
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/70B74E2A16D811F1AFC6DD17323D8C67.roa
File: 70B74E2A16D811F1AFC6DD17323D8C67.roa (raw, json)
Hash identifier: qo7+SeJeuMvqrGm3R71qB0sZQ/2QkXoj4knUMSQMDAU=
Subject key identifier: E5:53:5C:B6:B8:01:81:EE:95:76:99:BA:39:19:6F:C4:7B:6F:3F:E9
Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Certificate serial: 3589
Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/70B74E2A16D811F1AFC6DD17323D8C67.roa
Signing time: Fri 17 Apr 2026 05:53:13 +0000
ROA not before: Fri 17 Apr 2026 05:53:13 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 2914
IP address blocks: 101.0.12.0/24 maxlen: 24
101.0.13.0/24 maxlen: 24
101.0.14.0/24 maxlen: 24
101.0.15.0/24 maxlen: 24
101.0.16.0/24 maxlen: 24
101.0.20.0/24 maxlen: 24
103.46.204.0/24 maxlen: 24
103.46.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:53:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13705 (0x3589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Validity
Not Before: Apr 17 05:53:13 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69e1cac8-4f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:09:24:8d:f9:ae:72:05:93:9a:60:61:af:55:
c4:fe:0f:d5:5d:4e:c9:ed:25:c0:b1:b5:f0:07:10:
57:51:3a:68:a3:82:f0:62:3d:c6:da:da:83:c2:db:
97:81:9e:e0:57:90:74:13:33:2d:f4:43:e6:b8:42:
15:49:4e:b8:83:a5:1b:3f:cf:4e:8e:09:f5:b0:93:
a7:ca:78:08:cd:d5:09:6b:6e:68:e9:73:5d:19:86:
e4:d8:19:eb:67:be:16:7c:ac:db:6a:1d:3e:62:aa:
ae:53:6b:1d:02:8d:92:1f:31:77:d7:e6:e9:7f:5a:
ed:ec:ac:a5:30:3e:37:e7:b5:06:d2:a8:72:d3:29:
25:ab:47:82:3b:ab:aa:2c:8d:e6:7d:74:36:f8:b0:
45:6e:63:c2:b1:14:d3:34:1a:00:36:e4:f7:5b:05:
88:be:42:38:31:8e:84:aa:23:89:7a:dd:1d:ea:3e:
6b:ff:59:fd:a8:f7:71:a9:07:ef:52:d3:97:7c:8c:
89:92:14:5c:08:10:ad:cf:cf:0e:99:5c:65:8a:d4:
79:ac:b7:fb:c4:e9:97:66:01:02:08:41:ed:8c:c1:
e4:71:5f:36:8f:a3:26:80:55:a5:ae:6a:45:dc:d1:
5a:28:fe:e8:ce:fe:92:d4:23:86:ba:aa:8a:23:35:
06:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:53:5C:B6:B8:01:81:EE:95:76:99:BA:39:19:6F:C4:7B:6F:3F:E9
X509v3 Authority Key Identifier:
keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/70B74E2A16D811F1AFC6DD17323D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
101.0.12.0-101.0.16.255
101.0.20.0/24
103.46.204.0/24
103.46.207.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:5a:be:15:ea:4c:71:28:64:02:0a:f3:b0:7e:b4:de:d7:b8:
d0:ca:68:a4:b3:a2:ad:de:77:5d:2a:f2:3e:cb:ae:3c:b8:29:
14:6d:e0:f8:43:4d:28:f8:05:bc:78:2c:73:19:c2:f8:67:20:
3c:2b:b6:42:03:38:9c:f2:99:ba:37:39:f6:79:b5:fc:49:97:
b2:af:fa:ee:a8:9d:b3:a1:4d:e7:94:b8:6a:be:42:2f:53:a6:
1b:3d:e0:3a:81:78:60:a0:8a:e3:2b:98:ac:61:6e:50:91:ee:
84:bb:ac:63:b2:9b:96:c4:a0:6e:bb:14:2e:61:28:9c:ef:0c:
d4:6e:1e:a6:a3:ba:7e:11:5a:03:c0:aa:0d:dd:60:6f:d0:e9:
d9:d9:8a:68:3f:40:66:a4:bd:3a:56:bf:e8:73:23:db:d5:a3:
fb:19:6c:e2:89:d5:19:20:07:47:a9:2f:91:e6:75:f8:3c:9e:
71:eb:a4:59:3e:12:ae:6f:bf:b8:3c:5f:d0:45:67:15:cb:d3:
3f:0f:d3:9c:60:1d:0c:bd:98:20:c6:fe:9a:c7:f9:bb:3e:89:
78:4a:3b:5e:2d:ba:93:49:b7:02:12:4c:94:e5:a9:f1:b2:d3:
b1:4a:2c:3a:ce:0d:a3:9a:d9:50:c8:3e:7d:d6:24:53:96:60:
b8:f6:0b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:17:56 2026 by rpki-client