
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/41969D1C8F3011EEA61ACF62C4F9AE02.roa
File: 41969D1C8F3011EEA61ACF62C4F9AE02.roa (raw, json)
Hash identifier: gg1NxyOoVbC4W+3Hh9sYPb23rvpu8aUKKSd8lTa2xx4=
Subject key identifier: 9F:AE:B2:39:D9:65:5C:38:F0:18:97:03:9F:CC:BC:8E:7C:44:D8:A5
Certificate issuer: /CN=A9179F22/serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
Certificate serial: 01C6
Authority key identifier: FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/41969D1C8F3011EEA61ACF62C4F9AE02.roa
Signing time: Mon 02 Mar 2026 23:24:59 +0000
ROA not before: Fri 27 Feb 2026 03:22:57 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 16509
IP address blocks: 103.150.252.0/24 maxlen: 24
202.74.46.0/24 maxlen: 24
2400:a4a0:1::/48 maxlen: 48
2400:a4a0:30::/48 maxlen: 48
2400:a4a0:40::/48 maxlen: 48
2400:a4a0:41::/48 maxlen: 48
2400:a4a0:42::/48 maxlen: 48
2400:a4a0:90::/48 maxlen: 48
2400:a4a0:100::/48 maxlen: 48
2400:a4a0:101::/48 maxlen: 48
2400:a4a0:115::/48 maxlen: 48
2400:a4a0:a100::/48 maxlen: 48
2400:a4a0:aaa2::/48 maxlen: 48
2400:a4a0:aaa3::/48 maxlen: 48
2400:a4a0:aaa4::/48 maxlen: 48
2400:a4a0:aaa5::/48 maxlen: 48
2400:a4a0:b100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl
rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 03:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454 (0x1c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F22, serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
Validity
Not Before: Feb 27 03:22:57 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a61c4b-3143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a4:61:f4:89:70:b7:2c:7a:e0:4b:9f:95:a2:
f7:c8:c4:27:7b:f0:40:a5:01:2f:18:81:a3:cf:36:
31:ea:27:43:4f:0d:9a:98:f9:3b:f7:10:be:b6:86:
59:9d:53:b3:2f:61:8b:2d:26:7d:ff:a3:5b:e0:ec:
83:79:75:af:26:29:2e:f0:cf:ab:c7:52:28:3a:09:
ed:44:e2:8c:fd:b5:fb:0a:8b:7d:9c:24:61:90:6a:
6a:d0:85:be:97:0c:78:de:37:4c:06:02:8b:02:ac:
e3:5b:ef:3e:08:6a:f3:01:7b:8f:68:cb:0c:23:e9:
99:a6:25:51:73:a0:8f:eb:d5:64:1b:ed:61:c1:07:
33:d1:0f:73:f0:03:4b:36:ba:69:87:be:01:cd:0c:
e4:ef:f1:ef:ac:7d:1b:94:ad:07:45:0a:84:cb:d9:
f3:78:20:36:5b:19:e4:61:7e:b7:84:2a:90:df:5e:
93:bb:b2:2f:42:fe:f5:ad:79:5e:97:7f:69:20:70:
f2:38:e7:a2:89:a2:12:8c:8c:98:ca:80:fa:d6:39:
ea:72:fb:93:ee:a7:56:1d:ad:34:78:66:4c:17:a4:
f6:59:d1:7e:9c:bd:dd:01:84:ab:29:ea:33:f6:cd:
1e:78:34:b9:fd:63:3b:36:91:5a:7f:bc:be:5a:79:
30:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AE:B2:39:D9:65:5C:38:F0:18:97:03:9F:CC:BC:8E:7C:44:D8:A5
X509v3 Authority Key Identifier:
keyid:FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/41969D1C8F3011EEA61ACF62C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.150.252.0/24
202.74.46.0/24
IPv6:
2400:a4a0:1::/48
2400:a4a0:30::/48
