
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/7F444842C3A411ED8EFA6F13C4F9AE02.roa
File: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (raw, json)
Hash identifier: HdUBPRtbQQrEcIOoId2r+rm38MPN/eH1nuT0g27/Ga8=
Subject key identifier: FD:E6:96:4B:9B:62:1B:46:23:99:9C:81:58:DF:3A:8B:B6:B7:06:8B
Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Certificate serial: 1519
Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/7F444842C3A411ED8EFA6F13C4F9AE02.roa
Signing time: Thu 02 Jul 2026 17:18:02 +0000
ROA not before: Thu 02 Jul 2026 17:18:02 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 55933
IP address blocks: 103.106.188.0/22 maxlen: 24
103.116.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5401 (0x1519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Validity
Not Before: Jul 2 17:18:02 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a469d49-b51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:a0:b7:0a:c5:65:07:d5:f6:8f:39:67:09:
a2:5a:39:3f:7b:ed:92:41:79:79:40:d6:67:43:fe:
f7:05:bc:11:d8:31:9b:da:8e:bb:4b:eb:51:04:de:
a5:d8:d2:30:aa:4a:b8:bc:a4:c0:47:97:20:cb:ec:
f6:37:1c:70:dd:89:3f:b4:c3:b2:19:31:19:32:ac:
39:87:d3:3a:e2:dd:15:b6:c2:fe:ea:bd:c7:48:95:
9e:85:e6:fc:be:76:6d:25:90:34:cb:91:d2:fa:fe:
ac:81:2d:d8:c7:02:ed:6a:f1:16:6a:fd:02:99:a8:
72:31:33:5e:58:93:9c:58:a6:7c:cf:03:57:f9:7b:
d5:d9:e3:3c:e3:e6:6a:b8:95:7d:fb:b0:2c:04:e8:
93:12:47:37:7d:d5:57:14:e5:1c:4a:e0:c8:79:2b:
df:47:fa:61:4c:98:8c:e9:57:1c:07:5e:6e:cd:a2:
45:74:91:bc:5c:f3:87:30:1a:c2:a9:1f:58:83:e2:
d2:50:d7:f9:4a:cb:8f:03:31:7f:02:96:c2:70:71:
fa:51:7e:92:f4:09:aa:84:3b:f8:b1:31:91:f7:63:
ee:fd:77:1c:3a:1f:8e:66:69:d6:db:4d:b8:b2:0f:
b0:bd:4c:27:b7:08:56:e2:2e:32:63:e5:6f:98:47:
fd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E6:96:4B:9B:62:1B:46:23:99:9C:81:58:DF:3A:8B:B6:B7:06:8B
X509v3 Authority Key Identifier:
keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/7F444842C3A411ED8EFA6F13C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.106.188.0/22
103.116.244.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:f8:2e:6e:f6:73:d8:ff:cd:1d:bc:7a:4a:4b:57:22:51:cb:
e6:fd:19:0f:cf:7b:bc:95:35:88:8f:39:bf:09:f8:76:16:54:
b2:3c:be:13:6f:19:7d:d8:e1:56:ba:bf:0d:42:62:b9:a0:cd:
9d:ee:10:31:d6:8e:15:ec:96:6a:b6:0e:87:1b:9a:dc:a5:77:
bb:b2:c5:7c:46:9d:a3:7d:46:f0:9e:71:04:4f:01:f0:72:6e:
08:8c:60:98:02:3a:92:c7:bc:d8:ff:5d:ef:cc:cf:ff:21:22:
a1:ab:09:cc:04:b1:b4:02:36:eb:e6:f9:28:a4:15:20:2a:03:
38:d3:2b:ec:27:17:c9:20:2e:d3:eb:1a:c4:3f:14:a2:a6:d5:
db:a1:7b:24:1e:8f:98:0d:5c:4e:9f:93:98:88:32:06:5e:b1:
c2:5c:f2:f1:07:ea:2b:7c:32:21:97:88:cc:d4:1a:b1:51:d8:
27:aa:6b:03:d6:5a:17:31:e5:44:75:36:b9:95:12:53:fe:45:
34:c1:76:be:b3:40:f8:21:1f:fb:e8:a7:fb:53:56:bb:72:b8:
36:c9:0b:f2:4b:87:83:0e:3c:d8:0f:ee:85:20:1e:50:21:f4:
01:b8:23:7b:68:db:c5:27:29:83:52:75:3e:c8:18:08:92:37:
fa:a5:29:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:57:59 2026 by rpki-client