
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/A2A3D38A05CE11EA80526530C4F9AE02.roa
File: A2A3D38A05CE11EA80526530C4F9AE02.roa (raw, json)
Hash identifier: yH3p3lPH8xU3vzOSWPcb+rrTrhSn1jzm2Bc4yCfrO7g=
Subject key identifier: 47:D4:36:97:4D:18:62:A8:81:85:7B:35:EE:91:43:2D:4A:07:B5:7D
Certificate issuer: /CN=A9171064/serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430
Certificate serial: 0D35
Authority key identifier: FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/A2A3D38A05CE11EA80526530C4F9AE02.roa
Signing time: Sat 22 Aug 2026 18:36:19 +0000
ROA not before: Sat 22 Aug 2026 18:36:19 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 137911
IP address blocks: 103.117.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl
rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 18:12:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3381 (0xd35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171064, serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430
Validity
Not Before: Aug 22 18:36:19 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a89ec23-cde3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a2:73:5a:66:d7:b9:2f:e9:01:b3:52:aa:89:
53:2e:9b:f6:65:fc:dd:6f:3f:16:d2:31:85:ac:f4:
71:58:e1:68:fa:83:bb:35:79:dd:74:4b:68:6d:8b:
7f:e2:53:2d:d3:47:69:3d:3b:6d:58:19:10:63:07:
b9:fa:70:67:b7:ea:3a:4b:06:79:3a:d8:bb:f5:7d:
93:f7:68:d8:c7:93:d9:e4:5d:70:23:9b:d9:c4:5d:
75:a4:b1:25:78:a2:50:37:b6:0b:be:3a:5f:49:85:
12:d8:29:e3:9d:3b:64:65:05:58:d3:96:6c:f1:27:
59:26:2c:e5:f5:7d:e1:ed:69:70:d0:c4:95:ca:cf:
09:dc:b5:d6:24:dc:66:f6:11:d7:a5:ce:16:b9:d8:
2f:51:48:cf:94:8d:b9:b5:02:ed:32:bb:bc:7d:6f:
63:ea:f6:00:72:57:26:03:37:de:b4:36:35:f8:8b:
5e:be:84:ed:a8:95:20:4b:9f:5d:0d:b8:63:f4:ef:
ae:8a:78:e3:9a:e6:e6:4f:a3:06:89:b5:69:1b:38:
68:8a:f9:3b:2d:c3:e8:ad:5f:80:57:04:13:a0:3a:
7d:72:24:aa:78:5c:c3:7d:af:4e:10:2d:2d:3c:3a:
5c:d3:dd:a1:ba:05:0f:11:f4:4a:d8:94:b7:68:10:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D4:36:97:4D:18:62:A8:81:85:7B:35:EE:91:43:2D:4A:07:B5:7D
X509v3 Authority Key Identifier:
keyid:FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/A2A3D38A05CE11EA80526530C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.117.11.0/24
Signature Algorithm: sha256WithRSAEncryption
51:18:d5:54:23:84:44:31:53:58:2b:cb:80:cc:5a:c0:95:d3:
2f:61:4e:ff:0f:3e:56:8d:c6:66:d6:48:ee:06:d1:0e:a6:6f:
ee:20:c8:91:a1:25:53:92:01:d6:1a:f7:5d:05:e5:6b:92:41:
93:38:0b:6d:26:f6:88:50:87:75:db:ae:1e:5d:b2:98:ea:fe:
19:62:83:16:03:4d:3b:20:f0:5c:85:73:73:ee:9b:b0:3d:c4:
3b:7e:9a:fe:09:e0:fe:bf:8a:78:88:0c:5f:87:54:0d:10:ff:
7d:9a:67:e4:fc:97:5c:0f:c5:87:ff:d1:75:a2:77:08:0b:f5:
93:b9:a3:64:65:e6:ac:8f:0f:a9:30:2b:ac:84:47:a7:e1:0e:
2a:f8:b8:2f:35:7a:c4:0f:3d:8a:27:e7:2b:34:95:03:1a:8a:
32:66:43:a6:48:b0:72:91:33:be:e3:56:60:99:7b:8e:2e:a4:
77:5f:67:bc:34:6b:63:f0:ce:f4:cb:11:9b:70:49:35:fc:05:
a4:fa:21:67:d7:42:a4:34:89:8f:a5:0c:22:60:09:2f:8a:e8:
32:44:2a:64:cd:69:ec:6c:cd:a5:b2:5a:da:f3:ed:60:a1:2d:
dc:f6:8d:2a:38:dd:83:2a:2f:41:7c:9f:d5:37:ff:0c:fe:86:
76:54:5d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:49:50 2026 by rpki-client