
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/D470449E0E4411ED9C0F5B45C4F9AE02.roa
File: D470449E0E4411ED9C0F5B45C4F9AE02.roa (raw, json)
Hash identifier: 95MXEPd3XWfhWFM2kZfvjKE+kkcge5QqhzEgDRS8E0s=
Subject key identifier: 8C:74:21:13:7B:D9:C9:0E:A7:93:27:DE:D3:37:69:04:9A:93:6A:25
Certificate issuer: /CN=A91A78A7/serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190
Certificate serial: 0358
Authority key identifier: 45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/D470449E0E4411ED9C0F5B45C4F9AE02.roa
Signing time: Tue 21 Jul 2026 02:27:16 +0000
ROA not before: Tue 21 Jul 2026 02:27:16 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 3661
IP address blocks: 43.230.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl
rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 01:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 856 (0x358)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A78A7, serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190
Validity
Not Before: Jul 21 02:27:16 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a5ed904-b9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:b1:03:60:f4:2a:4d:b5:78:5d:94:de:c1:
29:de:ac:64:8e:93:8f:4e:64:db:7a:92:80:78:02:
49:39:76:d4:40:3b:8d:59:18:74:ee:4e:78:14:70:
eb:f8:ed:7c:48:8a:94:9b:08:00:c6:14:28:50:39:
e3:c6:7f:f6:c3:e2:c8:69:d0:5a:df:95:90:76:98:
00:3e:43:88:a8:a0:94:43:36:bf:f4:5f:6a:9d:59:
fe:06:88:1d:71:0a:73:6d:a0:ca:08:c5:2b:4b:81:
db:de:4a:11:59:1c:de:cb:90:a0:82:91:80:dc:51:
18:79:e5:8d:f2:87:81:6e:be:74:79:6d:f9:ab:6d:
73:88:4c:0b:0d:47:b0:04:73:a0:c9:5c:3b:8a:68:
e8:ed:43:6f:6d:ff:f4:0a:34:65:32:0e:c5:84:b6:
63:13:86:d1:60:99:28:25:68:f8:93:14:06:c4:b6:
f5:d6:fd:bd:c6:77:7f:79:8c:dc:a0:95:5a:8a:e5:
f1:43:72:c2:58:0b:48:f7:51:64:19:a6:2c:26:4f:
02:7e:64:4b:10:b7:fd:12:9a:e3:97:70:ab:35:fe:
e3:21:50:93:58:36:a1:f2:71:7a:be:dc:f9:11:25:
64:f9:11:6e:d9:74:b7:2e:90:4a:69:50:83:78:56:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:74:21:13:7B:D9:C9:0E:A7:93:27:DE:D3:37:69:04:9A:93:6A:25
X509v3 Authority Key Identifier:
keyid:45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/D470449E0E4411ED9C0F5B45C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.230.116.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:d0:50:61:27:f5:b9:3e:e0:f8:76:06:94:70:74:a8:48:60:
93:ab:cb:b5:59:6e:3e:db:67:c6:2b:99:e8:69:f2:b5:b6:a5:
8a:55:66:96:a4:e6:24:76:9f:e3:f2:1f:03:3e:3a:7e:a6:5a:
fa:79:18:64:35:8b:8a:18:a7:7f:f8:5f:67:ec:62:1c:f3:b1:
e2:9c:13:50:76:98:49:d2:24:0c:29:8a:3e:05:9f:ce:d7:de:
b4:ae:30:49:38:ed:10:2a:cc:9b:15:73:3d:65:eb:1a:47:51:
87:ad:8c:87:0c:b4:c0:28:da:4e:9e:9b:b2:0a:12:0d:04:eb:
0d:22:b6:85:15:1c:aa:86:9e:5a:71:3a:65:eb:93:34:ba:06:
0e:23:3d:50:9c:82:1e:77:eb:56:91:9d:b2:8e:46:dc:33:4c:
dc:c9:4e:11:b0:95:0c:f6:fb:de:24:6a:10:9e:5e:ee:9a:70:
df:0a:8d:cf:a9:de:7f:03:51:f4:df:10:59:8d:61:fa:f2:25:
73:ef:61:c4:5a:3e:02:26:8f:f2:18:9f:4a:80:35:85:8b:e6:
3b:e4:97:fa:e3:c8:df:fa:0c:80:b7:62:08:00:dd:52:95:6b:
c2:44:39:6d:a4:e7:8c:3f:f9:a0:e4:95:3d:a7:f1:7b:5e:5c:
90:1a:d2:39
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTc4QTcxMTAvBgNVBAUTKDQ1MzM3REM1RTQ4MzlFNDk4MTkxMjlERUEyQTk0NjFC
MDIxQ0QxOTAwHhcNMjYwNzIxMDIyNzE2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTVlZDkwNC1iOWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoh2xA2D0Kk21eF2U3sEp3qxkjpOPTmTbepKAeAJJOXbUQDuNWRh07k54FHDr
+O18SIqUmwgAxhQoUDnjxn/2w+LIadBa35WQdpgAPkOIqKCUQza/9F9qnVn+Bogd
cQpzbaDKCMUrS4Hb3koRWRzey5CggpGA3FEYeeWN8oeBbr50eW35q21ziEwLDUew
BHOgyVw7imjo7UNvbf/0CjRlMg7FhLZjE4bRYJkoJWj4kxQGxLb11v29xnd/eYzc
oJVaiuXxQ3LCWAtI91FkGaYsJk8CfmRLELf9Eprjl3CrNf7jIVCTWDah8nF6vtz5
ESVk+RFu2XS3LpBKaVCDeFY+QwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIx0IRN7
2ckOp5Mn3tM3aQSak2olMB8GA1UdIwQYMBaAFEUzfcXkg55JgZEp3qKpRhsCHNGQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzhBNy8xMDRCMTk0NjBD
QkQxMUVEQUE3N0QxMkRDNEY5QUUwMi9SVE45eGVTRG5rbUJrU25lb3FsR0d3SWMw
WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JUTjl4ZVNEbmttQmtTbmVvcWxHR3dJYzBaQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTc4QTcvMTA0QjE5NDYwQ0JEMTFFREFBNzdEMTJEQzRGOUFFMDIvRDQ3MDQ0OUUw
RTQ0MTFFRDlDMEY1QjQ1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCK+Z0MA0GCSqGSIb3DQEBCwUAA4IBAQAc0FBhJ/W5PuD4dgaUcHSo
SGCTq8u1WW4+22fGK5noafK1tqWKVWaWpOYkdp/j8h8DPjp+plr6eRhkNYuKGKd/
+F9n7GIc87HinBNQdphJ0iQMKYo+BZ/O1960rjBJOO0QKsybFXM9ZesaR1GHrYyH
DLTAKNpOnpuyChINBOsNIraFFRyqhp5acTpl65M0ugYOIz1QnIIed+tWkZ2yjkbc
M0zcyU4RsJUM9vveJGoQnl7umnDfCo3Pqd5/A1H03xBZjWH68iVz72HEWj4CJo/y
GJ9KgDWFi+Y75Jf648jf+gyAt2IIAN1SlWvCRDltpOeMP/mg5JU9p/F7XlyQGtI5
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:31:33 2026 by rpki-client