
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/7893F3DC0B8511F086B2C121C4F9AE02.roa
File: 7893F3DC0B8511F086B2C121C4F9AE02.roa (raw, json)
Hash identifier: 6s8dW9eLTERLyjzRmVjBJQp0yaZ34l8yCtxJv23gVCM=
Subject key identifier: 7B:AC:06:CB:49:F0:66:02:DB:34:3F:72:16:F8:52:66:04:C4:45:0B
Certificate issuer: /CN=A9159E90/serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F
Certificate serial: 0207
Authority key identifier: 59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/7893F3DC0B8511F086B2C121C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:01:11 +0000
ROA not before: Fri 17 Oct 2025 06:55:54 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 398704
IP address blocks: 103.233.179.0/24 maxlen: 24
2001:df3:9a40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl
rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:29:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519 (0x207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159E90, serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F
Validity
Not Before: Oct 17 06:55:54 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a43896-009f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f1:4e:ce:c9:a1:6e:0e:7d:5e:64:65:a2:c8:
41:8e:54:65:14:94:b8:6e:04:4b:62:56:bf:06:98:
dc:7e:2e:6b:72:3c:4a:ae:be:cf:d9:32:90:13:6e:
05:7b:f6:e6:85:c9:4e:f8:d5:da:1f:87:79:4f:de:
da:aa:7b:00:95:7b:9b:f5:a1:48:39:e4:76:48:21:
be:5d:33:0f:d5:b1:13:e0:a8:23:d0:75:83:d7:e6:
33:8c:83:82:07:dd:c1:f1:58:3a:1f:86:ab:f2:0b:
e0:32:c0:ef:b8:6c:a2:2b:0d:c2:e2:3d:e7:ee:f6:
dd:c9:ba:4e:ad:de:f2:22:a0:84:50:c0:03:4f:c0:
ea:01:28:af:87:49:d4:7d:d0:17:2f:55:0b:8a:6e:
34:66:2f:5e:80:6a:65:b7:fc:c0:45:4d:b1:16:ec:
37:2e:d2:50:ba:23:51:d0:0d:c5:b1:8f:53:05:b0:
4a:df:3a:71:3c:51:d9:26:4c:f5:13:01:b1:91:b7:
d5:ba:b2:b6:be:dc:d9:ce:c5:20:a3:71:8b:2c:58:
3d:11:6a:9b:7d:c2:7e:b9:db:c6:18:67:2b:9a:26:
d7:69:b8:12:0c:8e:c5:45:5a:24:79:a4:00:a8:06:
bb:3e:32:35:35:f9:79:9c:b3:4f:cb:dc:c1:67:40:
5f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AC:06:CB:49:F0:66:02:DB:34:3F:72:16:F8:52:66:04:C4:45:0B
X509v3 Authority Key Identifier:
keyid:59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/7893F3DC0B8511F086B2C121C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.233.179.0/24
IPv6:
2001:df3:9a40::/48
Signature Algorithm: sha256WithRSAEncryption
71:d0:0d:d8:5a:12:b7:e5:9b:f3:83:f7:33:9f:4c:ef:c8:92:
04:9f:e3:f5:d6:c0:53:7c:f5:a8:3a:98:d2:10:bd:4d:fb:d1:
8b:1f:5f:14:a3:bb:97:08:ad:2d:77:96:30:ed:53:f9:8b:07:
fa:19:62:a4:75:bf:b3:ce:c5:b3:c9:b7:75:af:a6:40:59:d7:
b5:99:fd:16:b3:93:55:a9:9c:ff:49:a8:93:7f:66:a5:0f:54:
86:30:bf:40:54:2e:16:ce:94:1b:e2:53:66:ed:23:8c:a1:a9:
dc:f8:dc:cf:84:2f:bb:cf:9e:91:e1:2e:51:3d:07:b5:46:e1:
32:26:67:e3:de:2f:e2:a1:ec:f2:a8:ee:33:ad:e7:0d:27:ca:
62:95:29:30:d7:3a:31:36:b7:b2:cc:3e:b2:cf:d4:39:32:fd:
d6:94:53:7b:3a:c4:f9:a9:dc:f7:26:56:83:6b:ac:36:33:b6:
0d:4d:3d:1a:4a:be:a6:35:1a:53:af:cf:a0:3b:fd:6b:65:f9:
15:84:d1:c6:fe:ea:f7:39:f7:c1:44:b1:83:97:b3:dd:29:08:
12:dd:76:08:48:3c:a5:b0:7d:eb:31:aa:44:f0:3a:d0:2a:ae:
71:4b:f0:ad:c6:dd:90:31:f7:a5:06:43:60:6a:3d:36:c2:5a:
36:01:69:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:09 2026 by rpki-client