
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/476FD748C1CB11EF9557BF09C4F9AE02.roa
File: 476FD748C1CB11EF9557BF09C4F9AE02.roa (raw, json)
Hash identifier: OuUMVaCnpzXOw+KcMIPEzDWBcXZhUkrWBBzFkgFr7Ao=
Subject key identifier: 8F:76:A2:0A:9D:26:CE:D3:36:45:8E:0B:84:29:10:BB:8A:06:08:C8
Certificate issuer: /CN=A9163358/serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1
Certificate serial: 0100
Authority key identifier: 7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/476FD748C1CB11EF9557BF09C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:48:26 +0000
ROA not before: Wed 01 Oct 2025 07:35:18 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 4755
IP address blocks: 202.44.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl
rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 05:45:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163358, serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1
Validity
Not Before: Oct 1 07:35:18 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a5952a-c09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:88:98:77:d6:fb:0a:60:8e:bc:0f:5a:77:72:
84:ae:87:ae:07:3f:58:be:a1:84:3e:5f:f5:86:88:
0a:9c:09:82:fb:91:bd:93:cc:3f:b9:ba:fa:d7:cc:
68:6c:b6:08:e1:82:65:ee:2e:d9:b4:ae:eb:d3:0f:
13:73:05:ad:7c:43:7f:fb:c8:80:f0:79:d0:19:db:
c9:39:cb:fc:b3:ba:48:29:99:c9:95:1f:1e:ee:e6:
f7:63:9b:f7:c3:80:aa:42:61:b7:58:72:a1:fa:29:
72:bb:c1:ac:c7:1d:d1:f5:58:34:e4:5a:c6:af:66:
1a:5a:c3:3c:8c:c0:06:3d:97:51:f1:6d:cd:66:2b:
e9:49:67:30:b3:c8:c8:0b:47:31:ac:a3:6d:f5:2e:
10:57:fb:2d:74:c6:40:ac:27:34:06:5e:4f:dd:00:
2d:68:db:0e:b7:a0:fa:0e:f8:c8:ca:c3:f8:f2:aa:
8d:fb:21:7b:24:a9:7a:ff:79:1e:53:c2:aa:dd:1e:
c7:02:78:1e:84:d5:87:9f:bc:12:7e:a4:fc:fd:64:
eb:93:c8:4f:b6:09:36:ca:49:26:83:b5:18:9f:cf:
d0:ee:ca:23:20:28:c0:9f:24:b3:e8:78:be:81:2a:
b1:c9:f1:a7:e5:4d:d7:1b:ae:d8:80:69:ac:c7:2f:
dc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:76:A2:0A:9D:26:CE:D3:36:45:8E:0B:84:29:10:BB:8A:06:08:C8
X509v3 Authority Key Identifier:
keyid:7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/476FD748C1CB11EF9557BF09C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.44.56.0/24
Signature Algorithm: sha256WithRSAEncryption
42:9d:01:be:da:c9:01:0a:59:e1:56:9e:30:ec:18:67:47:5a:
e7:b8:d7:60:e2:fa:d9:ee:fd:23:1d:66:ec:38:19:c7:06:54:
fb:49:93:30:69:d6:1c:ec:e1:e8:b2:67:53:d0:cb:2c:3b:2f:
77:04:81:34:74:31:ad:2b:52:79:64:ef:d8:13:d8:4b:48:cd:
11:62:6b:25:fb:db:d1:57:f6:2c:c6:dd:32:37:0a:b0:10:ca:
a1:db:5d:a9:c3:60:e1:fa:b0:0b:7c:bc:40:60:d2:17:9b:e8:
d2:7d:cd:28:ec:90:fe:83:82:29:78:f3:0f:17:6e:24:fe:d8:
2a:b8:88:bd:6f:6b:5a:c5:cf:6d:37:d4:6a:c5:db:d7:ea:62:
56:6a:e6:af:9f:50:c9:db:d3:b5:92:4b:f8:10:62:eb:e1:84:
ef:92:0a:b5:b3:71:a2:99:82:c5:77:35:76:fe:59:63:34:2c:
4f:b2:65:70:2a:9a:59:ed:dc:9c:01:a3:3f:d2:6c:5b:55:f3:
67:eb:4a:d6:bd:63:18:52:29:50:9a:f2:0c:3c:e1:b4:07:d2:
95:13:82:75:fb:e6:d4:a3:4a:e7:34:e4:9c:5a:c8:f1:da:f8:
9b:95:01:4a:85:ed:5d:f2:28:f1:61:49:a5:4a:12:7f:e6:40:
06:f9:6d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 11:23:09 2026 by rpki-client