
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/A11D7694261F11EAA88CE128C4F9AE02.roa
File: A11D7694261F11EAA88CE128C4F9AE02.roa (raw, json)
Hash identifier: CeFP4sSrL7pQBbEDj/02tRNGfcmmqQfD2Lb6qkPSS2Q=
Subject key identifier: 16:E5:B3:AB:54:72:EB:10:84:29:5A:22:BA:A8:76:F8:A1:BB:9A:55
Certificate issuer: /CN=A9166F0E/serialNumber=3D45C5A33BF9DD4D3A1EDA7ED2640658E1F831FF
Certificate serial: 0C71
Authority key identifier: 3D:45:C5:A3:3B:F9:DD:4D:3A:1E:DA:7E:D2:64:06:58:E1:F8:31:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/A11D7694261F11EAA88CE128C4F9AE02.roa
Signing time: Tue 30 Jun 2026 19:23:01 +0000
ROA not before: Tue 30 Jun 2026 19:23:01 +0000
ROA not after: Fri 30 Oct 2026 00:00:00 +0000
asID: 135307
IP address blocks: 103.113.84.0/22 maxlen: 22
103.113.84.0/24 maxlen: 24
103.113.85.0/24 maxlen: 24
103.113.86.0/24 maxlen: 24
103.113.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.crl
rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:58:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3185 (0xc71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166F0E, serialNumber=3D45C5A33BF9DD4D3A1EDA7ED2640658E1F831FF
Validity
Not Before: Jun 30 19:23:01 2026 GMT
Not After : Oct 30 00:00:00 2026 GMT
Subject: CN=6a441795-e3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:3f:dc:c9:e6:b9:17:bb:bd:d1:79:27:65:
36:16:de:03:46:94:15:db:c0:9c:ec:4f:96:f6:9a:
3c:dc:d5:b9:c3:b1:8a:8d:fd:1b:0b:37:97:e5:6b:
0c:7b:1c:71:72:ce:cd:13:81:ff:ac:de:f7:e6:9b:
95:7a:d4:1f:c1:58:0d:64:c5:38:be:63:c6:db:cc:
a0:c3:38:f6:df:d2:20:0f:d6:cd:c9:44:01:fe:be:
f3:b2:9a:74:60:23:8b:6c:a5:01:af:19:01:88:6c:
d5:b5:b3:74:ff:f2:00:70:8d:f7:c5:27:28:3b:f3:
91:e8:c7:2f:1b:37:c5:f9:06:cc:9c:47:e4:8d:9d:
a8:86:41:e8:55:55:af:26:01:44:86:6e:b0:e1:78:
2f:87:8c:6a:54:81:e3:b1:b8:0e:ab:58:5a:3b:51:
25:a6:d2:ce:c2:0e:5b:f9:63:1c:ba:4f:be:f1:40:
59:5f:16:4b:55:15:7c:9d:d4:f3:c0:af:23:30:2c:
f1:d0:53:5e:9b:db:c1:62:49:2d:b8:b6:f6:6a:68:
5d:9e:50:99:94:79:1f:90:f4:25:f1:68:a9:2e:05:
30:3e:bb:07:e9:6e:2e:3d:99:30:e1:93:65:af:c4:
d6:9b:8a:4e:8b:3b:59:88:2c:23:bf:98:83:b8:05:
2c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E5:B3:AB:54:72:EB:10:84:29:5A:22:BA:A8:76:F8:A1:BB:9A:55
X509v3 Authority Key Identifier:
keyid:3D:45:C5:A3:3B:F9:DD:4D:3A:1E:DA:7E:D2:64:06:58:E1:F8:31:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/A11D7694261F11EAA88CE128C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.113.84.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:b5:f4:1c:2b:6d:d7:1d:d5:a7:04:68:e8:df:c7:d9:8f:27:
5a:d6:2a:27:f4:09:b0:e8:20:99:af:d8:98:c4:13:b6:a1:b0:
ef:f7:0d:eb:e0:64:47:b4:4c:c8:54:ba:bc:4d:69:c0:26:33:
0b:32:e3:72:b8:26:31:22:4b:12:51:98:12:90:c7:59:b7:34:
16:37:a5:58:c4:b2:09:ba:bd:92:c2:0d:50:da:51:3b:4c:25:
54:c3:19:fd:94:f9:f6:d5:f1:15:3c:61:e1:09:1e:fa:f2:57:
7b:8f:1b:0f:d0:da:f0:61:2f:69:5c:8a:8d:36:be:00:69:94:
18:22:e8:bf:1d:62:69:21:10:f0:de:7f:6e:15:05:54:e4:ba:
62:88:fe:15:48:5c:18:fa:50:35:52:05:43:cd:25:13:4b:6e:
17:b4:6c:68:49:c0:10:e3:ab:fa:76:f4:8f:fe:0c:87:b5:52:
f8:a4:d1:e1:8c:9e:4b:21:1f:33:a1:4b:f9:86:e0:5b:ba:cb:
e4:0b:08:af:83:62:3b:94:9e:1a:cc:e2:a6:54:39:af:c0:2d:
b8:b0:c8:8d:fd:2f:bd:d3:7e:2a:cc:09:47:df:a4:b2:86:97:
cd:c5:83:3a:2f:5c:ff:d6:2c:77:90:89:07:43:1c:76:32:e0:
28:98:21:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:09:20 2026 by rpki-client