
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/70B74E2A16D811F1AFC6DD17323D8C67.roa
File: 70B74E2A16D811F1AFC6DD17323D8C67.roa (raw, json)
Hash identifier: t2gAVW67A8FPQSw43kqZ8vJl5Z2f7QWlR2JHEjIknys=
Subject key identifier: 79:F3:49:E0:53:BC:86:13:1F:CA:18:6E:BF:02:D2:F9:94:C2:67:DB
Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Certificate serial: 35FA
Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/70B74E2A16D811F1AFC6DD17323D8C67.roa
Signing time: Fri 02 Oct 2026 15:41:32 +0000
ROA not before: Fri 02 Oct 2026 15:41:32 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 2914
IP address blocks: 49.0.176.0/24 maxlen: 24
49.0.177.0/24 maxlen: 24
49.0.178.0/24 maxlen: 24
49.0.179.0/24 maxlen: 24
49.0.180.0/24 maxlen: 24
49.0.181.0/24 maxlen: 24
49.0.182.0/24 maxlen: 24
49.0.183.0/24 maxlen: 24
101.0.12.0/24 maxlen: 24
101.0.13.0/24 maxlen: 24
101.0.14.0/24 maxlen: 24
101.0.15.0/24 maxlen: 24
101.0.16.0/24 maxlen: 24
101.0.20.0/24 maxlen: 24
101.0.21.0/24 maxlen: 24
101.0.22.0/24 maxlen: 24
103.46.204.0/24 maxlen: 24
103.46.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13818 (0x35fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Validity
Not Before: Oct 2 15:41:32 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6abfd0ab-79a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e4:5e:0d:f2:a5:ed:63:e4:53:78:35:49:f6:
db:9d:b2:fd:c3:ec:6b:28:0f:fb:92:b7:ad:3c:28:
e9:de:39:46:02:a1:db:b8:44:fa:a2:cb:b6:cb:4d:
6d:ab:10:f0:97:40:86:af:3d:c4:4e:2d:d1:15:f6:
c0:c0:5c:10:ad:e7:52:b1:78:a1:8e:03:ba:02:b4:
b5:43:0b:24:1a:c1:3f:e4:e8:e2:e3:97:d7:96:30:
db:5b:72:ae:1f:85:77:5f:d8:d4:e6:4e:e1:c9:82:
6a:71:49:bd:46:c4:13:27:a6:eb:9f:fd:59:b4:bc:
c4:d9:23:1e:e4:a7:5f:7d:b2:91:05:f0:6d:c2:3b:
a1:63:89:f6:0d:89:73:8d:e7:a4:bd:b3:8b:1d:ec:
27:b9:b6:94:40:c7:9b:69:ae:00:43:f6:f9:46:21:
05:83:d8:17:03:6b:47:2d:ae:b5:e2:81:35:0e:4a:
da:33:a0:d1:01:c1:91:22:61:a2:36:b0:8b:0f:c6:
c7:9f:83:9d:26:64:29:1c:5f:1c:08:d2:7a:ce:9a:
4d:b4:41:5c:ef:fc:fa:e7:d4:51:5a:5b:ec:ee:72:
60:10:49:ef:7e:06:44:ce:aa:d1:6d:2f:84:3f:17:
f1:8f:2f:58:83:c0:df:61:a7:3e:1a:53:77:de:0d:
c4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F3:49:E0:53:BC:86:13:1F:CA:18:6E:BF:02:D2:F9:94:C2:67:DB
X509v3 Authority Key Identifier:
keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/70B74E2A16D811F1AFC6DD17323D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
49.0.176.0/21
101.0.12.0-101.0.16.255
101.0.20.0-101.0.22.255
103.46.204.0/24
