
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/8327C2403DE011ECAB508171C4F9AE02.roa
File: 8327C2403DE011ECAB508171C4F9AE02.roa (raw, json)
Hash identifier: VBhINs5cQkmB0vT6IDkxsJJHUIA6YcH1FDGQn1efeGU=
Subject key identifier: 99:44:3D:32:A6:E5:86:61:64:33:EB:A5:39:35:D7:6B:CA:F4:EC:32
Certificate issuer: /CN=A9198FD0/serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463
Certificate serial: 0564
Authority key identifier: 9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/8327C2403DE011ECAB508171C4F9AE02.roa
Signing time: Wed 01 Jul 2026 00:25:09 +0000
ROA not before: Wed 01 Jul 2026 00:25:09 +0000
ROA not after: Fri 30 Oct 2026 00:00:00 +0000
asID: 132797
IP address blocks: 103.25.229.0/24 maxlen: 24
2001:dec::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl
rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1380 (0x564)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198FD0, serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463
Validity
Not Before: Jul 1 00:25:09 2026 GMT
Not After : Oct 30 00:00:00 2026 GMT
Subject: CN=6a445e65-c1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ee:39:93:2e:38:25:46:37:87:0f:fd:a9:ac:
b4:9f:34:2a:00:06:0b:e4:e7:a3:2b:ff:12:53:c8:
75:98:26:4f:67:7d:08:9f:9e:b3:54:41:72:18:8f:
ff:02:f0:d7:98:8e:96:92:7e:4e:f5:4c:2f:90:11:
09:65:eb:47:f4:35:56:49:b3:7d:83:6c:2e:c0:63:
f2:68:62:a3:24:8d:31:fe:a1:fa:79:3f:0c:a8:df:
83:4a:07:0e:8a:7d:5b:d5:2a:bb:9c:dc:af:c2:68:
08:73:a6:ca:a5:34:cf:a0:b9:dd:21:36:e0:0e:28:
85:05:62:d2:80:7e:10:34:49:ab:39:33:cf:be:cf:
59:71:e0:48:04:a4:c7:35:dc:b1:b0:34:3d:10:0d:
7b:f6:93:f5:0a:ea:74:fe:59:ca:1d:55:d5:83:a2:
f2:6b:94:af:35:8b:f9:f9:ff:cf:f6:5b:fe:15:be:
b3:93:e1:86:92:45:35:1d:ea:c9:81:88:5f:42:e2:
4e:d2:f9:b8:25:a4:a7:55:0a:c5:80:b6:5a:ae:2e:
b2:a2:97:4c:23:72:4f:df:7d:a4:5e:6e:bf:98:43:
24:11:f5:4d:96:71:fd:a7:c7:ef:76:fe:5c:6f:e1:
31:91:83:7e:79:80:23:f7:88:95:9c:5c:a6:68:35:
34:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:44:3D:32:A6:E5:86:61:64:33:EB:A5:39:35:D7:6B:CA:F4:EC:32
X509v3 Authority Key Identifier:
keyid:9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/8327C2403DE011ECAB508171C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.25.229.0/24
IPv6:
2001:dec::/48
Signature Algorithm: sha256WithRSAEncryption
7b:cd:ff:94:7a:9e:34:44:98:bc:c5:49:a1:1b:05:13:ca:7b:
54:0f:02:d7:b3:9f:e6:a4:57:9b:e7:54:a9:00:74:48:0f:fc:
85:15:68:a5:e7:0b:36:91:16:a8:de:d2:73:18:31:ec:31:72:
55:5b:0e:73:5c:28:14:0a:4b:4e:f6:f3:b8:b4:aa:2e:d4:78:
28:22:c2:9f:17:27:31:96:6e:4e:55:e9:02:7d:a2:35:57:d8:
d7:62:5e:b3:ff:05:35:68:0b:fe:6b:ae:ff:a5:2f:dc:f2:89:
f9:43:d7:50:57:6a:e8:e8:ec:34:30:af:bb:2c:b5:8a:01:0c:
79:4b:9e:a5:e2:77:58:9a:dc:27:1d:4d:f4:30:27:11:2d:9a:
8b:b5:0e:be:b5:3e:16:22:e9:92:84:02:30:93:04:e7:fb:a0:
8c:bb:28:86:37:7d:86:0e:6f:a1:b0:56:da:ad:fa:6e:e2:9b:
ea:0d:28:7b:e5:63:f5:17:b6:be:80:72:59:20:8f:4e:7b:ac:
8b:d8:2d:c7:be:88:bf:d2:26:da:ce:e3:4f:14:7d:ca:31:ac:
17:30:50:07:5c:74:a2:13:74:df:35:16:5c:5b:a8:43:13:41:
13:85:d7:30:2d:4a:db:e8:31:63:4e:13:9f:96:8e:88:ad:65:
9b:58:f0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:36:51 2026 by rpki-client