
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/C3417AA6593611E98E4C8C44C4F9AE02.roa
File: C3417AA6593611E98E4C8C44C4F9AE02.roa (raw, json)
Hash identifier: FiWZiVL2yOr1z1zS/p/Uy2Bry/XaLTGCHc6YhulXF/o=
Subject key identifier: 6E:0C:F9:E5:13:29:74:EA:65:D5:29:B9:FF:FB:6D:C3:FF:2B:0A:FF
Certificate issuer: /CN=A9166708/serialNumber=22792C70C98947BE8AF4F4A3E755AEDE7959D278
Certificate serial: 1083
Authority key identifier: 22:79:2C:70:C9:89:47:BE:8A:F4:F4:A3:E7:55:AE:DE:79:59:D2:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/C3417AA6593611E98E4C8C44C4F9AE02.roa
Signing time: Mon 22 Jun 2026 18:20:17 +0000
ROA not before: Mon 22 Jun 2026 18:20:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132232
IP address blocks: 103.7.252.0/22 maxlen: 22
2403:8700::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.crl
rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4227 (0x1083)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166708, serialNumber=22792C70C98947BE8AF4F4A3E755AEDE7959D278
Validity
Not Before: Jun 22 18:20:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a397ce1-30a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bb:64:0d:25:6c:bd:cd:a5:07:8b:eb:6c:bc:
56:b2:90:32:82:85:93:c5:7e:51:ef:08:16:75:a8:
74:21:a5:6a:13:fa:af:af:9f:60:eb:f2:6e:14:fb:
72:70:bd:b7:cf:b4:64:83:48:ad:6b:dd:bb:6f:8c:
dd:ab:cd:f8:32:cd:ad:06:04:30:ca:a2:85:98:50:
b3:d3:18:d4:6e:e8:d5:f9:82:06:86:b2:9d:9c:75:
25:f8:a9:d7:99:ee:2a:b9:27:91:4e:39:58:85:c0:
28:05:fe:c9:71:fd:87:ff:5f:15:74:84:b0:24:e5:
2b:fd:4c:db:b7:fa:a1:87:26:11:25:9f:6d:28:39:
c4:33:95:fc:9b:d6:18:9d:03:45:4a:60:a4:f0:56:
c0:e7:c0:ec:6e:39:1d:8c:9c:39:2e:57:c2:b7:9e:
b4:08:ad:d3:a0:2a:2c:d6:01:6c:05:7e:6a:59:68:
18:bb:4c:8e:27:4b:49:8d:08:b5:af:38:c7:75:19:
4c:55:0a:dd:71:a7:a9:1a:20:7a:88:80:80:c3:c1:
3e:3f:b1:13:39:ed:4a:97:62:9d:70:f2:6d:56:2d:
6f:e2:0f:56:e6:15:7e:9f:3a:61:11:fc:dd:c1:7a:
35:4f:95:eb:cc:a4:10:4c:dc:e6:f0:1a:31:d3:97:
c3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0C:F9:E5:13:29:74:EA:65:D5:29:B9:FF:FB:6D:C3:FF:2B:0A:FF
X509v3 Authority Key Identifier:
keyid:22:79:2C:70:C9:89:47:BE:8A:F4:F4:A3:E7:55:AE:DE:79:59:D2:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/C3417AA6593611E98E4C8C44C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.7.252.0/22
IPv6:
2403:8700::/32
Signature Algorithm: sha256WithRSAEncryption
37:41:82:a3:35:33:d7:ab:61:dc:1d:91:a1:29:48:38:0a:03:
e9:c3:9e:63:ce:41:54:76:3d:e2:7f:3a:e4:68:49:a0:2d:ce:
50:fb:51:b1:69:17:bd:33:d5:19:ba:af:be:f5:ed:cf:e4:74:
f3:d8:68:d6:a0:19:c9:64:66:7e:c0:35:10:ff:71:26:ff:6d:
b0:b2:57:2a:ed:58:04:3d:0d:d9:59:f8:48:86:5d:89:3d:16:
3d:9c:63:11:b7:bf:0c:ea:61:58:e2:89:2a:10:c4:cf:d0:12:
44:ef:7f:99:c3:38:18:fc:8f:e1:a6:8f:1b:a3:3a:27:09:29:
39:62:01:64:d0:5a:3e:08:c1:e3:35:9b:73:72:a4:5b:11:b6:
2f:c2:f2:db:a3:20:69:90:02:0d:62:eb:47:6a:46:7c:af:56:
73:b2:0f:48:c6:93:01:22:28:43:8c:2e:21:b8:43:c4:db:f6:
de:c7:06:fb:c4:fc:30:22:06:53:3c:b6:c8:44:0a:14:d6:ce:
40:ae:f4:ef:75:de:34:ed:4e:3b:79:0c:23:ab:66:37:ff:4a:
4c:0a:57:da:18:bd:98:eb:75:b8:ee:7b:03:aa:00:ed:0d:c9:
98:b2:23:40:24:a0:24:a7:c9:61:07:ec:cb:d2:fb:8a:e4:1c:
d8:20:7b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:04 2026 by rpki-client