:A5:2D:2E:68:EA:7B:23:EE:53
Certificate issuer: /CN=A9175F5F/serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD
Certificate serial: 0B99
Authority key identifier: 25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/49CE816E430A11EAA674EA74C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:45:15 +0000
ROA not before: Mon 04 Aug 2025 19:59:36 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 132398
IP address blocks: 103.72.192.0/24 maxlen: 24
2001:df4:2600::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl
rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2969 (0xb99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175F5F, serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD
Validity
Not Before: Aug 4 19:59:36 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a426cb-2c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:12:7f:2b:4c:53:0e:d4:fd:3d:68:89:aa:75:
56:54:f7:25:0e:65:c0:4d:9c:a5:62:7d:e9:41:56:
a0:79:ae:d3:77:db:12:a3:41:e3:8a:86:90:b4:6d:
d0:3f:2b:60:e2:69:d8:69:de:2f:a0:b0:8f:2f:a6:
a2:ec:1d:05:a6:9e:f9:0e:1b:89:b8:94:96:32:87:
38:a0:5f:4f:4e:e4:ad:31:24:8f:44:20:3e:50:6e:
7b:a3:c8:e5:83:a3:e1:1c:e8:fd:6d:af:06:47:80:
d0:2b:0e:1e:a9:9f:f3:ad:ba:f5:87:b7:3c:9d:29:
32:55:2d:9f:9f:4d:b9:95:f7:f4:00:e7:ec:a1:cd:
0c:33:b1:c5:a1:8d:4f:7d:b3:1f:c8:7d:a3:35:f0:
95:6d:0a:85:c0:dd:75:94:b3:06:81:49:2f:57:3b:
18:2e:c6:70:ec:00:7e:56:f7:4a:60:f7:8f:55:10:
b2:d0:f2:7c:1a:ed:fc:dc:fe:4b:ad:c9:06:44:c4:
54:ec:7c:0e:42:fd:87:be:b5:bd:8e:52:38:8c:c0:
2f:86:e1:67:6c:68:ff:1b:2d:95:93:3b:72:d3:18:
7e:15:93:c1:f0:1a:b6:63:94:94:0a:ee:9b:e6:4c:
a2:31:8d:e3:82:ae:76:77:5a:31:8a:4b:3c:a7:0f:
7e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6B:DA:7F:87:B4:68:7B:18:F8:62:A5:2D:2E:68:EA:7B:23:EE:53
X509v3 Authority Key Identifier:
keyid:25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/49CE816E430A11EAA674EA74C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.72.192.0/24
IPv6:
2001:df4:2600::/48
Signature Algorithm: sha256WithRSAEncryption
01:9e:81:15:84:6e:4f:aa:08:24:6b:b3:4c:50:dd:2a:36:24:
0b:3f:93:bf:7e:d5:d1:74:30:d2:12:46:4a:10:61:c0:c0:7d:
6a:e9:e8:9b:30:5a:5c:75:aa:55:5f:cc:f2:f4:a9:7f:89:8b:
d3:44:f9:26:d8:c7:61:20:88:c9:a7:59:d2:71:35:71:71:59:
fa:8e:25:2d:e5:a8:d4:74:14:45:34:7c:7a:d4:37:b4:2b:03:
b5:59:41:71:34:63:8c:6e:e3:f5:9c:36:28:c4:00:78:3a:12:
83:8f:05:40:2f:12:d5:d1:c4:08:cd:f2:c3:c7:a6:f6:e4:46:
d5:c9:80:15:33:8b:fd:ef:11:a6:05:53:41:af:f8:04:98:18:
13:e6:8d:8a:68:d1:d9:71:aa:e8:c8:1d:58:8c:00:1d:19:0c:
80:71:34:f0:23:71:33:40:00:a4:15:94:08:7c:55:c5:e1:fe:
5b:03:4a:ed:ae:12:7a:ea:95:6f:b8:0e:cf:9e:39:df:1e:f7:
30:75:1a:bb:32:a8:fc:af:b7:ae:3a:62:85:8b:6c:fc:4b:15:
ce:47:8f:aa:df:3e:b9:f2:54:e0:43:83:d1:55:1d:54:60:1a:
ec:ef:54:f5:da:36:2a:e1:67:84:60:70:e7:b3:6e:f5:48:2c:
61:63:ed:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:27:48 2026 by rpki-client