
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/C300B2460C2811EAA5153045C4F9AE02.roa
File: C300B2460C2811EAA5153045C4F9AE02.roa (raw, json)
Hash identifier: JgnolOzpm6VmhgaucmzriI3r3dnyxwmh3l3xTGG999k=
Subject key identifier: 70:89:CA:76:78:AA:4F:79:5C:03:04:7B:D4:8A:FA:57:B3:3B:67:09
Certificate issuer: /CN=A9174C93/serialNumber=1B041605D6D8386CF7225D679B410348991FE233
Certificate serial: 0D23
Authority key identifier: 1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/C300B2460C2811EAA5153045C4F9AE02.roa
Signing time: Tue 22 Sep 2026 18:37:44 +0000
ROA not before: Tue 22 Sep 2026 18:37:44 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 132622
IP address blocks: 103.73.196.0/22 maxlen: 24
103.237.76.0/22 maxlen: 24
2405:85c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl
rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3363 (0xd23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174C93, serialNumber=1B041605D6D8386CF7225D679B410348991FE233
Validity
Not Before: Sep 22 18:37:44 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ab2caf7-7c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:17:4e:6c:09:ea:0a:56:d6:7d:72:ea:32:18:
79:a7:8b:7b:b3:9d:18:59:85:c5:d0:d9:37:7c:75:
60:9e:bd:d9:67:c8:e2:58:e1:f0:20:51:dc:7a:a9:
7b:26:07:30:c6:34:7f:b5:25:4b:c4:9c:13:5a:c2:
5f:7a:31:f5:e4:04:8a:d9:97:e4:e5:83:f7:e3:c7:
25:30:9d:dc:df:77:c7:1d:06:aa:7c:e4:33:ef:ca:
58:9d:3d:7e:ea:99:7f:43:27:be:40:34:37:d2:d7:
84:8b:a1:93:41:72:20:ab:2a:01:3c:cd:27:60:f8:
6c:ec:6a:83:06:82:e0:72:91:3d:a2:68:d5:af:34:
2e:cd:a4:dc:b0:bd:40:06:50:bf:e4:9b:c3:16:30:
6b:91:f0:a0:e0:19:a8:08:d9:20:09:37:9c:2d:52:
a1:d7:44:16:58:e2:72:20:8d:00:c8:6c:0e:55:06:
e5:b5:83:16:32:26:96:46:8f:36:96:b4:3e:c6:3c:
a4:d9:cb:8c:0a:28:0c:78:d0:a6:e5:38:e3:d6:af:
32:e9:e2:f5:3c:49:12:6d:ff:8c:e8:5a:ca:c1:18:
cd:41:45:89:77:70:6a:3a:d6:1e:1e:e3:94:b5:2a:
52:b9:d1:6e:74:19:3b:cd:09:d4:d4:d6:03:17:f2:
e8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:89:CA:76:78:AA:4F:79:5C:03:04:7B:D4:8A:FA:57:B3:3B:67:09
X509v3 Authority Key Identifier:
keyid:1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/C300B2460C2811EAA5153045C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.73.196.0/22
103.237.76.0/22
IPv6:
2405:85c0::/32
Signature Algorithm: sha256WithRSAEncryption
5d:bf:18:af:02:e1:d8:27:79:46:8d:16:f6:18:52:56:58:44:
ac:b0:1c:12:ff:15:77:65:70:51:45:f0:7a:13:b5:36:05:71:
