
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/0463FF50526C11EC80A31615C4F9AE02.roa
File: 0463FF50526C11EC80A31615C4F9AE02.roa (raw, json)
Hash identifier: /IcPEQXztUD25ppGPtUF0d61zWL2uv6MVc64gveJDyI=
Subject key identifier: 5F:A8:36:3D:91:7B:BE:DC:C1:6A:69:99:E0:A4:17:44:B8:9F:9C:13
Certificate issuer: /CN=A9147DCA/serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9
Certificate serial: 0768
Authority key identifier: 2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/0463FF50526C11EC80A31615C4F9AE02.roa
Signing time: Fri 14 Aug 2026 22:42:44 +0000
ROA not before: Fri 14 Aug 2026 22:42:44 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 36351
IP address blocks: 43.245.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl
rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 21:36:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1896 (0x768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147DCA, serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9
Validity
Not Before: Aug 14 22:42:44 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a7f99e4-58cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:3e:ef:6a:60:eb:e8:e2:87:85:9a:46:a6:
e3:01:39:f6:f7:56:d2:25:f9:27:23:ea:a3:43:36:
ee:02:09:08:42:af:bf:b1:f8:03:75:e2:b9:5c:36:
9a:32:52:db:f0:1a:a0:a0:10:a2:21:a5:db:8a:77:
54:a9:89:2b:79:7e:ce:ea:1c:56:15:e7:92:5d:cf:
46:7c:55:a4:ce:da:3f:bb:3a:46:52:57:2d:e2:fe:
9b:17:e9:99:43:ca:f9:bc:18:b6:b4:35:38:ba:99:
8a:c6:47:aa:27:c7:6a:a1:c1:0d:9a:af:62:e9:a6:
60:f1:ca:6b:2c:29:74:49:48:00:e7:d6:71:9e:a0:
84:30:b6:26:df:42:8c:9e:c2:db:9e:a4:4d:d9:a4:
e2:5d:a6:61:fe:b1:ec:e2:29:4d:84:a5:96:fd:6e:
bf:56:15:8d:67:cf:3d:09:95:1d:52:c2:e9:49:4a:
24:5b:fc:cb:a7:6f:63:35:98:4c:44:8f:1b:46:13:
77:90:3e:a8:c3:ab:88:ac:02:7f:98:fc:ec:31:a0:
3a:38:ac:6f:13:d4:64:3c:2d:b1:ff:77:f5:94:dd:
89:3a:80:17:1b:ed:84:e8:51:17:2b:f5:93:cd:67:
74:6d:4e:e6:56:76:f1:79:a4:d7:96:a0:c4:ae:55:
85:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A8:36:3D:91:7B:BE:DC:C1:6A:69:99:E0:A4:17:44:B8:9F:9C:13
X509v3 Authority Key Identifier:
keyid:2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/0463FF50526C11EC80A31615C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.245.168.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:5c:49:e9:91:84:b6:cf:fb:e0:5b:3f:21:e9:f2:84:d3:db:
59:1b:9e:1f:46:43:9e:dc:86:d6:5e:e0:d5:f5:cb:ea:87:01:
3d:91:48:9b:24:4e:80:3e:43:56:27:98:c7:70:f1:be:12:c7:
aa:55:15:6c:63:f0:df:b7:89:f9:8f:56:de:93:75:30:24:b5:
ed:f4:74:11:eb:46:2e:e7:4e:47:19:10:4e:2d:66:c4:9d:2d:
66:fb:22:6b:95:86:1c:85:8a:4e:51:a1:2c:0f:2a:d5:ee:5d:
51:6c:23:04:fa:af:8a:31:2f:94:4f:5b:e6:a8:64:4e:14:78:
28:2e:86:b0:f1:ac:77:fb:67:c5:f0:3b:53:03:45:1a:d6:d2:
ff:d1:f8:cd:7a:2d:c1:d7:88:cb:1b:f0:95:42:09:56:c4:e7:
d8:b2:94:84:48:8e:65:cc:9f:76:4d:de:29:52:b1:e8:f9:f5:
fb:aa:61:f1:25:24:e8:2e:00:3e:85:08:62:cc:b6:72:d3:30:
73:c5:08:83:81:c1:ca:08:4c:b2:7d:61:d3:b2:a0:d6:ab:90:
5e:39:e5:0b:b0:06:75:34:a7:1e:be:14:44:ab:1e:62:e3:27:
23:c7:7a:16:a6:ea:7f:ae:3a:8f:5f:12:38:ea:e3:f4:a9:c0:
ac:4c:a2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:33:42 2026 by rpki-client