
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa
File: 7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa (raw, json)
Hash identifier: LLmj75OnEITMWNmTNzFRCr8M2iJFtW1A7GWU5CHlz+4=
Subject key identifier: 01:EF:03:25:BA:89:34:CA:B2:C8:CA:B3:42:08:81:9B:FB:B6:72:77
Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Certificate serial: 1513
Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa
Signing time: Thu 02 Jul 2026 17:17:50 +0000
ROA not before: Thu 02 Jul 2026 17:17:50 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 142032
IP address blocks: 103.106.188.0/22 maxlen: 24
103.116.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5395 (0x1513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Validity
Not Before: Jul 2 17:17:50 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a469d3e-1663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:83:3d:ae:4b:32:28:c9:20:29:c6:86:4d:81:
65:e3:22:4e:3e:5b:e1:b6:96:d2:c3:42:05:9d:1d:
8e:e2:05:96:e4:0f:6c:80:73:e9:a9:7a:05:b8:56:
3a:0a:9f:62:a4:9e:41:33:c7:23:d3:b2:6a:03:f8:
c6:d7:c7:b4:91:ac:a8:2f:f2:1e:d1:2b:ca:76:b1:
4e:fc:a5:e7:cc:cf:d3:fa:03:30:bf:fc:82:af:2f:
7e:c4:a6:92:e5:53:a2:4b:93:6f:33:60:5b:a4:99:
f9:cc:16:2b:76:80:ad:bf:cf:3c:cf:d6:ee:0d:89:
76:94:bb:e8:b4:3e:fc:fb:37:cb:32:b0:b9:df:ce:
b0:f0:7d:e1:98:f3:82:ca:b3:76:d3:64:d8:3c:ca:
df:9f:89:3d:18:eb:d2:0f:c3:5f:05:c9:85:a1:30:
af:65:b4:e7:6b:ad:e5:f9:42:88:e9:21:73:aa:c2:
2b:46:ef:96:57:28:d0:88:fc:dd:2a:e9:fa:94:80:
ac:ba:52:d6:01:72:92:3e:9f:79:df:70:a1:19:e1:
a8:4e:50:0d:04:8d:d5:b0:72:83:cc:05:48:75:fc:
70:4d:7a:27:7a:cc:d0:f7:8d:a0:54:d4:82:9b:04:
59:60:b1:18:15:f4:b1:7f:f9:69:5e:8a:c4:69:89:
67:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EF:03:25:BA:89:34:CA:B2:C8:CA:B3:42:08:81:9B:FB:B6:72:77
X509v3 Authority Key Identifier:
keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.106.188.0/22
103.116.244.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:65:0a:50:07:1a:74:6e:be:35:e3:2c:60:00:f1:65:ee:08:
b1:52:e9:61:db:e0:05:f3:23:fb:ce:7e:aa:5f:d1:4e:08:8b:
69:5e:c4:c5:4f:16:24:13:a3:db:9d:1b:fc:12:18:03:4b:f2:
56:10:47:ad:60:41:49:08:38:7b:f2:d3:46:ef:16:d9:53:41:
9f:d0:25:91:07:42:d4:4d:5b:14:e6:11:a8:00:d4:5b:ab:f8:
8b:5d:81:b1:b5:35:30:ea:30:37:dc:0e:96:66:77:42:08:0a:
b8:3f:38:44:0e:e7:cc:11:70:17:e7:a5:60:57:34:a8:3c:3e:
1c:2d:de:8f:2a:16:09:60:dc:2b:d5:3e:28:dd:1f:64:f5:c0:
56:d7:02:32:bf:13:06:52:b9:36:8a:59:68:7d:84:32:61:9a:
1d:92:56:9c:53:02:e0:a2:f2:68:9a:66:a9:30:e6:1b:20:77:
fb:d7:33:81:17:ea:31:98:71:42:2d:04:79:65:cd:fd:57:cc:
25:e3:86:a6:c4:b1:69:42:d5:69:43:cc:1c:01:a2:fc:5a:4b:
0d:23:4e:8b:5e:69:3f:ea:12:29:03:84:c6:21:29:65:43:3b:
f4:84:92:72:a5:ff:57:9c:4b:d4:f0:b4:ac:48:5f:63:8d:24:
7a:ff:21:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:25:37 2026 by rpki-client