2400:a4a0:40::-2400:a4a0:42:ffff:ffff:ffff:ffff:ffff
2400:a4a0:90::/48
2400:a4a0:100::/47
2400:a4a0:115::/48
2400:a4a0:a100::/48
2400:a4a0:aaa2::-2400:a4a0:aaa5:ffff:ffff:ffff:ffff:ffff
2400:a4a0:b100::/48
Signature Algorithm: sha256WithRSAEncryption
5d:30:02:3a:9c:74:99:6d:80:ea:f1:7b:c1:d8:f2:d8:b4:69:
42:67:3c:f8:7e:0e:a3:48:42:c4:36:8d:ae:0a:b6:36:cc:51:
d6:41:0c:bd:d8:82:96:53:5b:b2:86:1a:e9:f8:47:b4:3f:e3:
63:78:91:d0:dc:6f:73:c2:6f:ec:c8:ee:5d:71:09:95:31:40:
da:16:fd:c8:f6:bc:52:b9:6f:03:f6:5c:65:aa:d7:c0:e7:ef:
47:d2:9e:aa:6a:b5:ef:3c:04:e4:9e:64:74:5a:bb:e7:2e:2f:
d1:71:b3:eb:fe:aa:e2:e2:31:03:56:3b:71:38:78:ff:27:cc:
e4:a3:4d:89:2f:07:f8:3f:77:fd:6f:14:72:8f:d0:33:58:48:
a1:0d:78:e5:a6:2f:7d:4c:0f:10:26:9b:07:b0:92:1a:0a:a2:
97:2e:d5:04:1b:fb:be:cb:5a:8a:2e:d0:7d:e4:b7:87:a1:61:
b2:50:5a:c5:be:80:2f:df:6c:41:9b:b5:77:c2:5c:c8:e0:7b:
7c:81:af:02:74:8e:3f:cd:7a:46:21:a6:cb:af:10:f3:aa:a3:
74:83:79:f2:b4:0b:97:93:d1:17:79:71:b3:6d:c0:56:4f:79:
d4:f4:91:56:78:a7:8f:14:d2:33:22:28:26:18:e4:44:f0:32:
7b:98:a0:c8
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlGMjIxMTAvBgNVBAUTKEZDRjc1M0QzNDZBQUFCOTVBQjE0QzYyNjc1MTVDREYx
M0Y4MEZCQkIwHhcNMjYwMjI3MDMyMjU3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MWM0Yi0zMTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA46Rh9Ilwtyx64EuflaL3yMQne/BApQEvGIGjzzYx6idDTw2amPk79xC+toZZ
nVOzL2GLLSZ9/6Nb4OyDeXWvJiku8M+rx1IoOgntROKM/bX7Cot9nCRhkGpq0IW+
lwx43jdMBgKLAqzjW+8+CGrzAXuPaMsMI+mZpiVRc6CP69VkG+1hwQcz0Q9z8ANL
Nrpph74BzQzk7/HvrH0blK0HRQqEy9nzeCA2WxnkYX63hCqQ316Tu7IvQv71rXle
l39pIHDyOOeiiaISjIyYyoD61jnqcvuT7qdWHa00eGZMF6T2WdF+nL3dAYSrKeoz
9s0eeDS5/WM7NpFaf7y+WnkwZwIDAQABo4IC2DCCAtQwHQYDVR0OBBYEFJ+usjnZ
ZVw48BiXA5/MvI58RNilMB8GA1UdIwQYMBaAFPz3U9NGqquVqxTGJnUVzfE/gPu7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUYyMi9DRjlCRjVGRThG
MkYxMUVFOUNCRkQ5NjFDNEY5QUUwMi9fUGRUMDBhcXE1V3JGTVltZFJYTjhULUEt
N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19QZFQwMGFxcTVXckZNWW1kUlhOOFQtQS03cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzlGMjIvQ0Y5QkY1RkU4RjJGMTFFRTlDQkZEOTYxQzRGOUFFMDIvNDE5NjlEMUM4
RjMwMTFFRUE2MUFDRjYyQzRGOUFFMDIucm9hMIGWBggrBgEFBQcBBwEB/wSBhjCB
gzASBAIAATAMAwQAZ5b8AwQAykouMG0EAgACMGcDBwAkAKSgAAEDBwAkAKSgADAw
EgMHBiQApKAAQAMHACQApKAAQgMHACQApKAAkAMHASQApKABAAMHACQApKABFQMH
ACQApKChADASAwcBJACkoKqiAwcBJACkoKqkAwcAJACkoLEAMA0GCSqGSIb3DQEB
CwUAA4IBAQBdMAI6nHSZbYDq8XvB2PLYtGlCZzz4fg6jSELENo2uCrY2zFHWQQy9
2IKWU1uyhhrp+Ee0P+NjeJHQ3G9zwm/syO5dcQmVMUDaFv3I9rxSuW8D9lxlqtfA
5+9H0p6qarXvPATknmR0WrvnLi/RcbPr/qri4jEDVjtxOHj/J8zko02JLwf4P3f9
bxRyj9AzWEihDXjlpi99TA8QJpsHsJIaCqKXLtUEG/u+y1qKLtB95LeHoWGyUFrF
voAv32xBm7V3wlzI4Ht8ga8CdI4/zXpGIabLrxDzqqN0g3nytAuXk9EXeXGzbcBW
T3nU9JFWeKePFNIzIigmGORE8DJ7mKDI
-----END CERTIFICATE-----
Generated at Wed Mar 4 04:59:35 2026 by rpki-client