
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/E40449BED7A011EFB0DF210CC4F9AE02.roa
File: E40449BED7A011EFB0DF210CC4F9AE02.roa (raw, json)
Hash identifier: ZL9r3LkZsZ+yKkIHYt9MrrpLX2zWgZVZa1PQWAZtU/Y=
Subject key identifier: C9:2B:FD:9A:12:8E:90:DC:5B:C1:5E:C2:87:AD:91:FE:5D:6A:C8:FC
Certificate issuer: /CN=A9196977/serialNumber=B8070DFC57EAE0EBE8AEE4BB5C91D06ABD1CA71A
Certificate serial: 068F
Authority key identifier: B8:07:0D:FC:57:EA:E0:EB:E8:AE:E4:BB:5C:91:D0:6A:BD:1C:A7:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/E40449BED7A011EFB0DF210CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:35:56 +0000
ROA not before: Sat 22 Nov 2025 21:43:44 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 138685
IP address blocks: 103.44.44.0/24 maxlen: 32
2001:df1:6c00::/47 maxlen: 47
2001:df1:6c00::/48 maxlen: 48
2001:df1:6c01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.crl
rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1679 (0x68f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196977, serialNumber=B8070DFC57EAE0EBE8AEE4BB5C91D06ABD1CA71A
Validity
Not Before: Nov 22 21:43:44 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a432ac-89a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:fe:48:dd:aa:26:d0:d9:a5:7d:78:03:a4:
c8:6d:61:a9:98:24:3d:5f:4c:be:1a:20:3a:be:e9:
a7:c8:18:52:1a:35:64:a8:f6:f9:b3:57:63:63:19:
90:ec:bd:60:6d:35:be:0f:3f:7c:46:88:e7:60:81:
7d:c2:45:e7:90:a8:50:2e:e5:1b:19:6b:91:1b:0c:
c6:53:82:89:b4:a7:21:1f:59:a0:4e:dc:60:b8:a0:
af:0d:58:3e:cc:78:b5:e8:c7:9e:09:db:5c:3e:7d:
26:c7:8f:4b:fd:42:60:1e:08:71:ff:7a:84:30:d5:
a2:d0:bc:d9:cd:5a:2e:cc:74:9f:fc:f6:0d:7a:86:
82:69:6b:c4:89:af:ac:b3:0f:ca:e2:f4:3b:b3:01:
7c:1a:7e:a0:c2:9f:42:02:f4:c0:79:9f:9e:27:14:
93:5e:4e:24:bf:36:da:e2:39:50:93:5f:0c:7c:55:
57:b6:65:2a:57:ff:f3:72:08:e4:be:f2:40:02:7b:
04:76:8b:7a:ab:f0:62:7a:05:28:5f:ad:c0:30:79:
70:51:29:de:bc:da:4f:ae:a5:9f:bc:03:fe:d5:18:
bf:4c:1a:35:53:0f:ba:73:0c:3c:83:59:ff:b5:1a:
93:9e:9d:81:a6:fd:d3:11:d8:48:5d:98:92:d4:91:
02:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2B:FD:9A:12:8E:90:DC:5B:C1:5E:C2:87:AD:91:FE:5D:6A:C8:FC
X509v3 Authority Key Identifier:
keyid:B8:07:0D:FC:57:EA:E0:EB:E8:AE:E4:BB:5C:91:D0:6A:BD:1C:A7:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/E40449BED7A011EFB0DF210CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.44.44.0/24
IPv6:
2001:df1:6c00::/47
Signature Algorithm: sha256WithRSAEncryption
46:0a:0a:c2:be:9e:59:c4:b3:b0:1a:b7:a9:5b:17:41:c5:d8:
03:7b:bf:d8:0f:dc:a0:25:94:81:b8:af:28:b5:bf:97:3c:4b:
b1:69:6b:c0:38:79:8e:d8:48:91:01:f5:de:49:30:77:61:fe:
2a:39:61:38:98:cb:9a:10:ab:37:ea:a9:e4:99:a9:77:01:a8:
a2:3e:6f:26:37:e3:79:0b:a0:1d:c8:f2:52:fb:69:27:7a:7e:
9b:2a:d7:52:0c:a2:91:8a:f2:8f:de:fc:d2:4a:c2:db:f1:9d:
4a:ce:1a:5f:de:6a:35:fb:47:73:4b:86:f3:dd:10:05:22:d8:
85:33:38:3a:87:a1:89:45:b4:de:cb:fb:e5:36:fc:d9:40:bb:
e2:05:04:6c:73:1a:a0:8f:a5:ef:7d:52:89:ee:a9:b5:0c:b2:
54:a1:f4:6a:13:07:38:d6:20:3e:b2:0d:db:84:d1:38:a8:a9:
03:ea:ff:4c:29:39:e3:99:1a:e1:c6:55:2a:00:e3:9d:9b:ec:
98:58:ed:15:d5:2f:0f:77:72:e1:ff:78:9b:16:d8:f9:4a:57:
e5:5b:f9:82:60:c5:1f:49:dd:41:6b:cc:08:dd:30:d1:9f:a2:
7f:7f:ea:18:24:23:85:f4:4b:95:4e:7c:b9:8c:10:f4:95:dd:
5f:47:9d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:08:49 2026 by rpki-client