
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/4A6D188450EA11EC8FF55B24C4F9AE02.roa
File: 4A6D188450EA11EC8FF55B24C4F9AE02.roa (raw, json)
Hash identifier: qLlqNwlaPLdL74Mt7s2Fed23RK/fRGvf/YX6d5A2kU8=
Subject key identifier: 08:9D:41:AE:C4:79:B9:9E:47:EF:E0:E0:B0:71:CE:60:98:7B:FC:FA
Certificate issuer: /CN=A9178EB0/serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
Certificate serial: 08DC
Authority key identifier: AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/4A6D188450EA11EC8FF55B24C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:33:25 +0000
ROA not before: Tue 18 Nov 2025 20:11:20 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 9744
IP address blocks: 103.1.224.0/22 maxlen: 24
103.199.104.0/22 maxlen: 24
112.121.160.0/19 maxlen: 24
137.59.20.0/22 maxlen: 24
180.178.32.0/19 maxlen: 24
182.16.0.0/17 maxlen: 24
2406:8680::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl
rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:14:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2268 (0x8dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178EB0, serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
Validity
Not Before: Nov 18 20:11:20 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a46a54-f5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:a8:37:a6:23:ec:09:c2:7c:35:7e:1e:99:
23:19:ba:a4:7b:3d:d2:51:9a:cc:c7:2e:81:90:5f:
fd:e0:b6:29:d1:68:cf:41:46:67:ac:ee:0c:ba:0c:
07:21:0d:16:4a:1e:15:90:91:71:32:c7:1a:c1:48:
78:cb:a1:5c:f7:95:7b:9d:8a:35:8c:08:8d:fe:22:
af:e3:04:9f:f0:d0:bc:93:4b:9e:32:d0:01:1b:bc:
1e:94:18:52:56:89:12:25:53:1f:d2:b2:b2:ec:d0:
09:63:ff:19:33:a3:08:3b:97:b9:02:04:64:8d:8c:
74:4f:ea:15:0c:5f:21:d2:00:6a:19:74:4a:49:92:
fb:a7:1c:52:5e:26:db:cd:d8:7e:29:04:43:d6:c3:
90:5c:90:1f:7b:07:a0:d7:57:0a:8f:62:f2:e1:74:
83:7e:e8:9f:3e:f8:80:6f:57:f1:71:0b:79:a3:6c:
5e:a0:03:1e:49:36:d5:b0:1e:98:5e:8c:42:bf:7d:
1e:97:8e:57:e9:a0:bc:02:f9:55:5e:34:33:a5:9d:
33:fd:23:eb:96:68:c9:18:31:1b:c6:98:b6:47:b5:
ef:ca:f9:d1:67:f8:c7:cb:06:ec:5e:ab:ed:53:b9:
35:e1:cf:f8:88:50:3e:7b:0d:f3:ab:c4:75:92:72:
f7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9D:41:AE:C4:79:B9:9E:47:EF:E0:E0:B0:71:CE:60:98:7B:FC:FA
X509v3 Authority Key Identifier:
keyid:AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/4A6D188450EA11EC8FF55B24C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.1.224.0/22
103.199.104.0/22
112.121.160.0/19
137.59.20.0/22
180.178.32.0/19
182.16.0.0/17
IPv6:
2406:8680::/32
Signature Algorithm: sha256WithRSAEncryption
5f:8d:05:3c:98:e2:16:e7:1a:b9:99:d4:80:79:25:31:57:fe:
86:d6:6a:71:78:96:66:a0:27:88:40:30:20:52:6e:0c:17:fc:
ad:50:c2:67:37:23:d0:bf:e6:a8:84:c6:67:a2:ce:7e:4a:1b:
cb:6e:29:c2:2d:b6:38:0c:2a:d1:d5:cb:bf:e8:ed:0c:76:58:
c4:98:ae:bd:05:07:4d:16:b2:88:61:d3:56:fa:12:1d:3c:4f:
19:09:82:cb:2d:43:76:36:41:0b:5b:01:99:0f:76:0b:61:03:
dc:10:e5:71:a3:d9:6d:a9:fa:05:2e:d4:cd:4d:b6:f2:9e:b6:
8a:d6:9a:9a:92:2f:36:fb:65:ad:53:4f:93:8b:98:73:c8:30:
8c:7b:88:1b:ac:3d:57:53:a5:89:08:cb:92:3a:f3:82:16:bb:
07:6c:a4:f6:b1:69:aa:be:a0:cf:7b:6a:6a:36:37:3a:1f:29:
79:7e:5c:34:18:ce:7b:70:3b:2b:30:71:60:43:7d:d1:36:51:
b4:c5:af:13:29:ac:7d:d0:64:80:a8:47:12:d0:87:de:11:90:
be:f6:ba:63:7b:04:2a:b0:fb:bd:b4:56:c3:d9:d5:29:af:fd:
4a:ea:47:5e:aa:0c:eb:88:09:05:c9:70:17:52:49:ee:dc:49:
59:d8:2f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:50 2026 by rpki-client