
$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/4C7FE6802C7711F084452D84C4F9AE02.roa
File: 4C7FE6802C7711F084452D84C4F9AE02.roa (raw, json)
Hash identifier: zE+9PHQnfBVZScUbpE+r54UIZVDbC0UrqDp9WETPpaA=
Subject key identifier: 1E:FD:64:44:5C:35:7A:74:60:25:8C:50:02:12:CB:23:23:4E:3A:CB
Certificate issuer: /CN=A918549C/serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
Certificate serial: 0148
Authority key identifier: 52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/4C7FE6802C7711F084452D84C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:41:39 +0000
ROA not before: Fri 09 May 2025 01:45:34 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 3754
IP address blocks: 163.223.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl
rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 12:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918549C, serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
Validity
Not Before: May 9 01:45:34 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a58583-e9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4a:8d:bc:41:2a:39:9e:09:25:f4:07:3c:05:
17:ee:90:ae:a1:da:45:a4:3c:f1:77:d0:34:fe:bf:
fa:42:9c:ee:45:52:96:bd:6b:3f:84:2f:4a:0c:33:
12:c0:41:17:10:af:1a:e8:60:80:9f:5e:de:c0:75:
40:35:de:6e:96:2e:08:48:00:0a:a8:1a:6a:30:8a:
61:d2:58:ca:52:9a:a9:f5:9d:63:49:85:fa:ac:7e:
48:45:bc:f1:f6:4f:fd:2f:69:d0:97:2f:54:d4:1a:
64:33:85:db:ba:a8:75:f9:30:af:05:db:63:8c:88:
90:2d:26:4c:02:7f:14:ed:5e:06:0f:c2:da:d5:9a:
6c:9b:86:fe:45:f9:67:05:b0:45:00:81:bd:47:b6:
71:8b:78:76:bd:b1:ab:50:e4:76:b4:e0:bf:ca:54:
19:96:01:4b:9b:54:a0:dc:44:8a:35:11:d1:b0:7e:
14:21:d4:a4:93:69:b4:7e:c1:fa:52:b0:bf:cd:9f:
74:f7:66:2b:af:80:7f:11:6e:04:46:72:29:86:32:
0e:77:d7:ee:4b:65:87:b1:98:86:61:f4:54:dd:13:
7a:63:64:1b:f9:60:ed:8d:9a:70:42:78:55:aa:cb:
33:ec:25:43:9b:05:87:07:de:ec:94:60:3a:4d:fc:
f4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FD:64:44:5C:35:7A:74:60:25:8C:50:02:12:CB:23:23:4E:3A:CB
X509v3 Authority Key Identifier:
keyid:52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/4C7FE6802C7711F084452D84C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.77.0/24
Signature Algorithm: sha256WithRSAEncryption
89:d1:44:13:77:bc:61:7c:04:9b:af:cd:3e:21:84:80:04:0a:
81:e9:cd:7f:5b:d9:1c:24:8a:f2:51:ac:b3:3a:ae:85:87:05:
d8:7b:31:b8:ca:ba:aa:af:fe:95:6f:76:4f:05:eb:b2:17:04:
94:0b:79:76:0a:38:89:6b:b3:8e:e5:0d:32:3a:58:bf:a9:6a:
c6:52:09:25:8f:92:c7:18:e9:3e:40:3e:27:58:53:1a:25:e8:
91:3d:60:80:d9:79:ef:3a:47:11:23:21:40:c9:e3:1a:59:71:
23:2b:b3:dc:74:78:c2:e6:7d:0e:a8:20:35:79:e3:a9:18:ad:
66:17:87:3f:61:b0:21:8c:d7:2a:25:82:a3:96:d3:78:aa:59:
0b:a9:d6:7e:73:04:c2:09:8a:8e:cc:9a:b4:a2:b2:d5:b7:7b:
0d:42:eb:73:97:a7:21:71:2e:84:c1:14:0c:03:d6:c1:08:6b:
41:8a:99:ec:d1:ad:95:9e:30:b7:03:33:1a:43:a9:06:1e:c7:
48:60:10:ed:f7:fb:9b:12:18:cc:ad:6f:5d:f8:d1:9e:2c:d7:
dd:8d:8f:a2:55:10:aa:fc:d7:87:11:f3:09:7e:f7:29:69:ae:
ee:ca:cf:84:80:67:7f:03:66:25:6b:e3:f8:1c:a1:0a:80:47:
02:30:b3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:20:25 2026 by rpki-client