d9:77:08:a1:f8:42:a3:b4:4a:a1:f9:19:dc:82:78:2a:eb:b6:
49:8e:c9:2b:ff:1a:4b:d1:68:a8:60:b2:46:f6:06:ac:91:9f:
f4:82:40:f0:b9:95:2a:a1:36:dd:ee:bb:9b:29:41:7c:c7:3a:
e8:78:df:23:a8:fd:56:b5:a4:cd:ab:40:e0:f7:6d:a1:9f:cf:
1a:7e:7f:8e:bc:ea:42:5b:5a:b5:c8:4d:b5:88:95:04:9d:9e:
18:d5:95:24:94:60:28:8f:67:25:d9:d9:18:48:88:32:46:cd:
31:f3:20:fc:a1:73:c3:65:27:aa:31:56:20:66:0f:e6:34:c9:
4e:2f:19:ff:6f:1d:e4:e2:b6:83:98:3a:73:42:47:b8:25:51:
aa:23:46:fa:34:b4:0d:cb:2e:44:7c:39:d2:4a:fa:49:0c:1f:
7b:f4:23:f9:a0:30:47:f3:64:00:e0:71:e8:c1:6b:5d:5a:69:
d6:c9:9f:9d:aa:24:29:d7:0c:57:31:50:81:1b:31:f4:d3:27:
ed:93:e9:65:87:a0:e7:79:8c:5a:8f:da:f0:0d:ec:98:58:ac:
32:f1:57:45
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICDSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzRDOTMxMTAvBgNVBAUTKDFCMDQxNjA1RDZEODM4NkNGNzIyNUQ2NzlCNDEwMzQ4
OTkxRkUyMzMwHhcNMjYwOTIyMTgzNzQ0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWIyY2FmNy03YzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvRdObAnqClbWfXLqMhh5p4t7s50YWYXF0Nk3fHVgnr3ZZ8jiWOHwIFHceql7
JgcwxjR/tSVLxJwTWsJfejH15ASK2Zfk5YP348clMJ3c33fHHQaqfOQz78pYnT1+
6pl/Qye+QDQ30teEi6GTQXIgqyoBPM0nYPhs7GqDBoLgcpE9omjVrzQuzaTcsL1A
BlC/5JvDFjBrkfCg4BmoCNkgCTecLVKh10QWWOJyII0AyGwOVQbltYMWMiaWRo82
lrQ+xjyk2cuMCigMeNCm5Tjj1q8y6eL1PEkSbf+M6FrKwRjNQUWJd3BqOtYeHuOU
tSpSudFudBk7zQnU1NYDF/LoLQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFHCJynZ4
qk95XAMEe9SK+lezO2cJMB8GA1UdIwQYMBaAFBsEFgXW2Dhs9yJdZ5tBA0iZH+Iz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEM5My9DOEU4QjFGNjBD
MjYxMUVBODBFRjQwNDFDNEY5QUUwMi9Hd1FXQmRiWU9HejNJbDFubTBFRFNKa2Y0
ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d3UVdCZGJZT0d6M0lsMW5tMEVEU0prZjRqTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzRDOTMvQzhFOEIxRjYwQzI2MTFFQTgwRUY0MDQxQzRGOUFFMDIvQzMwMEIyNDYw
QzI4MTFFQUE1MTUzMDQ1QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQCZ0nEAwQCZ+1MMA0EAgACMAcDBQAkBYXAMA0GCSqGSIb3DQEBCwUA
A4IBAQBdvxivAuHYJ3lGjRb2GFJWWESssBwS/xV3ZXBRRfB6E7U2BXHZdwih+EKj
tEqh+Rncgngq67ZJjskr/xpL0WioYLJG9gaskZ/0gkDwuZUqoTbd7rubKUF8xzro
eN8jqP1WtaTNq0Dg922hn88afn+OvOpCW1q1yE21iJUEnZ4Y1ZUklGAoj2cl2dkY
SIgyRs0x8yD8oXPDZSeqMVYgZg/mNMlOLxn/bx3k4raDmDpzQke4JVGqI0b6NLQN
yy5EfDnSSvpJDB979CP5oDBH82QA4HHowWtdWmnWyZ+dqiQp1wxXMVCBGzH00yft
k+llh6DneYxaj9rwDeyYWKwy8VdF
-----END CERTIFICATE-----
Generated at Sat Sep 26 13:06:47 2026 by rpki-client