
$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/4C304B9EA12F11EFBF514933C4F9AE02.roa
File: 4C304B9EA12F11EFBF514933C4F9AE02.roa (raw, json)
Hash identifier: 0Gbb0BT+CXcDAGbYX1J3w1Q6o3JO49oKQ4hxn8ma1BU=
Subject key identifier: C4:8F:00:A4:4A:FF:18:E7:B5:30:96:F0:63:31:D2:A3:92:70:A3:5D
Certificate issuer: /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5
Certificate serial: 0598
Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/4C304B9EA12F11EFBF514933C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:13:40 +0000
ROA not before: Tue 16 Dec 2025 23:19:36 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 9232
IP address blocks: 103.174.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl
rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Mar 2026 22:54:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1432 (0x598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91623B9, serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5
Validity
Not Before: Dec 16 23:19:36 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a473c4-4a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:35:01:d0:31:eb:0a:9f:70:2a:b2:7c:80:70:
05:f6:a4:d5:c2:6a:8e:f6:a9:ff:fd:8d:00:a8:fe:
e8:9b:e1:30:de:ef:96:2d:f0:98:cd:74:0e:b2:6c:
e8:71:cd:5b:64:df:3b:f0:0f:8f:d4:80:ba:6f:8c:
ed:21:d7:3b:5d:0a:dd:44:8c:ff:8a:0e:ec:be:5d:
f9:5e:19:d7:4b:99:47:0f:57:a4:0d:50:ee:10:99:
28:99:70:00:98:d5:30:43:26:af:a1:39:30:cf:eb:
0b:6f:3c:90:43:39:28:fa:35:44:be:9e:ae:0c:70:
74:59:8a:59:35:d0:5c:27:8b:80:47:f7:86:b6:82:
be:dc:e1:7f:f6:e8:eb:1c:52:18:4a:72:11:fd:df:
13:1f:66:c7:72:b6:71:79:64:24:4e:8b:c5:98:7c:
b4:05:15:2d:b2:e2:ed:18:0a:ef:ab:3e:e4:e2:26:
bc:ea:60:3b:bc:f4:07:26:b9:6d:b2:90:88:7a:3f:
db:e4:17:44:f6:25:63:cd:a9:ad:07:a4:c8:ae:47:
14:11:9a:20:b2:9a:2e:5e:27:f8:7f:c9:19:16:9f:
ed:2b:05:11:76:49:5d:d4:d9:b6:7c:95:3d:9f:d0:
e9:fd:b6:7e:98:a7:0b:b4:3d:ed:a6:0c:02:88:41:
b3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8F:00:A4:4A:FF:18:E7:B5:30:96:F0:63:31:D2:A3:92:70:A3:5D
X509v3 Authority Key Identifier:
keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/4C304B9EA12F11EFBF514933C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.174.96.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:f7:75:7a:9f:6b:c8:5a:51:67:85:44:2e:9e:b0:0b:0d:96:
05:e0:d5:93:2f:61:0a:6c:a7:0c:be:29:8b:e0:09:21:38:32:
ab:40:72:de:75:be:6e:e7:ea:7a:a9:8a:93:1d:05:bf:0e:a3:
d0:3b:ac:5d:5d:d6:99:b8:97:bb:b8:cb:18:e8:31:1f:70:cc:
f8:22:aa:a3:cd:84:f9:ad:67:79:53:68:68:64:37:5f:b8:17:
6e:bb:04:98:9e:91:1e:f0:d5:41:b9:33:2d:00:41:d9:5d:53:
b6:c7:3f:03:3c:2d:dd:c2:43:ec:c3:88:8b:d7:3c:02:86:58:
1c:78:9f:1c:4f:9c:09:d1:3b:26:40:8f:01:17:cd:cf:73:44:
a4:4f:45:42:f1:a3:17:1c:42:f0:3a:aa:09:c8:10:51:65:1b:
73:c7:56:44:f1:ca:25:05:56:51:9d:b2:83:c6:34:6a:af:50:
7b:38:d3:ed:e5:d4:37:1e:21:fe:44:a7:aa:00:f4:f2:2d:af:
78:55:97:f0:ae:da:a0:05:97:de:ed:10:23:7d:83:23:fe:f8:
bf:71:49:cf:9d:56:70:21:d6:3e:02:89:22:94:72:43:88:3b:
77:2d:2a:0b:30:f2:eb:3f:d3:a5:75:4c:ae:7b:f3:bc:6e:c0:
c7:5a:61:ae
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjIzQjkxMTAvBgNVBAUTKDk4RTFFQ0JENDVENzg3OUY5QkM5NDM5RjRDNkMyRjI3
MTRBRDM2RjUwHhcNMjUxMjE2MjMxOTM2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzNjNC00YThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4DUB0DHrCp9wKrJ8gHAF9qTVwmqO9qn//Y0AqP7om+Ew3u+WLfCYzXQOsmzo
cc1bZN878A+P1IC6b4ztIdc7XQrdRIz/ig7svl35XhnXS5lHD1ekDVDuEJkomXAA
mNUwQyavoTkwz+sLbzyQQzko+jVEvp6uDHB0WYpZNdBcJ4uAR/eGtoK+3OF/9ujr
HFIYSnIR/d8TH2bHcrZxeWQkTovFmHy0BRUtsuLtGArvqz7k4ia86mA7vPQHJrlt
spCIej/b5BdE9iVjzamtB6TIrkcUEZogspouXif4f8kZFp/tKwURdkld1Nm2fJU9
n9Dp/bZ+mKcLtD3tpgwCiEGz1wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMSPAKRK
/xjntTCW8GMx0qOScKNdMB8GA1UdIwQYMBaAFJjh7L1F14efm8lDn0xsLycUrTb1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjNCOS83OENFQUNCQzJC
MzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1LWJ5VU9mVEd3dkp4U3RO
dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21PSHN2VVhYaDUtYnlVT2ZUR3d2SnhTdE52VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjIzQjkvNzhDRUFDQkMyQjM2MTFFQ0FENTk1QjdDQzRGOUFFMDIvNEMzMDRCOUVB
MTJGMTFFRkJGNTE0OTMzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ65gMA0GCSqGSIb3DQEBCwUAA4IBAQBs93V6n2vIWlFnhUQunrAL
DZYF4NWTL2EKbKcMvimL4AkhODKrQHLedb5u5+p6qYqTHQW/DqPQO6xdXdaZuJe7
uMsY6DEfcMz4IqqjzYT5rWd5U2hoZDdfuBduuwSYnpEe8NVBuTMtAEHZXVO2xz8D
PC3dwkPsw4iL1zwChlgceJ8cT5wJ0TsmQI8BF83Pc0SkT0VC8aMXHELwOqoJyBBR
ZRtzx1ZE8colBVZRnbKDxjRqr1B7ONPt5dQ3HiH+RKeqAPTyLa94VZfwrtqgBZfe
7RAjfYMj/vi/cUnPnVZwIdY+AokilHJDiDt3LSoLMPLrP9OldUyue/O8bsDHWmGu
-----END CERTIFICATE-----
Generated at Tue Mar 10 06:44:50 2026 by rpki-client