
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/8F1629524FD411EB9F1A0673C4F9AE02.roa
File: 8F1629524FD411EB9F1A0673C4F9AE02.roa (raw, json)
Hash identifier: u76wFHKSd9h8KbRCk1j6gIodR7f+T1CjbW7mJvG9G1o=
Subject key identifier: 1A:44:68:4A:D2:D5:A8:4E:B2:93:74:49:F2:89:D6:44:AD:E0:72:0C
Certificate issuer: /CN=A917C6D9/serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
Certificate serial: 078C
Authority key identifier: 69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/8F1629524FD411EB9F1A0673C4F9AE02.roa
Signing time: Tue 31 Mar 2026 22:27:38 +0000
ROA not before: Tue 31 Mar 2026 22:27:38 +0000
ROA not after: Sat 01 Aug 2026 00:00:00 +0000
asID: 18001
IP address blocks: 103.87.12.0/22 maxlen: 22
116.204.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl
rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:20:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1932 (0x78c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C6D9, serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
Validity
Not Before: Mar 31 22:27:38 2026 GMT
Not After : Aug 1 00:00:00 2026 GMT
Subject: CN=69cc4a5a-f80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:e9:b9:72:b0:29:5e:a1:d4:ae:52:04:f4:
3b:5c:8c:43:00:9b:38:e0:da:9c:ce:0d:36:3d:00:
4c:b0:be:9a:cd:08:09:cd:99:f1:0f:79:7c:52:a6:
f1:92:84:4d:2f:6f:14:c7:70:82:de:ce:7c:ca:b2:
d4:6f:fa:7b:27:32:40:ec:a6:06:db:f6:f4:b4:ae:
7c:ae:c4:7b:0c:7c:55:7c:a3:d1:3c:df:51:24:5b:
6b:a8:fa:45:8a:2a:0f:7a:78:84:69:6e:d6:6f:29:
67:d7:26:92:29:e1:24:09:e2:67:5b:f3:46:fe:4f:
25:56:e9:f0:7b:0a:64:87:6d:44:d8:a3:3c:b3:c7:
2c:63:12:07:0d:f0:e5:53:4c:76:da:2d:f9:df:97:
69:48:82:3e:f7:0d:3f:2f:d8:48:fa:cb:bf:48:dd:
85:2c:38:4d:26:24:e0:45:a4:1c:ef:c1:d8:2e:c0:
72:e3:dc:0e:45:e5:1c:90:dc:0d:ac:12:44:54:ff:
ab:6e:80:2e:e1:57:58:d3:3b:b8:ec:fb:85:74:b7:
f2:f4:bb:22:e7:a3:46:28:6c:08:a0:e8:a7:4e:fd:
29:ee:f8:48:36:32:f2:0b:98:40:82:cd:af:34:9f:
74:93:cd:35:e3:ae:ff:c0:69:c7:a4:4b:13:fe:fc:
23:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:44:68:4A:D2:D5:A8:4E:B2:93:74:49:F2:89:D6:44:AD:E0:72:0C
X509v3 Authority Key Identifier:
keyid:69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/8F1629524FD411EB9F1A0673C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.87.12.0/22
116.204.212.0/22
Signature Algorithm: sha256WithRSAEncryption
02:59:1c:75:15:9a:36:51:18:16:90:b9:87:07:e7:c2:93:65:
