
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/4AFD4994CDD011EEA5534481C4F9AE02.roa
File: 4AFD4994CDD011EEA5534481C4F9AE02.roa (raw, json)
Hash identifier: LectFDdTSMn7loXlQ2Wf7gPQucdUaSBxJzRdeIEEXm4=
Subject key identifier: 2D:B9:64:D8:4A:40:F7:3C:D3:96:E7:18:8F:82:18:2C:8E:D0:C5:C1
Certificate issuer: /CN=A9178C1E/serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658
Certificate serial: 01A7
Authority key identifier: 1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/4AFD4994CDD011EEA5534481C4F9AE02.roa
Signing time: Fri 17 Apr 2026 04:37:26 +0000
ROA not before: Fri 17 Apr 2026 04:37:26 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 10104
IP address blocks: 2001:df3:6c40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl
rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178C1E, serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658
Validity
Not Before: Apr 17 04:37:26 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69e1b906-ae45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0a:96:ec:ca:69:39:0d:2d:71:72:63:60:a8:
1e:d2:a1:97:37:b5:94:aa:c0:e2:24:9e:fe:bc:47:
2c:b4:c9:e4:cb:20:00:9c:71:4a:2a:41:7a:db:39:
fa:0b:dc:1d:8b:68:4d:8d:98:81:9b:d1:98:26:c8:
f8:44:48:c4:1b:44:7d:b6:1b:5e:06:b5:09:23:71:
43:f8:4f:55:5d:34:14:27:21:9a:8f:c6:a1:74:9e:
c1:23:64:98:6b:87:73:26:20:52:0d:30:02:dd:11:
08:97:d3:1d:b2:31:49:84:7a:f5:14:a9:ea:d3:59:
9d:1c:ea:cb:f6:bb:83:b0:8e:c7:20:25:8b:f3:21:
9e:62:27:a6:53:e8:5e:16:21:85:70:10:56:13:1a:
47:52:60:a0:dd:32:02:7c:e6:f1:63:5b:e6:9a:bf:
20:25:84:ae:ad:68:7a:4f:a8:fb:58:4b:c7:34:86:
f3:be:75:4e:0f:78:b1:16:c4:49:22:c4:80:52:69:
6b:3f:d8:a7:1b:b1:67:b1:92:16:27:89:23:d7:c0:
cf:f5:c2:a2:ed:ef:2f:88:91:05:f1:6b:e0:dc:e5:
e4:b8:03:4a:fd:43:6a:a5:3e:9e:c0:55:ad:90:cf:
9d:43:be:a0:8a:7a:48:1f:fb:b1:4c:5d:4b:e5:90:
ab:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B9:64:D8:4A:40:F7:3C:D3:96:E7:18:8F:82:18:2C:8E:D0:C5:C1
X509v3 Authority Key Identifier:
keyid:1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/4AFD4994CDD011EEA5534481C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:6c40::/48
Signature Algorithm: sha256WithRSAEncryption
4f:db:ca:49:c7:d1:a9:eb:66:27:2c:8e:b2:57:8f:ad:46:41:
ae:77:3d:a3:b6:06:83:3c:50:90:87:76:b4:1c:fb:59:c2:7e:
a1:8b:2e:e1:ca:21:95:b4:13:af:a2:96:2b:8c:44:bd:d2:32:
92:ef:e8:66:11:f7:d8:37:75:ee:4a:d8:40:31:4d:e3:ef:cd:
bc:9c:4d:73:da:9d:5b:fb:97:c2:e5:72:18:8a:90:7b:d1:7a:
0c:f9:19:05:00:2a:39:3d:0a:aa:48:31:04:15:b5:ec:d3:c8:
96:0a:08:5c:27:51:12:c3:64:f0:c4:7d:fe:59:63:07:c0:6a:
02:98:f1:41:91:a7:31:44:cc:52:95:63:59:00:b8:b3:6d:bb:
2a:57:a9:d4:6a:60:7e:09:99:87:3b:27:5f:6f:ef:44:e2:81:
f5:c4:f9:1a:fc:d9:25:ad:09:8e:eb:8c:8f:85:a3:bd:d0:82:
54:4a:56:78:9c:1b:0b:bf:c3:08:b2:e5:85:6a:bc:0f:5e:08:
6f:b5:43:8c:f9:f0:35:2a:d9:8e:64:51:98:27:0a:91:e8:d6:
c2:cd:a2:08:49:0e:88:8d:27:82:dc:15:31:2b:4c:cd:62:e7:
cf:8b:5b:d7:7b:0e:db:31:4a:7b:b5:6a:2a:9d:37:e0:a6:f1:
c2:9f:48:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:42:52 2026 by rpki-client