
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/172E487A416911ECB6B11742C4F9AE02.roa
File: 172E487A416911ECB6B11742C4F9AE02.roa (raw, json)
Hash identifier: lJfLPhd1kAAzDWL/Ne5AiMPNOkxSubYVAGKuzG/T5pk=
Subject key identifier: 27:2E:39:02:83:3A:25:A4:6E:8B:BE:9D:4A:D7:10:2C:CF:83:82:3C
Certificate issuer: /CN=A914BF33/serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Certificate serial: 0CF0
Authority key identifier: 1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/172E487A416911ECB6B11742C4F9AE02.roa
Signing time: Fri 24 Apr 2026 18:24:09 +0000
ROA not before: Fri 24 Apr 2026 18:24:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25478
IP address blocks: 103.111.224.0/22 maxlen: 22
103.111.225.0/24 maxlen: 24
103.111.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:26:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3312 (0xcf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BF33, serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Validity
Not Before: Apr 24 18:24:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69ebb548-377a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:9a:dd:44:4c:3f:fb:2b:9b:e0:c4:07:bf:6d:
bb:b8:7d:ed:e1:44:1b:11:bc:ea:e0:a1:46:eb:64:
07:57:93:5b:54:b7:d7:a0:8c:18:76:d5:0f:6c:4d:
3c:f8:68:bf:d3:f3:5f:67:bb:68:e8:45:9e:b4:1a:
0e:75:ae:81:64:63:1a:04:ad:12:b4:44:56:f9:94:
ea:8d:e1:91:94:78:fa:b9:c9:e0:77:bd:c8:38:3f:
a5:af:d9:11:e5:d0:f9:70:e4:d8:f7:04:6a:bb:c9:
d1:62:01:6e:e4:c9:d4:ec:04:e0:80:da:6d:8c:e2:
55:ad:f9:d8:4b:26:1a:76:8c:29:d6:9a:31:ba:7d:
4a:bc:37:86:9d:cd:cb:74:17:cd:9e:20:a8:89:3d:
5f:34:bc:4d:b6:f8:8a:2a:39:c5:83:98:1f:bb:8f:
d8:80:4e:f2:90:69:c3:af:d3:b9:6b:ee:41:31:44:
ad:c8:d2:42:b7:ac:4f:9e:10:88:db:23:3e:78:40:
ee:4a:39:f0:d7:55:b2:5a:8e:97:32:1d:23:06:9b:
0c:3f:ed:1d:52:21:f8:37:49:2e:6e:83:51:39:b9:
d0:15:7d:52:37:e2:58:7b:f5:c1:69:c8:c1:90:e9:
e0:bb:48:bf:e2:86:b9:9b:4b:31:73:e7:3b:a1:0e:
94:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2E:39:02:83:3A:25:A4:6E:8B:BE:9D:4A:D7:10:2C:CF:83:82:3C
X509v3 Authority Key Identifier:
keyid:1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/172E487A416911ECB6B11742C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.111.224.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:82:36:40:c3:55:28:48:5e:a0:91:b0:a2:68:29:74:54:83:
67:27:3f:5f:96:e7:1a:5e:b7:98:df:fd:ab:d0:21:d0:8f:78:
76:8f:7b:4e:3a:a2:2a:34:0d:24:6e:ac:d7:fe:6f:bc:05:cc:
09:0b:f2:56:cf:dc:49:31:1e:96:0e:59:de:d9:1c:0b:8a:35:
c8:53:eb:2d:2b:9a:de:a6:bd:d9:7f:37:94:37:50:5c:cd:a1:
6a:bb:54:44:3b:7b:0e:d6:cf:2f:d9:49:89:29:c6:dc:05:7b:
b2:5c:46:4a:67:0e:57:73:45:e6:3e:00:80:ba:7d:0e:68:92:
8f:73:d2:dd:64:ae:52:2d:0b:fe:1b:57:e3:2b:28:f0:8b:0e:
37:ff:f8:c6:3f:5c:12:de:f0:29:1e:9b:73:c8:6b:c7:a8:d2:
4c:3f:f7:61:e5:ea:a5:a4:27:89:fd:7b:f7:93:99:77:2a:fa:
02:2f:d7:1a:82:d1:3e:6c:8a:cc:6d:59:cb:bd:96:d9:d6:8f:
a7:95:5e:e8:d8:2a:62:6f:de:68:61:12:6a:38:b8:2e:a9:ec:
64:00:f5:7b:f4:77:ff:22:d3:39:98:e9:44:8f:55:cd:88:30:
03:46:31:ea:f7:36:cb:93:28:cc:fb:49:00:b0:3b:76:e3:07:
65:2d:ed:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:43:59 2026 by rpki-client