b1:57:5e:b0:a3:b9:28:c9:cd:e7:3d:8a:8b:dd:13:ad:15:54:
0e:77:af:32:ce:69:17:bc:81:e4:b4:7c:50:ae:d3:6a:77:18:
57:d5:c8:6f:2c:ac:e4:1e:39:51:85:2c:60:56:c4:b4:15:b3:
91:d4:68:dc:d7:1d:8b:59:bf:10:fa:ab:e6:34:85:76:79:bd:
66:f5:01:e4:fe:23:aa:a8:a2:f8:e1:e2:be:48:ad:e8:33:fc:
dd:70:39:2a:88:2e:47:48:88:25:29:7a:5c:c5:c2:0b:47:a3:
d5:10:4d:3e:8a:d1:e4:3e:a3:1f:69:25:3a:7c:fe:60:8b:14:
1d:20:63:dd:90:cf:d7:7a:9c:94:22:0f:2f:12:5f:f5:dd:64:
98:72:e9:4c:57:d2:1a:c0:ee:18:2c:16:8f:d8:ec:5e:4f:fc:
79:f6:f9:29:fb:1d:58:75:48:48:0f:49:38:c0:13:eb:8e:30:
bc:5f:a5:e6:2a:97:33:ef:ad:18:b0:3c:b5:67:af:9b:4c:55:
5e:2e:9c:ea:4f:55:70:21:db:04:af:80:cb:0c:fd:ee:be:29:
98:d9:a3:06:c4:6a:6d:3a:c0:40:68:cb:92:87:21:3a:44:35:
30:fc:3d:de
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICB4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M2RDkxMTAvBgNVBAUTKDY5NjlEMTUwQUQwMzQ4MjA4MUJCMUJEN0MxM0JFNUYw
MERDNTNBMzgwHhcNMjYwMzMxMjIyNzM4WhcNMjYwODAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNjNGE1YS1mODBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwqXpuXKwKV6h1K5SBPQ7XIxDAJs44Nqczg02PQBMsL6azQgJzZnxD3l8Uqbx
koRNL28Ux3CC3s58yrLUb/p7JzJA7KYG2/b0tK58rsR7DHxVfKPRPN9RJFtrqPpF
iioPeniEaW7Wbyln1yaSKeEkCeJnW/NG/k8lVunwewpkh21E2KM8s8csYxIHDfDl
U0x22i3535dpSII+9w0/L9hI+su/SN2FLDhNJiTgRaQc78HYLsBy49wOReUckNwN
rBJEVP+rboAu4VdY0zu47PuFdLfy9Lsi56NGKGwIoOinTv0p7vhINjLyC5hAgs2v
NJ90k801467/wGnHpEsT/vwjCQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFBpEaErS
1ahOspN0SfKJ1kSt4HIMMB8GA1UdIwQYMBaAFGlp0VCtA0gggbsb18E75fANxTo4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzZEOS82QTVGMTMyNDRG
RDExMUVCQUZCMTY3NkJDNEY5QUUwMi9hV25SVUswRFNDQ0J1eHZYd1R2bDhBM0ZP
amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FXblJVSzBEU0NDQnV4dlh3VHZsOEEzRk9qZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0M2RDkvNkE1RjEzMjQ0RkQxMTFFQkFGQjE2NzZCQzRGOUFFMDIvOEYxNjI5NTI0
RkQ0MTFFQjlGMUEwNjczQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCZ1cMAwQCdMzUMA0GCSqGSIb3DQEBCwUAA4IBAQACWRx1FZo2URgW
kLmHB+fCk2WxV16wo7koyc3nPYqL3ROtFVQOd68yzmkXvIHktHxQrtNqdxhX1chv
LKzkHjlRhSxgVsS0FbOR1Gjc1x2LWb8Q+qvmNIV2eb1m9QHk/iOqqKL44eK+SK3o
M/zdcDkqiC5HSIglKXpcxcILR6PVEE0+itHkPqMfaSU6fP5gixQdIGPdkM/XepyU
Ig8vEl/13WSYculMV9IawO4YLBaP2OxeT/x59vkp+x1YdUhID0k4wBPrjjC8X6Xm
Kpcz760YsDy1Z6+bTFVeLpzqT1VwIdsEr4DLDP3uvimY2aMGxGptOsBAaMuShyE6
RDUw/D3e
-----END CERTIFICATE-----
Generated at Sun Apr 5 21:06:52 2026 by rpki-client