
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/4F7CFB9A82B711EE997EB92AC4F9AE02.roa
File: 4F7CFB9A82B711EE997EB92AC4F9AE02.roa (raw, json)
Hash identifier: lsOH+cRxJAvD+WNP67/VAdS/2QTVCf6DlflH3YeqIeE=
Subject key identifier: 44:73:8D:19:52:CC:59:D5:B0:EB:39:EB:53:C1:1D:6D:14:F9:53:4E
Certificate issuer: /CN=A9196CE1/serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323
Certificate serial: 01A7
Authority key identifier: 3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/4F7CFB9A82B711EE997EB92AC4F9AE02.roa
Signing time: Wed 04 Feb 2026 17:34:22 +0000
ROA not before: Wed 04 Feb 2026 17:34:22 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 136418
IP address blocks: 202.47.164.0/23 maxlen: 23
202.47.164.0/24 maxlen: 24
202.47.165.0/24 maxlen: 24
2001:df3:2440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl
rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:38:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196CE1, serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323
Validity
Not Before: Feb 4 17:34:22 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6983831e-7d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:9b:2e:e4:ad:34:48:81:3e:86:2a:19:c3:
08:6b:06:9c:97:ed:cc:65:80:04:57:2b:01:3e:7d:
4e:e1:23:07:74:27:59:d7:a3:96:ed:0b:59:f9:fd:
ba:e5:0c:01:40:68:ae:1c:86:af:5c:d6:07:8a:bb:
01:c9:52:d3:9f:21:fd:a9:d3:5c:a8:6c:bf:71:60:
44:67:dd:bd:19:09:7d:db:63:3e:a4:0f:24:90:8d:
8f:42:62:d1:a2:37:d3:b0:8d:0d:38:96:ae:c0:ee:
cd:6b:9f:d3:b6:08:b8:e7:ae:f7:e8:6f:1f:8f:94:
b8:99:1b:81:a4:65:e3:20:3f:90:1e:55:e0:cd:2b:
51:c0:75:b2:8b:ed:24:45:17:ec:fb:d3:52:e7:ff:
7f:ef:4f:fc:38:90:cb:a8:de:8d:88:4e:0e:7a:ad:
f0:ba:2e:4a:69:64:48:76:cb:50:f1:3f:99:a9:e7:
a9:a1:d7:15:79:38:9d:f8:72:9f:1a:38:18:8b:6f:
d2:f5:f3:ca:0c:d9:89:ad:49:35:22:c6:b0:f3:6b:
db:29:eb:e3:f2:54:e0:e5:c2:09:1c:b0:cb:85:13:
6d:70:19:8d:e6:7a:ba:56:a7:2c:b0:26:4c:bb:fe:
1e:be:a5:05:ed:e1:ef:65:85:74:84:54:7b:00:96:
e3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:73:8D:19:52:CC:59:D5:B0:EB:39:EB:53:C1:1D:6D:14:F9:53:4E
X509v3 Authority Key Identifier:
keyid:3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/4F7CFB9A82B711EE997EB92AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.47.164.0/23
IPv6:
2001:df3:2440::/48
Signature Algorithm: sha256WithRSAEncryption
a5:98:0e:bf:f7:ea:ad:12:85:e4:a6:8e:c3:73:72:ea:26:b7:
48:36:aa:9f:dc:45:60:5a:b7:09:7b:d7:dd:cc:9a:a9:79:57:
c9:c2:5e:c3:18:04:4d:21:f6:0e:9c:d1:c9:f5:de:9d:70:c2:
c6:ce:fb:00:c0:f1:06:dc:c7:5d:e8:cc:b1:8e:47:8a:a3:61:
9e:e0:1c:9b:80:e4:55:6a:ac:c8:bc:0e:58:20:c5:ee:7b:a8:
03:e6:84:5d:77:37:c4:01:ae:19:99:1e:63:9a:8b:d7:38:d3:
46:06:bc:34:65:64:17:74:8c:89:39:44:bd:7b:e9:f9:e7:af:
54:eb:6e:88:00:6c:b8:26:94:f8:ce:11:2d:21:86:60:8f:b3:
93:06:41:10:13:d4:32:8d:ae:dd:1f:bb:f1:01:ec:99:1a:fd:
ac:ff:e4:0c:fa:82:ee:e1:8f:51:a3:f1:9a:f0:34:80:dd:6f:
f1:53:68:c6:03:3a:84:30:f7:e1:e3:78:9f:97:5f:6c:d3:89:
ad:39:62:90:7b:1f:7a:a8:09:5d:2a:3a:ee:31:5e:af:05:e3:
f2:61:dc:df:16:a2:38:c3:f2:86:a3:0c:9c:3d:aa:6a:cc:c9:
ec:4b:c9:48:b9:6a:ed:f0:69:19:07:26:12:ee:0c:cc:ec:f6:
a8:0c:fb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:45:36 2026 by rpki-client