
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/117300B62CDB11EDB2E1DD0DC4F9AE02.roa
File: 117300B62CDB11EDB2E1DD0DC4F9AE02.roa (raw, json)
Hash identifier: WQuRt9VYbZhxWCPHuufg9gzeIbcATs55Tqnjl5B+9os=
Subject key identifier: 17:E4:81:20:66:1D:E6:F0:61:80:C1:1F:57:C1:AD:7C:81:27:D1:36
Certificate issuer: /CN=A9125758/serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5
Certificate serial: 032F
Authority key identifier: 2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/117300B62CDB11EDB2E1DD0DC4F9AE02.roa
Signing time: Sat 03 Oct 2026 01:49:43 +0000
ROA not before: Sat 03 Oct 2026 01:49:43 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 150299
IP address blocks: 103.214.178.0/23 maxlen: 23
103.214.178.0/24 maxlen: 24
103.214.179.0/24 maxlen: 24
2001:df1:3b40::/48 maxlen: 48
2001:df1:3b40::/51 maxlen: 51
2001:df1:3b40:2000::/51 maxlen: 51
2001:df1:3b40:4000::/51 maxlen: 51
2001:df1:3b40:6000::/51 maxlen: 51
2001:df1:3b40:8000::/51 maxlen: 51
2001:df1:3b40:a000::/51 maxlen: 51
2001:df1:3b40:c000::/51 maxlen: 51
2001:df1:3b40:e000::/51 maxlen: 51
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl
rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 01:10:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 815 (0x32f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125758, serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5
Validity
Not Before: Oct 3 01:49:43 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac05f37-8e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:20:96:63:0f:b2:a4:52:7b:65:14:f9:09:
74:a8:90:00:48:c8:f3:1e:9b:f3:43:77:83:6d:6c:
be:68:f9:9c:73:84:f9:91:27:e1:1c:b5:a8:20:fe:
b8:57:c1:10:5f:08:40:55:ca:ad:eb:52:c4:46:f9:
cd:55:40:54:1a:72:a1:da:b4:2b:d5:03:26:28:05:
d5:96:f2:0d:fd:bf:76:96:bb:66:15:e6:f7:1a:e5:
de:37:8f:9e:16:e9:0f:29:7b:c3:92:1e:d9:11:ba:
06:e9:14:74:f0:2c:71:ef:0c:62:d5:48:3d:3c:b0:
36:fe:59:9c:f3:ce:81:61:2c:85:02:74:a1:ce:a4:
a7:ad:f6:4c:0d:56:97:4f:68:a8:9e:57:4c:77:86:
ee:29:77:ce:c3:60:85:f6:f8:b1:56:c0:6b:24:bb:
fc:4c:fe:a9:22:f7:fb:77:0d:cb:85:19:a8:ac:d2:
a8:de:eb:2a:30:49:1c:23:e3:4a:ea:e6:87:a4:6b:
27:47:38:6b:54:0b:20:4e:ea:78:4b:b4:42:c6:43:
91:32:72:ec:3c:6d:af:13:6c:a7:74:d8:5c:f3:c5:
dc:d4:ad:ee:31:a6:c0:28:7a:94:7a:2d:59:4c:f7:
21:f8:4e:e1:7d:48:c8:ce:46:90:28:3e:46:0d:cf:
65:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E4:81:20:66:1D:E6:F0:61:80:C1:1F:57:C1:AD:7C:81:27:D1:36
X509v3 Authority Key Identifier:
