
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4F698B525F5011EFA66ADA2CC4F9AE02.roa
File: 4F698B525F5011EFA66ADA2CC4F9AE02.roa (raw, json)
Hash identifier: B4Rsfufpu17om7qoRwQ2bDsyn+LHB10lPEoOqzSkUjs=
Subject key identifier: 9F:61:11:03:1C:52:46:86:10:8B:A4:85:BE:17:FE:2D:1B:D5:39:2D
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3DAD
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4F698B525F5011EFA66ADA2CC4F9AE02.roa
Signing time: Thu 06 Aug 2026 15:11:41 +0000
ROA not before: Thu 06 Aug 2026 15:11:41 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 17876
IP address blocks: 210.112.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 14:22:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15789 (0x3dad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Aug 6 15:11:41 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a74a42d-a336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:62:41:c7:1e:3f:e7:71:10:15:bc:9c:37:5e:
ac:fb:07:37:a5:47:1a:25:e6:49:8e:04:6a:f2:e7:
77:d4:ca:c3:28:e6:b2:b4:6f:82:23:5c:d0:dd:c0:
e6:d1:d1:86:07:f6:5c:d1:9c:38:44:5e:e8:17:86:
e4:ef:7b:03:a5:eb:c3:0d:23:c0:54:18:9f:92:0b:
f1:ca:f8:c6:22:64:2f:88:5b:69:da:a8:58:7b:2a:
d6:19:bc:6c:d0:9b:73:49:9a:f9:46:1a:ff:20:78:
1d:20:74:a3:7f:15:9a:c0:cb:95:d0:24:d7:19:a9:
eb:c2:33:41:27:5a:d7:56:aa:43:2e:a0:f2:d7:86:
01:41:74:bf:0f:ad:b6:b2:15:67:65:af:bf:82:36:
24:3e:ee:b4:b5:98:a9:0b:6d:93:05:75:16:df:7a:
a3:4b:85:e9:40:50:8e:fa:cb:69:c0:3f:3d:4b:a6:
05:71:f6:fe:b0:10:47:f2:9a:b4:49:90:5e:b7:a8:
bf:1a:f5:08:2a:33:d9:7e:de:9c:fb:7c:7c:66:65:
31:b4:de:55:f3:88:ac:7f:a9:f8:f4:3d:31:f7:25:
78:c3:ac:3e:e1:de:74:de:47:72:73:e0:5d:db:d2:
f8:76:1a:b0:04:b0:d1:e0:04:63:f1:b6:c8:5d:2c:
bc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:61:11:03:1C:52:46:86:10:8B:A4:85:BE:17:FE:2D:1B:D5:39:2D
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4F698B525F5011EFA66ADA2CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.112.195.0/24
Signature Algorithm: sha256WithRSAEncryption
10:a9:7b:3e:43:2b:bc:9c:f5:dd:34:f3:14:68:64:52:53:00:
94:15:d0:18:e1:91:79:6d:f5:10:83:2d:aa:60:79:27:e5:34:
13:1d:5c:05:05:86:f2:1f:ad:d7:c0:72:65:64:25:e5:84:c1:
5c:7a:4f:33:8c:16:54:ca:7e:d0:63:f4:62:61:c6:6c:60:d3:
4d:1c:e6:b1:0f:0f:86:76:6f:69:f7:c7:2d:99:42:70:4e:5f:
e9:35:46:64:74:46:72:bc:f8:c9:26:52:6a:9d:ee:78:52:32:
1c:01:65:1d:cb:26:8e:96:fe:78:37:46:a6:56:b6:d8:a9:a4:
58:eb:f6:b0:f6:9b:1e:41:26:4c:57:71:5b:02:dc:45:6a:92:
bc:c6:f9:d5:55:24:f1:70:c9:a1:45:85:31:de:41:69:96:dd:
39:89:63:5c:23:f1:57:33:4d:2b:1d:f7:4b:fb:3b:2c:4c:10:
92:2b:fe:28:52:52:01:4a:86:25:fd:4d:e2:30:ae:c2:11:b1:
91:19:08:d4:71:a2:d4:8b:45:e3:33:bc:b9:e7:f8:c6:1f:6c:
ef:d5:ca:27:66:17:a1:7b:ae:a7:a3:8b:fb:7a:2e:84:14:ac:
5a:3e:d5:a6:cf:6d:ec:0a:73:58:0d:ad:b4:64:d0:80:38:95:
b8:25:65:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:12:37 2026 by rpki-client