
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/EDE89884DB1711EF8929832EC4F9AE02.roa
File: EDE89884DB1711EF8929832EC4F9AE02.roa (raw, json)
Hash identifier: ZAAc7Mnkor/okk5rhdONOcQdFtaHRUehKntnjNXP9g4=
Subject key identifier: F4:B9:CD:28:05:FD:3C:FC:87:EF:31:17:88:D7:49:39:32:02:FF:BB
Certificate issuer: /CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
Certificate serial: 02A1
Authority key identifier: 3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/EDE89884DB1711EF8929832EC4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:28:10 +0000
ROA not before: Fri 05 Dec 2025 00:09:29 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 137526
IP address blocks: 103.20.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl
rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673 (0x2a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176909, serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
Validity
Not Before: Dec 5 00:09:29 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a5825a-6d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:ad:60:20:aa:4d:35:b6:fb:ea:d2:2a:33:
6b:8d:79:75:35:6a:b1:45:e4:cf:52:a6:ef:b0:70:
47:93:d4:68:42:5a:99:f3:ee:a4:57:ab:bb:a5:da:
a2:ba:85:56:d4:ab:5b:98:de:9f:06:0e:e3:6b:59:
3a:bc:14:10:75:04:21:4b:27:7a:60:18:81:f6:f3:
bc:8c:14:15:62:57:6c:e3:e7:24:8e:94:5e:ea:93:
d0:92:18:23:5b:f0:0c:32:e6:22:4a:a5:3a:5f:1a:
65:55:aa:98:f6:41:6e:56:d9:4b:84:ec:74:d1:15:
0d:f4:38:87:60:61:e0:64:59:bd:92:e3:66:c4:70:
b7:cb:a0:bf:ae:f2:b8:91:17:48:dc:9b:8d:d8:bc:
56:3a:fc:07:8e:76:04:84:3c:7b:80:91:15:ca:22:
1f:4d:1e:2f:36:a6:5c:09:fd:d3:b2:e9:09:90:94:
0b:97:3c:5e:71:65:0e:c0:0b:91:b6:b8:06:03:92:
72:50:c5:69:4a:8b:e7:fc:8c:25:7c:fa:70:f3:fd:
69:dc:a4:dd:6a:fd:8f:3f:e0:28:52:17:93:f5:27:
1e:94:77:01:f7:31:6c:de:27:46:86:01:17:52:1f:
81:f9:2a:1d:20:a5:92:ea:24:97:86:e2:00:de:ba:
fe:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B9:CD:28:05:FD:3C:FC:87:EF:31:17:88:D7:49:39:32:02:FF:BB
X509v3 Authority Key Identifier:
keyid:3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/EDE89884DB1711EF8929832EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.20.243.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b2:97:10:b8:87:3e:7c:51:44:7a:95:44:59:a7:24:51:73:
56:d1:56:9d:0d:91:7f:36:a7:0f:10:4c:e0:8f:82:f1:36:ee:
8f:08:d4:7c:6c:7f:5c:6e:68:4e:64:bf:d2:a5:5c:17:8e:55:
1c:03:3c:06:1d:8c:fb:7a:79:91:e0:54:70:78:b7:14:61:a5:
c4:7a:68:4e:b6:fe:b4:ca:56:27:42:24:61:2b:01:49:5d:6c:
b3:4a:24:b5:d3:d5:1d:9f:a4:fa:f4:e3:54:95:47:5e:26:ab:
67:6e:20:d0:26:26:29:1c:67:0f:d0:1f:d0:58:a8:9f:2c:19:
24:7c:0d:9b:c2:15:a2:5d:cb:c8:36:6b:38:a8:ce:b3:8c:80:
36:6c:55:e0:1b:ec:ca:42:8f:12:f1:03:22:ff:d4:a4:5a:fb:
5e:26:53:93:cc:c5:70:d0:cf:9b:eb:d8:29:e3:3f:27:7d:43:
31:81:d5:c3:f2:45:5b:3b:aa:03:bc:82:97:83:c3:3d:f6:93:
ff:bb:3f:f7:66:c8:31:cc:c9:60:10:87:3f:19:ca:b7:3a:78:
fa:32:d5:af:f4:0a:1f:1b:da:44:d2:f8:30:c5:23:9b:4b:22:
f6:00:9b:f8:de:2d:a4:c3:d4:20:34:da:65:48:22:5b:64:a8:
0d:e6:2c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:58:46 2026 by rpki-client