103.46.207.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:eb:ac:05:f1:73:31:67:ee:e8:be:3b:8b:75:c3:0b:7b:cf:
09:c1:8e:37:df:fd:60:3b:60:f5:b1:31:f6:b1:38:90:83:c6:
e9:64:d2:bd:7c:78:ef:94:b4:53:e0:c4:b2:48:82:94:1d:0d:
a1:b1:fb:48:9c:68:75:16:cd:be:63:d8:ba:22:10:db:62:aa:
96:91:3e:c1:bd:db:90:99:ac:d1:8f:a3:5c:2e:39:05:3a:7b:
28:1a:f7:00:cf:9e:44:b8:3a:c1:08:de:58:e4:55:bc:9f:cf:
de:e0:28:47:88:db:c1:93:18:13:6f:74:f9:30:02:18:58:2a:
48:6e:9e:68:17:71:60:5f:31:61:61:2a:cf:bb:96:1d:14:da:
9e:4d:c5:e5:63:2b:da:7b:32:7c:e5:13:9f:6c:2e:cb:f6:f3:
6e:89:13:76:4a:54:9d:d0:bf:5c:be:bd:6a:85:c8:a2:1a:ad:
0a:cf:26:15:61:1d:c7:92:14:ca:bb:f3:b2:ec:7f:ad:b2:8f:
52:a2:32:6c:c9:c3:00:29:5b:b5:cb:55:9d:fb:e3:22:45:2d:
25:1f:75:82:43:bc:e6:24:97:e1:44:20:a5:54:12:41:56:33:
97:bf:f4:06:a4:6f:74:17:ef:c2:d9:9b:db:a1:d2:9b:04:76:
a7:9e:47:69
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgICNfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRFMDMxMTAvBgNVBAUTKEUzOUFCMUQwN0I1MERCQjlBQkUyQ0I1MUNEOUIxRTNB
NUE4NTQ1MjEwHhcNMjYxMDAyMTU0MTMyWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmZDBhYi03OWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3OReDfKl7WPkU3g1SfbbnbL9w+xrKA/7kretPCjp3jlGAqHbuET6osu2y01t
qxDwl0CGrz3ETi3RFfbAwFwQredSsXihjgO6ArS1QwskGsE/5Oji45fXljDbW3Ku
H4V3X9jU5k7hyYJqcUm9RsQTJ6brn/1ZtLzE2SMe5KdffbKRBfBtwjuhY4n2DYlz
jeekvbOLHewnubaUQMebaa4AQ/b5RiEFg9gXA2tHLa614oE1DkraM6DRAcGRImGi
NrCLD8bHn4OdJmQpHF8cCNJ6zppNtEFc7/z659RRWlvs7nJgEEnvfgZEzqrRbS+E
Pxfxjy9Yg8DfYac+GlN33g3ExQIDAQABo4ICiDCCAoQwHQYDVR0OBBYEFHnzSeBT
vIYTH8oYbr8C0vmUwmfbMB8GA1UdIwQYMBaAFOOasdB7UNu5q+LLUc2bHjpahUUh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEUwMy8zRjQ4RjIyNDFE
QTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3bXI0c3RSelpzZU9scUZS
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQ1cXgwSHRRMjdtcjRzdFJ6WnNlT2xxRlJTRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTRFMDMvM0Y0OEYyMjQxREE2MTFFMjlBMDc1RDlEMDhCMDJDRDIvNzBCNzRFMkEx
NkQ4MTFGMUFGQzZERDE3MzIzRDhDNjcucm9hMEcGCCsGAQUFBwEHAQH/BDgwNjA0
BAIAATAuAwQDMQCwMAwDBAJlAAwDBABlABAwDAMEAmUAFAMEAGUAFgMEAGcuzAME
AGcuzzANBgkqhkiG9w0BAQsFAAOCAQEAouusBfFzMWfu6L47i3XDC3vPCcGON9/9
YDtg9bEx9rE4kIPG6WTSvXx475S0U+DEskiClB0NobH7SJxodRbNvmPYuiIQ22Kq
lpE+wb3bkJms0Y+jXC45BTp7KBr3AM+eRLg6wQjeWORVvJ/P3uAoR4jbwZMYE290
+TACGFgqSG6eaBdxYF8xYWEqz7uWHRTank3F5WMr2nsyfOUTn2wuy/bzbokTdkpU
ndC/XL69aoXIohqtCs8mFWEdx5IUyrvzsux/rbKPUqIybMnDAClbtctVnfvjIkUt
JR91gkO85iSX4UQgpVQSQVYzl7/0BqRvdBfvwtmb26HSmwR2p55HaQ==
-----END CERTIFICATE-----
Generated at Tue Oct 6 19:58:35 2026 by rpki-client