
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/4CF2D3B68C5411EF84ABE03CC4F9AE02.roa
File: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (raw, json)
Hash identifier: KA8N1htPIafM0ykcB4avk8azmo1jpDzuUPofhuBqk30=
Subject key identifier: 8A:EE:6D:A0:0F:A9:96:4B:4F:6B:EE:0E:F5:FF:4B:4F:82:74:CC:A9
Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial: 2699
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/4CF2D3B68C5411EF84ABE03CC4F9AE02.roa
Signing time: Mon 20 Jul 2026 16:16:26 +0000
ROA not before: Mon 20 Jul 2026 16:16:26 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 135645
IP address blocks: 203.177.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 16:17:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9881 (0x2699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Validity
Not Before: Jul 20 16:16:26 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a5e49da-ca4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7d:9e:a9:ed:ee:4d:38:26:71:72:f4:47:13:
0c:2d:f1:8e:80:b4:bb:00:6d:0a:e4:b7:ca:0f:e2:
38:7d:50:fb:2b:8a:3d:3b:c9:54:da:97:78:62:e0:
f6:07:ed:f8:8c:c7:1d:29:84:8a:2a:de:3b:9e:e9:
b3:2c:f0:e5:90:a6:0e:5f:93:ec:89:04:65:40:60:
f4:63:15:c0:68:c9:0e:7a:53:b4:91:4e:ed:12:6d:
a2:f6:eb:5b:09:71:f0:9c:96:04:b5:78:8e:7c:a9:
ba:84:3f:cd:41:15:e9:af:e2:26:3d:a2:8f:09:88:
f7:ef:dc:e1:2d:f4:93:3c:58:80:3e:30:f7:57:6b:
95:4d:dd:c6:90:55:b1:83:85:2e:00:fe:c1:68:42:
0c:9e:eb:f9:c6:72:91:be:4f:8f:28:24:74:87:3d:
9b:ab:b7:c3:e5:d7:ae:48:57:b7:da:a5:9f:7b:df:
a9:a8:cf:06:75:78:6c:37:6e:b9:9a:c4:0a:4b:c5:
4c:e2:bf:87:3a:70:c4:2d:89:ea:f7:64:cf:e9:57:
25:1e:9a:a3:64:9c:94:7a:07:8d:4b:75:e3:14:f4:
47:9e:af:69:53:d2:84:58:55:fd:80:f0:00:52:8b:
ed:b4:44:41:32:28:4f:5b:de:0a:1d:77:66:e9:0f:
c0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EE:6D:A0:0F:A9:96:4B:4F:6B:EE:0E:F5:FF:4B:4F:82:74:CC:A9
X509v3 Authority Key Identifier:
keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/4CF2D3B68C5411EF84ABE03CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.177.125.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:1a:bb:86:d0:1a:a7:db:ce:0b:73:d5:32:02:16:37:eb:3c:
51:d2:3a:32:72:a3:d6:6a:27:d7:84:8c:d3:3c:76:dc:b3:0d:
eb:41:d2:e0:1a:85:ed:17:c3:b4:bb:64:62:a3:0f:fa:46:dd:
25:5b:e9:ff:b6:fe:28:07:b7:d0:f5:c3:77:61:8a:52:ba:da:
3c:80:02:a7:c6:01:2e:99:81:b1:b3:a7:3a:24:ab:0c:b4:3e:
00:2a:b4:7b:18:62:e1:3b:49:a5:03:d6:66:c0:cd:07:60:55:
ec:11:9e:14:a8:7c:be:d4:f4:cc:66:aa:ba:9c:72:28:f8:44:
ca:01:6e:13:6e:95:b6:35:89:76:7b:21:30:6c:13:83:9d:d2:
69:04:f2:c8:a9:cb:ce:ea:88:e0:43:4d:b8:86:19:16:db:6d:
aa:ad:b9:e4:5c:46:bf:8f:cb:26:b1:4f:e4:29:d8:e1:e0:ca:
4e:45:5e:90:a2:c0:38:46:a7:23:2a:95:14:91:9e:77:40:c2:
bd:9d:78:5c:22:d0:79:4f:93:61:a7:66:08:eb:7e:74:fc:6a:
fb:26:39:f1:6d:80:f0:08:e2:bc:62:3a:dc:ec:d5:09:14:af:
ca:9b:02:a1:53:92:64:8a:f0:91:c8:a2:90:c9:d6:48:92:71:
b7:64:ec:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:30:54 2026 by rpki-client