
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/4B17E2545C0811F1B8292F4090833773.roa
File: 4B17E2545C0811F1B8292F4090833773.roa (raw, json)
Hash identifier: ZHRlNcAYAA1IcJM0xFQys5A4K8yg67YwwMJ4ch/a0ZY=
Subject key identifier: 48:E1:D0:5F:5E:1B:1C:2F:1C:54:7F:72:CE:36:94:D4:0C:A7:EA:E5
Certificate issuer: /CN=A9166D4A/serialNumber=DA10261FEFDAD011ACAE23270AA6BF8C41DE4292
Certificate serial: 03
Authority key identifier: DA:10:26:1F:EF:DA:D0:11:AC:AE:23:27:0A:A6:BF:8C:41:DE:42:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2hAmH-_a0BGsriMnCqa_jEHeQpI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/4B17E2545C0811F1B8292F4090833773.roa
Signing time: Sat 30 May 2026 09:16:51 +0000
ROA not before: Sat 30 May 2026 09:16:51 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 132017
IP address blocks: 2402:4420::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.crl
rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2hAmH-_a0BGsriMnCqa_jEHeQpI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 10:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166D4A, serialNumber=DA10261FEFDAD011ACAE23270AA6BF8C41DE4292
Validity
Not Before: May 30 09:16:51 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a1aab03-2a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:94:52:f4:66:dc:78:f5:5d:30:f5:a0:0a:5f:
5b:d9:59:fe:ba:1f:8b:83:80:da:10:57:a4:3d:d3:
00:db:45:10:f5:ab:1b:38:02:fd:ed:f8:df:0d:5c:
f8:ca:ab:02:b6:5e:06:ef:27:40:8c:b5:da:de:78:
cd:6a:1f:61:8c:f9:2d:b3:d9:85:b6:fb:c1:40:56:
4b:18:eb:5c:7a:43:1b:12:45:88:ba:c4:31:f3:27:
a8:cd:52:af:a9:e4:9f:21:24:b0:f7:b2:9c:ab:c8:
97:85:fb:8d:64:b1:6c:ef:83:3d:71:37:c2:61:41:
b6:5e:77:a7:22:10:ed:b3:36:08:11:75:94:cb:8c:
6a:1f:57:b0:80:0d:20:37:95:91:bc:68:e6:ea:00:
58:a4:be:68:87:09:b6:05:ae:5f:01:4e:2b:43:25:
03:49:12:c2:d0:06:24:86:dd:81:88:c6:58:a7:4b:
3b:de:27:77:52:a4:1d:7d:4d:72:d5:54:42:0a:3d:
15:ef:f3:d4:ef:d3:96:ce:05:c7:b0:7a:ea:a1:1f:
4c:e9:0d:89:98:21:d0:e3:60:bf:f9:2a:6a:7f:18:
b3:27:bd:ec:60:1e:38:69:6e:85:96:e6:07:9d:ed:
2e:74:50:94:3b:9d:bf:67:2f:4f:d6:e7:89:85:7b:
05:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E1:D0:5F:5E:1B:1C:2F:1C:54:7F:72:CE:36:94:D4:0C:A7:EA:E5
X509v3 Authority Key Identifier:
keyid:DA:10:26:1F:EF:DA:D0:11:AC:AE:23:27:0A:A6:BF:8C:41:DE:42:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2hAmH-_a0BGsriMnCqa_jEHeQpI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/4B17E2545C0811F1B8292F4090833773.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:4420::/32
Signature Algorithm: sha256WithRSAEncryption
19:27:98:cf:c0:36:0a:b1:ca:a1:11:1f:16:ce:2b:6d:13:70:
fb:c9:24:fb:07:bd:44:e9:24:0f:a6:58:5e:46:a7:d0:4b:3b:
69:2a:16:00:20:48:f7:a5:81:55:56:95:f6:24:74:aa:9d:8e:
ae:96:0b:7d:c7:2b:f8:c0:ba:47:57:11:88:8c:2f:b2:8a:91:
60:df:3e:2f:9d:a6:02:99:32:5d:56:f5:6e:c8:1b:4b:a0:74:
0c:b8:77:2f:94:eb:cb:46:ce:65:81:32:2a:8f:aa:c3:f2:0d:
56:d7:26:0a:01:60:39:b1:e3:be:5d:48:0e:ad:d4:f5:c8:7a:
70:0b:da:d4:63:84:08:7f:b2:46:53:5d:5c:81:a8:fb:83:cf:
d5:de:84:35:a0:4a:31:f3:d6:e8:6a:ee:01:5d:e8:1b:a4:4e:
a1:e7:9c:bf:32:f8:27:f6:38:dd:5f:13:3d:bf:81:c5:05:0a:
eb:bf:b2:ec:4a:46:15:ab:fe:52:8b:7c:19:a0:7a:6a:50:48:
85:43:9a:e0:2d:16:c8:3f:29:ad:23:28:be:b9:70:f9:25:b8:
75:1b:92:4f:9e:e2:2a:cb:23:11:1e:38:67:47:da:22:4d:bc:
42:b4:9f:d7:37:a4:3f:15:02:1b:e0:35:32:a2:97:ff:3a:57:
9d:2c:52:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:39:33 2026 by rpki-client