
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/7D6BCA6429D111F09DF2F66EC4F9AE02.roa
File: 7D6BCA6429D111F09DF2F66EC4F9AE02.roa (raw, json)
Hash identifier: 5jsdXF6s05KmKUh4GwJf4zmDmvtnxukC7D1ccx81YGo=
Subject key identifier: 38:78:F5:9A:A3:0A:F1:C1:20:09:A7:7B:AF:57:79:DC:E8:B5:AE:74
Certificate issuer: /CN=A9173C08/serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D
Certificate serial: DB
Authority key identifier: 32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/7D6BCA6429D111F09DF2F66EC4F9AE02.roa
Signing time: Wed 29 Apr 2026 07:42:27 +0000
ROA not before: Wed 29 Apr 2026 07:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15830
IP address blocks: 103.212.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl
rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173C08, serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D
Validity
Not Before: Apr 29 07:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f1b663-d60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:12:19:30:7b:f4:be:74:3f:64:99:52:c6:ec:
bc:cc:a5:aa:97:57:9c:ea:7b:83:82:3a:b5:f8:f2:
f4:4d:67:c6:e0:4b:2a:87:a9:35:ac:26:a2:4c:d7:
ef:17:97:aa:d3:62:ee:ce:51:76:2b:f5:44:07:5a:
4f:b5:50:f8:c2:5d:38:d4:da:37:ca:da:be:fe:71:
2d:18:9d:aa:12:55:17:34:04:c1:36:a1:7f:37:5f:
7c:df:11:5a:a5:2e:30:ab:77:ba:36:35:57:1b:69:
72:16:0a:61:1c:c2:43:25:d8:47:2f:68:e5:40:76:
2c:02:38:d4:9e:14:bb:20:f9:34:43:b6:bf:fd:eb:
01:47:9d:65:32:5d:76:aa:71:d6:4d:86:07:e9:12:
0b:6b:e4:a8:e1:29:57:b4:75:55:bc:19:85:84:c5:
4a:ad:38:16:f4:83:f3:f1:18:5d:b8:15:21:06:40:
3c:3d:05:ba:35:7e:8f:93:1e:96:30:62:aa:b8:23:
e9:e5:dc:0b:54:3e:84:9c:1f:c0:84:5e:ae:99:df:
ae:78:29:d1:0f:c0:a9:85:43:78:08:71:19:c4:96:
ae:57:78:07:27:eb:17:cc:45:2a:79:71:a8:6c:dc:
4a:4d:97:0d:34:7d:98:60:36:95:9d:c3:2f:a1:64:
1b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:78:F5:9A:A3:0A:F1:C1:20:09:A7:7B:AF:57:79:DC:E8:B5:AE:74
X509v3 Authority Key Identifier:
keyid:32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/7D6BCA6429D111F09DF2F66EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.212.115.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:12:31:e3:51:92:83:07:47:dc:a1:00:70:57:98:a5:a2:f8:
e3:78:0d:aa:2a:ed:95:8e:b7:e7:88:e8:0e:93:ca:3e:be:55:
f2:25:b4:85:e8:20:e4:91:3e:61:37:5b:e0:6a:16:a7:0c:2e:
0f:06:3c:57:10:a5:c1:db:7a:59:f2:15:e3:7a:c3:34:49:4d:
cb:39:6b:53:69:98:4f:2b:bf:af:90:64:05:61:b4:50:d7:d4:
4e:4b:53:f0:47:bb:57:65:cb:c5:0e:02:0c:e5:7d:0c:af:cf:
99:a6:f0:25:90:76:a3:53:08:34:74:df:07:f9:0a:be:b5:2f:
a2:17:ad:37:c5:5f:0e:9e:e8:d8:4a:c0:17:24:2b:f3:c4:4b:
b5:5b:19:ee:7e:55:25:ed:36:b8:07:be:64:7f:f3:13:fb:3a:
f0:3a:4c:d9:26:81:ea:ab:eb:6f:59:ed:db:e9:1e:56:c2:ee:
14:72:6f:f4:fd:22:a5:a7:67:b4:f0:88:6a:4d:11:d4:ba:f5:
81:ea:42:7f:58:7f:19:50:7c:c5:74:2c:11:55:ba:b3:d3:4e:
c4:b0:8d:e5:6c:b9:9a:2c:14:7d:76:19:fa:80:67:4c:0a:ab:
e3:52:5e:f4:6e:0a:09:6e:0c:e2:22:b2:5c:8c:42:f5:cf:2e:
c8:24:a6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:16:32 2026 by rpki-client