
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/DD2DD3489F9111ECB958FF25C4F9AE02.roa
File: DD2DD3489F9111ECB958FF25C4F9AE02.roa (raw, json)
Hash identifier: vXrK9p/bSrHzrE6vhfvw5W6cs8ipAH77l/lL+wAN7AU=
Subject key identifier: D0:CD:44:4C:BB:B0:9A:CA:66:DE:06:D0:50:EC:A9:BC:B1:01:64:CE
Certificate issuer: /CN=A9172CB5/serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD
Certificate serial: 042F
Authority key identifier: 69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/DD2DD3489F9111ECB958FF25C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:01:46 +0000
ROA not before: Thu 27 Mar 2025 01:07:14 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 139603
IP address blocks: 103.182.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl
rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1071 (0x42f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172CB5, serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD
Validity
Not Before: Mar 27 01:07:14 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a40e89-c141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:76:3d:e2:c2:5b:53:41:a8:9a:df:52:db:
f9:1d:58:bd:9b:4a:20:65:60:bc:b6:42:fd:07:1f:
03:86:06:5e:f5:f6:57:cd:ae:46:fc:11:6d:16:9a:
b3:b3:35:f4:d2:3b:e2:55:47:5b:c8:4c:f2:0e:e5:
2f:34:8f:b5:33:66:91:03:0f:5e:63:72:c2:84:a8:
e0:86:b8:d9:89:21:50:7f:6e:7b:f8:18:03:dd:6d:
eb:46:91:52:05:c7:e0:78:dd:a6:5a:cf:36:1f:f6:
d6:a3:3f:5c:15:76:10:e0:a3:62:e1:9a:f4:05:0f:
d8:1c:6f:85:89:af:d1:d4:20:a9:87:77:24:0c:f3:
fb:a8:19:90:4f:96:01:89:c0:60:b9:37:e6:be:93:
25:db:ff:43:39:fa:90:67:1e:74:4c:e8:24:8a:06:
b8:85:bd:5c:d9:3d:9a:f5:e6:c6:8a:57:38:61:c3:
f2:ca:a6:6a:15:48:73:37:95:6f:7e:7c:24:d7:3d:
f8:aa:69:fc:73:d1:e7:e8:dc:24:9c:13:6d:ef:d2:
f0:81:8d:1f:1f:3a:c3:a2:f6:95:16:f6:c1:0a:a8:
e6:88:19:b0:ef:cd:77:1b:81:1b:6e:fb:b2:a3:0f:
ac:af:2e:b2:10:09:8e:3d:49:b1:99:7d:ad:17:bd:
47:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CD:44:4C:BB:B0:9A:CA:66:DE:06:D0:50:EC:A9:BC:B1:01:64:CE
X509v3 Authority Key Identifier:
keyid:69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/DD2DD3489F9111ECB958FF25C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.182.73.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:19:21:99:24:eb:64:db:c3:7e:26:93:7a:20:d5:ab:d8:2e:
33:87:9e:b7:46:9a:30:bc:0e:0f:49:b1:5f:f3:35:21:38:e4:
0b:36:73:42:ea:ab:8d:27:31:08:ce:7c:07:26:43:bc:10:ce:
b9:95:bc:42:bf:1e:2c:bf:53:58:64:72:c1:84:1f:49:85:fe:
b9:cc:3f:6c:ae:6c:41:bd:40:6e:a3:0c:a0:c5:1b:31:8b:8c:
f6:2f:87:eb:8b:6e:88:86:63:77:40:3a:51:eb:b8:fd:32:5c:
0d:6f:7d:6d:75:a0:d6:63:df:aa:39:74:99:ca:c8:6a:95:8c:
77:4d:7f:4f:4d:fd:d7:e3:26:79:7c:5e:e1:63:eb:3e:c9:0d:
d2:72:57:de:a2:c5:0d:76:9a:89:2f:5c:ec:6e:30:00:a1:5d:
20:72:3f:bd:7d:1a:6d:be:5e:5e:f8:4e:52:98:22:12:c5:fa:
65:2d:60:a9:92:55:95:f5:c5:7c:0e:42:41:23:b4:19:e3:f1:
86:7f:a9:24:08:06:d9:43:ff:c1:1f:2b:ed:e2:b2:a4:5d:22:
97:3c:1a:3d:35:f8:ed:40:fc:c9:ce:11:64:9f:02:06:38:1f:
eb:64:22:2e:ea:4b:09:b9:2e:48:a1:3b:b4:11:28:71:d8:23:
3d:f5:68:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:48:52 2026 by rpki-client