
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/0A627D5653AD11EF94BC7F0BC4F9AE02.roa
File: 0A627D5653AD11EF94BC7F0BC4F9AE02.roa (raw, json)
Hash identifier: Yak8zAvp+zCmTFiqBb7JfPxw1OHM+UY0jPPh/BPCu6I=
Subject key identifier: D0:DC:EC:FB:D9:1B:35:BF:D6:FA:BA:AF:F4:96:A8:82:A1:89:94:DA
Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
Certificate serial: 0ADE
Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/0A627D5653AD11EF94BC7F0BC4F9AE02.roa
Signing time: Tue 30 Jun 2026 20:25:07 +0000
ROA not before: Tue 30 Jun 2026 20:25:07 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 131340
IP address blocks: 45.250.229.0/24 maxlen: 24
103.202.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl
rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Jul 2026 19:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2782 (0xade)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146944, serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
Validity
Not Before: Jun 30 20:25:07 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a442623-87fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:f4:55:af:39:ed:bc:5d:2c:2a:f8:df:b9:
3e:da:b5:62:9f:b4:5e:a3:a0:8a:3b:b4:e6:a2:5f:
f5:42:c1:eb:ce:6d:3e:2c:ea:c3:99:39:38:cd:a4:
96:79:44:d8:b4:f8:82:3c:0e:10:a7:f8:fb:66:39:
78:73:64:a0:3f:ac:05:92:7f:63:7e:f6:2b:50:fd:
34:68:c1:03:00:b8:17:b8:17:e3:6c:0e:dd:89:f2:
c2:45:fe:bd:e6:15:4d:13:c7:8d:63:50:37:57:18:
fa:33:06:e2:31:ff:02:5c:50:25:21:08:2c:36:8b:
eb:45:a9:7d:f4:af:b5:a5:2c:08:c2:90:73:c0:67:
39:91:72:09:59:3e:6a:04:16:1f:8b:c8:ee:3d:f9:
09:ff:99:0c:03:33:39:9b:ee:cc:bf:f5:a3:65:d6:
65:fe:f3:e0:a5:5d:ba:90:47:f1:21:43:71:97:e6:
02:7c:32:1a:6d:ca:cd:e7:77:4a:b4:e0:0d:22:2e:
89:41:91:c1:20:bb:50:eb:0d:6d:e4:64:fa:38:f8:
5f:bf:84:e9:6f:0b:ed:af:b5:c9:24:d6:c5:aa:f5:
c8:b6:2b:ff:da:aa:9a:2a:2a:75:39:c2:c1:2a:58:
de:95:f1:a6:31:f4:cc:ca:0b:ef:c9:7f:17:d7:de:
1a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DC:EC:FB:D9:1B:35:BF:D6:FA:BA:AF:F4:96:A8:82:A1:89:94:DA
X509v3 Authority Key Identifier:
keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/0A627D5653AD11EF94BC7F0BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.250.229.0/24
103.202.220.0/24
Signature Algorithm: sha256WithRSAEncryption
92:b4:aa:53:80:13:88:2c:17:6e:f9:26:b6:20:13:b2:c1:1c:
70:14:6c:18:27:a3:86:52:f1:ad:ab:84:58:42:a3:e8:c7:3b:
54:c0:fb:0f:b7:8e:98:64:06:69:07:2e:b5:5d:40:48:90:d4:
cc:fd:c9:88:aa:21:db:c6:fd:ae:9b:3a:77:bd:1e:41:f2:e6:
c5:65:79:95:52:f0:d1:66:30:0f:88:e2:f3:5c:4a:22:51:6e:
ae:77:b1:81:82:b4:87:58:7c:0e:cd:ed:8b:fc:11:54:b5:f0:
17:79:cd:d0:3a:66:98:0c:10:f2:7d:79:72:f8:b2:88:1e:e3:
85:3b:15:2e:e2:0b:5d:97:ab:08:65:4e:d9:9e:c2:4d:d2:7f:
cf:65:b9:c3:a4:8e:07:d2:b7:c7:47:d9:c4:91:1c:2c:1c:97:
0e:f9:a3:2b:cd:d3:e0:62:0c:30:fb:5f:c2:70:de:2b:cd:f1:
ba:ad:09:1a:14:4b:16:6c:b0:a6:ff:9e:69:f5:ba:ee:d6:88:
47:6c:12:20:f3:e4:69:90:b3:6a:f3:e7:d3:bc:cc:e2:95:9e:
61:e7:a9:2b:bc:35:83:ed:f1:c4:73:a1:aa:8a:b3:68:1b:57:
7a:9c:97:56:28:cd:29:bf:18:c4:a2:24:54:f6:1e:68:95:20:
03:c4:7e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 14:09:38 2026 by rpki-client