
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/4E9597086B5C11EFABB11F60C4F9AE02.roa
File: 4E9597086B5C11EFABB11F60C4F9AE02.roa (raw, json)
Hash identifier: xaj9ev9gObxEarMjWAx7hyuUavQ9BGr2NQce4XrNjSg=
Subject key identifier: 14:85:76:5B:31:C1:F3:C7:1D:7F:78:38:CD:2B:08:35:5C:9E:00:8B
Certificate issuer: /CN=A9176C8F/serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
Certificate serial: 0124
Authority key identifier: 4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/4E9597086B5C11EFABB11F60C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:23:24 +0000
ROA not before: Tue 19 Aug 2025 06:44:28 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 152475
IP address blocks: 160.30.128.0/24 maxlen: 24
160.30.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl
rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:33:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176C8F, serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
Validity
Not Before: Aug 19 06:44:28 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a3f77c-4bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:40:c3:c1:3b:d9:f3:f2:ab:56:79:1d:8d:
f6:60:8f:6e:21:5a:93:57:53:6c:18:f6:26:f1:5a:
e4:55:e4:19:c5:42:62:4f:03:e1:7f:19:e1:7b:21:
42:1d:c8:37:f1:d0:e4:5b:f1:be:54:28:52:ba:15:
8b:ec:ec:9f:82:93:f2:61:97:cd:ed:4f:a2:21:5a:
92:af:aa:eb:89:13:1f:20:9e:dc:cd:2e:60:a3:5b:
29:a9:8e:97:f9:2b:5e:25:1b:87:48:36:54:ce:d4:
cd:01:26:19:64:4a:86:a9:c5:24:6c:2f:d5:2d:5a:
7a:43:5e:38:75:50:ac:09:a2:2e:4e:16:9a:fa:29:
e5:f0:0d:33:eb:75:40:e8:81:f0:cc:11:64:78:bf:
83:65:7a:88:7c:39:dd:bf:ce:b5:5c:d0:e5:30:0a:
e4:1e:83:c6:7c:c7:22:72:66:c3:c6:33:33:34:2c:
99:f1:e3:67:2f:33:92:63:4b:a2:21:5f:06:95:4b:
ed:c7:88:e3:9e:68:c9:aa:f1:c8:a7:fd:b4:bf:72:
d3:aa:9b:d4:99:9b:db:72:61:4a:bf:82:c0:51:9e:
5f:3a:4d:82:3c:2b:a9:c6:59:ed:50:8e:63:59:bb:
5e:b4:0a:18:59:4e:c8:29:dc:68:0f:9b:0c:12:80:
7b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:85:76:5B:31:C1:F3:C7:1D:7F:78:38:CD:2B:08:35:5C:9E:00:8B
X509v3 Authority Key Identifier:
keyid:4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/4E9597086B5C11EFABB11F60C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.128.0/23
Signature Algorithm: sha256WithRSAEncryption
65:43:ad:16:5f:d9:95:5d:5f:54:e7:cc:10:f7:59:50:6e:5a:
b5:fe:31:df:26:1f:3f:04:93:2e:8f:1b:5b:c5:09:ac:53:4a:
f9:62:25:d0:1e:f2:d8:c1:f0:35:42:5b:fd:fa:e6:73:37:bc:
91:71:ed:26:da:f8:cf:3f:d2:0e:01:2e:26:bf:0b:a4:06:42:
f0:a0:5a:a3:11:8f:7c:07:55:72:56:2c:63:2c:e3:8e:24:02:
d3:49:e2:7e:cc:e3:33:35:5f:6b:84:2a:2f:06:60:ce:ba:03:
06:62:d8:8f:31:d0:c5:74:af:20:c1:23:d3:08:f4:6d:63:9a:
a7:0d:63:a2:6b:f9:69:cf:7a:3f:ac:95:99:5d:29:65:e5:d0:
e6:eb:34:6a:f3:7e:06:c7:02:3f:08:ab:32:08:d8:f6:7d:73:
83:3a:ef:5b:85:ac:97:52:6e:81:dd:d7:a5:50:a7:b4:83:51:
61:e1:ee:8a:a5:dd:1e:77:76:80:e1:42:a5:8d:04:57:76:2d:
80:ef:e7:1c:ad:50:17:89:22:d2:32:9f:c7:a6:4c:34:c7:7d:
ce:ec:d5:d8:90:d8:85:46:a2:bc:eb:8c:6d:d6:76:1d:69:10:
2b:f8:d5:34:fb:56:7c:b9:c4:3a:d9:44:77:f8:b1:1d:36:c4:
90:b4:73:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:00:39 2026 by rpki-client