
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/394CC63C2D2F11F19323886DBB833773.roa
File: 394CC63C2D2F11F19323886DBB833773.roa (raw, json)
Hash identifier: UcIR8DxPXmcFWmxr+PON26bbeeLTamW0ObYvmvntKx4=
Subject key identifier: 12:F2:99:B5:36:14:91:54:D7:0D:70:E3:D8:E7:2C:BB:A5:12:7B:93
Certificate issuer: /CN=A9171B8D/serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52
Certificate serial: 0114
Authority key identifier: BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/394CC63C2D2F11F19323886DBB833773.roa
Signing time: Sun 23 Aug 2026 05:56:22 +0000
ROA not before: Sun 23 Aug 2026 05:56:22 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 135145
IP address blocks: 103.240.40.0/23 maxlen: 23
2401:1be0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl
rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 06:16:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276 (0x114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171B8D, serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52
Validity
Not Before: Aug 23 05:56:22 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8a8b86-2ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:04:b4:74:1d:bc:57:3e:94:b1:01:0e:b6:
1e:49:62:19:ee:0f:f1:89:97:d9:3d:e6:91:85:00:
01:2d:6c:b0:c0:01:a2:4d:a1:1c:4f:05:05:c5:02:
22:69:1b:5f:d0:12:9a:35:25:2b:73:5d:9d:45:f2:
23:7b:cb:b4:c9:58:67:b3:53:1e:e6:7a:fd:04:04:
54:dd:71:35:0c:49:a9:24:ba:a8:29:98:35:13:e5:
12:29:ff:e1:47:ac:6a:c9:9c:34:bb:c7:23:21:2b:
7b:06:ac:e5:99:9e:ea:e1:0e:ed:d9:d5:7b:2b:1d:
9e:12:ec:3e:02:03:7e:b8:e7:24:50:e0:98:ff:61:
11:45:82:db:21:99:c9:cb:5f:2d:e1:3b:38:b2:55:
f6:01:40:67:a1:a5:c7:e7:fb:76:dd:a5:29:2c:50:
e5:f3:9e:be:7f:8c:9f:e1:63:fc:c8:87:9c:74:f9:
f2:41:36:2f:12:80:74:a3:1f:09:9e:82:a5:d0:ba:
dc:bf:5e:b4:29:a4:21:11:1a:af:60:67:c2:10:7a:
4b:e8:fa:60:e8:4c:87:41:60:0d:f6:a7:70:41:85:
08:75:7d:03:c8:76:86:c2:8f:58:b9:42:fa:11:fc:
66:ac:17:d7:2f:50:ab:27:ad:62:a8:01:f1:9b:90:
1f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F2:99:B5:36:14:91:54:D7:0D:70:E3:D8:E7:2C:BB:A5:12:7B:93
X509v3 Authority Key Identifier:
keyid:BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/394CC63C2D2F11F19323886DBB833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.240.40.0/23
IPv6:
2401:1be0::/32
Signature Algorithm: sha256WithRSAEncryption
89:5b:21:30:88:e9:35:41:db:29:30:e8:fb:d4:48:e2:64:74:
c7:3b:77:51:e7:6d:c9:af:c4:d0:43:89:36:47:24:99:a6:6a:
4b:84:81:fb:0c:d5:6f:77:f1:35:a7:25:c9:11:8a:f4:3d:e5:
8e:ad:61:78:84:07:a0:67:34:c2:fa:5f:8c:7a:99:ce:07:77:
57:32:33:1b:bb:e6:db:40:f9:85:ae:e7:72:db:a6:ac:42:55:
13:3a:a9:69:a7:64:bf:9b:6f:40:92:7b:e1:20:d0:d4:8b:ec:
ac:8f:a7:87:6c:10:5b:c8:c8:39:6d:e7:d9:85:3e:32:32:de:
34:fe:f1:d1:8d:7a:10:8c:75:16:c3:04:97:96:b0:21:59:d9:
d2:2c:86:2f:82:7a:e4:d1:27:75:51:e4:51:2d:cb:5b:88:df:
77:1b:47:5d:98:c3:47:8d:6d:f2:17:28:f2:0d:7c:b9:58:e5:
a5:29:de:22:8a:a3:78:3f:00:00:fc:25:14:1e:a6:23:d8:6e:
08:6e:d8:ee:1a:38:3a:38:71:0e:7e:04:7e:d7:7f:86:8b:b9:
c5:f8:c3:82:5f:4f:4b:08:f9:7c:a8:a4:6a:58:63:8a:a5:28:
01:d0:66:40:51:cf:89:5c:2a:fb:24:9f:10:73:bd:dc:e9:96:
16:8a:d7:18
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzFCOEQxMTAvBgNVBAUTKEJFNjM4MDM3MEY2NDA2RTYzRjc0NkZBRjUyQkM1MDFF
QzREMEJENTIwHhcNMjYwODIzMDU1NjIyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YThhOGI4Ni0yZWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvbEEtHQdvFc+lLEBDrYeSWIZ7g/xiZfZPeaRhQABLWywwAGiTaEcTwUFxQIi
aRtf0BKaNSUrc12dRfIje8u0yVhns1Me5nr9BARU3XE1DEmpJLqoKZg1E+USKf/h
R6xqyZw0u8cjISt7BqzlmZ7q4Q7t2dV7Kx2eEuw+AgN+uOckUOCY/2ERRYLbIZnJ
y18t4Ts4slX2AUBnoaXH5/t23aUpLFDl856+f4yf4WP8yIecdPnyQTYvEoB0ox8J
noKl0Lrcv160KaQhERqvYGfCEHpL6Ppg6EyHQWAN9qdwQYUIdX0DyHaGwo9YuUL6
EfxmrBfXL1CrJ61iqAHxm5AfBwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFBLymbU2
FJFU1w1w49jnLLulEnuTMB8GA1UdIwQYMBaAFL5jgDcPZAbmP3Rvr1K8UB7E0L1S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUI4RC8xQ0Y5QTg3QTAz
RDExMUYwQjIzNEJDMTVDNEY5QUUwMi92bU9BTnc5a0J1WV9kRy12VXJ4UUhzVFF2
VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZtT0FOdzlrQnVZX2RHLXZVcnhRSHNUUXZWSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzFCOEQvMUNGOUE4N0EwM0QxMTFGMEIyMzRCQzE1QzRGOUFFMDIvMzk0Q0M2M0My
RDJGMTFGMTkzMjM4ODZEQkI4MzM3NzMucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ/AoMA0EAgACMAcDBQAkARvgMA0GCSqGSIb3DQEBCwUAA4IBAQCJ
WyEwiOk1QdspMOj71EjiZHTHO3dR523Jr8TQQ4k2RySZpmpLhIH7DNVvd/E1pyXJ
EYr0PeWOrWF4hAegZzTC+l+MepnOB3dXMjMbu+bbQPmFrudy26asQlUTOqlpp2S/
m29AknvhINDUi+ysj6eHbBBbyMg5befZhT4yMt40/vHRjXoQjHUWwwSXlrAhWdnS
LIYvgnrk0Sd1UeRRLctbiN93G0ddmMNHjW3yFyjyDXy5WOWlKd4iiqN4PwAA/CUU
HqYj2G4IbtjuGjg6OHEOfgR+13+Gi7nF+MOCX09LCPl8qKRqWGOKpSgB0GZAUc+J
XCr7JJ8Qc73c6ZYWitcY
-----END CERTIFICATE-----
Generated at Thu Oct 8 17:51:19 2026 by rpki-client