
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/6D106CEE3AA011EB963B4842C4F9AE02.roa
File: 6D106CEE3AA011EB963B4842C4F9AE02.roa (raw, json)
Hash identifier: lk8+oDVmkh0IMVihDlSAF01esZtzK+ueFBrIlPTYmfg=
Subject key identifier: CF:4D:D0:3D:AD:E9:A8:6C:93:E0:32:33:26:06:B2:D8:99:08:CA:7F
Certificate issuer: /CN=A9170304/serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35
Certificate serial: 3534
Authority key identifier: 5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/6D106CEE3AA011EB963B4842C4F9AE02.roa
Signing time: Wed 18 Mar 2026 15:13:06 +0000
ROA not before: Wed 18 Mar 2026 15:13:06 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 37978
IP address blocks: 202.7.8.0/21 maxlen: 21
203.5.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl
rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13620 (0x3534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170304, serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35
Validity
Not Before: Mar 18 15:13:06 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69bac102-09d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:60:c1:de:a6:00:f4:3c:c9:86:cc:97:09:39:
bb:cf:2f:6a:e8:66:49:a3:b4:dc:ec:ec:c9:d5:8d:
ba:6a:ee:bd:7e:ed:ae:6c:5c:b5:1a:b8:98:3f:15:
a6:e6:c5:08:c7:ab:13:c3:5d:fc:90:f6:4e:f0:c9:
e1:6f:38:9f:61:83:69:17:fb:66:64:99:d8:a6:54:
cc:01:ad:ae:a3:f2:ae:55:b1:fe:b6:f4:fa:0c:5c:
5f:8c:59:80:b1:71:ab:79:dd:1d:42:9c:3c:0f:ed:
21:55:69:ef:cb:9c:24:4a:75:df:c4:97:2b:70:08:
58:3c:2f:ef:82:14:d7:9b:30:3a:63:80:6d:af:f1:
79:a6:8e:9b:5d:e0:7d:3a:d8:ca:df:41:2a:c8:88:
19:7e:30:dc:3f:e0:63:ac:b3:f2:52:f1:bc:ef:6c:
0b:0b:c2:8b:f3:37:75:f3:9c:61:f7:2c:29:e4:97:
37:09:d4:fe:7a:28:8b:34:d6:6b:85:1f:8e:2d:2c:
68:3d:40:73:25:95:52:c3:2f:bd:88:6a:47:fa:18:
11:0a:ef:13:a9:07:f4:99:c3:7b:c2:be:8d:22:6c:
7b:c6:7b:8f:c8:54:9a:14:d9:ca:da:fb:60:03:fa:
b2:52:f2:ee:95:59:2e:61:ab:9d:06:0b:f4:25:a4:
41:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4D:D0:3D:AD:E9:A8:6C:93:E0:32:33:26:06:B2:D8:99:08:CA:7F
X509v3 Authority Key Identifier:
keyid:5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/6D106CEE3AA011EB963B4842C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.7.8.0/21
203.5.121.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:2f:38:94:34:98:26:1f:bb:6d:6b:4e:56:b6:07:5d:47:76:
42:2b:d3:73:7e:a2:e8:d0:a8:c3:cf:03:e5:2b:c9:5c:4a:1b:
0c:58:47:4f:be:f9:26:38:03:8b:8f:8f:0b:b6:e5:bc:f7:59:
65:e6:02:bb:96:fc:4e:e5:82:65:a8:81:d4:54:37:59:90:90:
1d:fa:0f:76:56:77:10:16:da:c2:2a:28:aa:fc:9f:02:89:13:
f3:ed:24:de:d9:fb:0c:1e:09:2b:4b:00:dc:a4:94:43:9c:48:
d7:ca:78:8f:81:e1:7c:d0:97:38:d5:0b:af:c6:4e:c2:7a:f1:
d1:45:9d:a6:d0:23:c8:9c:98:9f:1e:3d:7e:9d:a3:e6:77:3f:
a9:6e:6a:7e:a0:27:4c:42:a7:3c:85:91:fe:6b:8d:f2:04:bd:
98:cf:75:5d:b6:05:d7:e3:a2:d6:96:f7:bf:ca:16:35:ed:61:
7a:2d:b4:e6:cd:d4:d8:3a:f9:70:ff:c6:bc:c8:3b:ba:41:e3:
e7:6e:e7:3f:1e:90:a3:b1:de:4f:b9:22:57:35:1d:4f:44:d3:
41:5f:40:c7:6f:40:62:63:fa:c3:42:52:26:30:af:e4:ff:1a:
2b:06:4b:28:4d:5e:84:a0:d7:dd:ab:7f:4a:a0:17:4b:cd:76:
0c:38:e2:a7
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICNTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzAzMDQxMTAvBgNVBAUTKDVGQzI3OTJDRjQ0MEI4NTc4MzlENjg4QTcwQjYwRjA3
NjJBQkFCMzUwHhcNMjYwMzE4MTUxMzA2WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWJhYzEwMi0wOWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi2DB3qYA9DzJhsyXCTm7zy9q6GZJo7Tc7OzJ1Y26au69fu2ubFy1GriYPxWm
5sUIx6sTw138kPZO8MnhbzifYYNpF/tmZJnYplTMAa2uo/KuVbH+tvT6DFxfjFmA
sXGred0dQpw8D+0hVWnvy5wkSnXfxJcrcAhYPC/vghTXmzA6Y4Btr/F5po6bXeB9
OtjK30EqyIgZfjDcP+BjrLPyUvG872wLC8KL8zd185xh9ywp5Jc3CdT+eiiLNNZr
hR+OLSxoPUBzJZVSwy+9iGpH+hgRCu8TqQf0mcN7wr6NImx7xnuPyFSaFNnK2vtg
A/qyUvLulVkuYaudBgv0JaRBUQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFM9N0D2t
6ahsk+AyMyYGstiZCMp/MB8GA1UdIwQYMBaAFF/CeSz0QLhXg51oinC2Dwdiq6s1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC9BQjgyNDlCMjFE
OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVGZURuV2lLY0xZUEIyS3Jx
elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1g4SjVMUFJBdUZlRG5XaUtjTFlQQjJLcnF6VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzAzMDQvQUI4MjQ5QjIxRDhFMTFFMkIxODIyNkVEMDhCMDJDRDIvNkQxMDZDRUUz
QUEwMTFFQjk2M0I0ODQyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQDygcIAwQAywV5MA0GCSqGSIb3DQEBCwUAA4IBAQB8LziUNJgmH7tt
a05WtgddR3ZCK9NzfqLo0KjDzwPlK8lcShsMWEdPvvkmOAOLj48LtuW891ll5gK7
lvxO5YJlqIHUVDdZkJAd+g92VncQFtrCKiiq/J8CiRPz7STe2fsMHgkrSwDcpJRD
nEjXyniPgeF80Jc41Quvxk7CevHRRZ2m0CPInJifHj1+naPmdz+pbmp+oCdMQqc8
hZH+a43yBL2Yz3VdtgXX46LWlve/yhY17WF6LbTmzdTYOvlw/8a8yDu6QePnbuc/
HpCjsd5PuSJXNR1PRNNBX0DHb0BiY/rDQlImMK/k/xorBksoTV6EoNfdq39KoBdL
zXYMOOKn
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:39 2026 by rpki-client