
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/8642C6D6582111EC8035E069C4F9AE02.roa
File: 8642C6D6582111EC8035E069C4F9AE02.roa (raw, json)
Hash identifier: 5HdD0J+iGt0r4zH6K6aS21ioONnsOro+za4lO7tO1r0=
Subject key identifier: 97:92:7D:12:67:A8:17:5D:F0:4B:24:C9:FD:BD:68:90:19:BE:16:78
Certificate issuer: /CN=A9181437/serialNumber=AF0BE0B24A119D3B3E93FD0CD3B3415A2C0D01B8
Certificate serial: 050F
Authority key identifier: AF:0B:E0:B2:4A:11:9D:3B:3E:93:FD:0C:D3:B3:41:5A:2C:0D:01:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwvgskoRnTs-k_0M07NBWiwNAbg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/8642C6D6582111EC8035E069C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:45:55 +0000
ROA not before: Wed 03 Sep 2025 00:44:56 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 138997
IP address blocks: 103.171.176.0/23 maxlen: 24
2407:c640::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.crl
rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwvgskoRnTs-k_0M07NBWiwNAbg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1295 (0x50f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181437, serialNumber=AF0BE0B24A119D3B3E93FD0CD3B3415A2C0D01B8
Validity
Not Before: Sep 3 00:44:56 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a43502-90fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:90:b2:ac:8a:4d:fb:4d:17:bd:d3:aa:64:6f:
de:1b:be:7e:cf:79:21:12:15:cd:5a:b4:a6:e8:18:
03:e4:b5:06:5f:51:36:66:0a:30:c9:84:13:45:8b:
bc:b5:78:a3:3b:5c:ec:a6:13:0f:f3:1d:58:62:58:
25:9e:10:02:af:72:85:71:9f:4c:15:68:31:aa:9f:
dd:32:11:56:f0:22:e4:3d:00:9b:fd:c5:75:be:15:
f8:8a:a8:dd:ef:3b:92:91:a2:1e:a9:53:e3:17:8e:
1a:6f:ba:f9:9d:b3:d1:45:85:13:66:b0:8e:60:4c:
40:3c:c0:73:be:e7:fd:29:f7:b3:13:11:fc:0c:0a:
9f:a3:5c:24:8f:06:59:b1:43:d8:67:2e:ee:0d:ea:
b9:e7:21:5d:8d:80:07:f4:04:5b:e4:74:eb:90:37:
e9:f2:9b:ec:be:4f:b5:c9:68:33:69:e6:89:d9:c0:
2d:27:9e:7c:69:bb:53:22:ff:e0:c7:5e:d3:40:5e:
48:a2:ef:fd:8a:6d:96:ce:8a:46:3b:5b:ce:69:ac:
5c:a3:9a:ad:e5:82:46:f7:02:5e:15:2d:4b:1c:97:
f4:98:33:96:79:42:07:32:34:71:28:2c:8c:68:19:
ea:38:60:2f:ec:a9:a2:42:50:85:6c:be:10:bf:17:
bc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:92:7D:12:67:A8:17:5D:F0:4B:24:C9:FD:BD:68:90:19:BE:16:78
X509v3 Authority Key Identifier:
keyid:AF:0B:E0:B2:4A:11:9D:3B:3E:93:FD:0C:D3:B3:41:5A:2C:0D:01:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwvgskoRnTs-k_0M07NBWiwNAbg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/8642C6D6582111EC8035E069C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.171.176.0/23
IPv6:
2407:c640::/32
Signature Algorithm: sha256WithRSAEncryption
3e:92:3e:65:0a:d5:06:5c:35:a7:c7:f1:ba:25:8c:18:ca:ea:
c5:f4:42:58:d8:bc:98:10:76:99:05:00:9c:b0:2a:47:4a:3a:
09:e7:76:3e:af:97:db:e2:70:be:fd:b6:52:eb:c9:14:42:65:
51:40:78:67:ec:a3:6c:4b:c7:ec:c9:8e:51:07:a9:09:5a:c6:
16:7c:d7:d1:8a:74:ac:97:da:d0:05:e2:b9:25:a0:b8:f6:f3:
18:7f:19:d9:b9:0c:52:a6:ca:bc:31:ce:e0:9a:e6:c1:05:b9:
3e:79:93:8b:0a:db:34:52:c1:02:4f:f5:2a:33:ae:1f:5f:66:
a7:0f:58:e4:21:dd:b7:69:54:ae:13:83:22:b9:36:8d:74:cf:
d0:71:c3:1c:91:93:44:1a:e6:2d:5e:52:73:e8:f0:a5:24:76:
f3:39:98:5f:df:d3:34:aa:75:91:9d:4f:98:bf:b4:91:86:55:
89:7c:10:7d:e3:e5:0f:55:16:a0:93:89:0e:d2:d3:d5:10:be:
60:50:ae:3b:e3:90:83:35:7a:00:d4:f2:56:df:97:c6:f9:ef:
d9:3b:17:5c:b6:ab:ed:79:8d:17:9b:ee:a8:48:02:99:45:7e:
f3:79:cc:52:2a:a4:0c:d9:c8:b7:ff:d9:7f:10:b5:5b:fb:4f:
ec:46:3e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:04:33 2026 by rpki-client