keyid:2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/117300B62CDB11EDB2E1DD0DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.214.178.0/23
IPv6:
2001:df1:3b40::/48
Signature Algorithm: sha256WithRSAEncryption
4d:26:ce:a1:19:64:c4:ef:a1:80:9f:0b:4e:84:95:37:72:4b:
78:6c:4e:4b:1a:a1:10:df:26:8f:be:b1:db:b2:e6:59:59:00:
69:c9:ff:49:03:12:a6:0b:b0:5c:37:55:b1:39:12:15:31:fa:
0c:9f:2f:7a:b5:df:0d:91:c8:d9:aa:0b:11:27:ce:64:f4:e7:
f6:bb:4f:5d:c6:f7:45:c9:21:db:99:90:7d:ab:08:9e:87:dc:
e5:8e:54:63:22:4a:ba:4c:bb:09:2b:6f:35:e9:03:4d:5a:73:
0a:38:3f:0f:1f:ca:fd:27:b1:21:5b:61:9c:2e:52:3b:02:35:
4a:48:c0:a9:cd:12:92:09:b4:88:46:67:48:72:9a:1f:95:24:
c4:9b:64:d2:b7:a1:7f:05:b3:dc:94:24:dd:df:62:3f:81:c9:
3a:63:ad:3c:98:c2:1d:b5:b3:89:af:26:00:9f:4d:0b:b5:c1:
f4:99:51:85:26:12:17:a0:4b:9d:bc:d3:57:94:ed:9f:a6:7f:
ad:e6:ba:f1:15:31:3d:9e:27:24:9e:2a:af:ff:ad:a2:4e:db:
da:bf:63:b5:21:80:31:29:1a:6f:43:a9:e7:d4:6c:b1:0c:f9:
53:11:29:b0:77:64:c3:41:14:ed:0c:db:48:fa:3c:17:c7:9a:
2d:fc:42:11
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU3NTgxMTAvBgNVBAUTKDJGOEJFRjQ4M0E0MThBRTFDMDMxMjMwODE4NkVGNENE
N0IyNDY2RTUwHhcNMjYxMDAzMDE0OTQzWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWMwNWYzNy04ZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtBUglmMPsqRSe2UU+Ql0qJAASMjzHpvzQ3eDbWy+aPmcc4T5kSfhHLWoIP64
V8EQXwhAVcqt61LERvnNVUBUGnKh2rQr1QMmKAXVlvIN/b92lrtmFeb3GuXeN4+e
FukPKXvDkh7ZEboG6RR08Cxx7wxi1Ug9PLA2/lmc886BYSyFAnShzqSnrfZMDVaX
T2ionldMd4buKXfOw2CF9vixVsBrJLv8TP6pIvf7dw3LhRmorNKo3usqMEkcI+NK
6uaHpGsnRzhrVAsgTup4S7RCxkORMnLsPG2vE2yndNhc88Xc1K3uMabAKHqUei1Z
TPch+E7hfUjIzkaQKD5GDc9lwQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFBfkgSBm
HebwYYDBH1fBrXyBJ9E2MB8GA1UdIwQYMBaAFC+L70g6QYrhwDEjCBhu9M17JGbl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTc1OC83MUVCRTdDMjJD
RDcxMUVEQjAyQjFEMTlDNEY5QUUwMi9MNHZ2U0RwQml1SEFNU01JR0c3MHpYc2ta
dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0w0dnZTRHBCaXVIQU1TTUlHRzcwelhza1p1VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjU3NTgvNzFFQkU3QzIyQ0Q3MTFFREIwMkIxRDE5QzRGOUFFMDIvMTE3MzAwQjYy
Q0RCMTFFREIyRTFERDBEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ9ayMA8EAgACMAkDBwAgAQ3xO0AwDQYJKoZIhvcNAQELBQADggEB
AE0mzqEZZMTvoYCfC06ElTdyS3hsTksaoRDfJo++sduy5llZAGnJ/0kDEqYLsFw3
VbE5EhUx+gyfL3q13w2RyNmqCxEnzmT05/a7T13G90XJIduZkH2rCJ6H3OWOVGMi
SrpMuwkrbzXpA01acwo4Pw8fyv0nsSFbYZwuUjsCNUpIwKnNEpIJtIhGZ0hymh+V
JMSbZNK3oX8Fs9yUJN3fYj+ByTpjrTyYwh21s4mvJgCfTQu1wfSZUYUmEhegS528
01eU7Z+mf63muvEVMT2eJySeKq//raJO29q/Y7UhgDEpGm9DqefUbLEM+VMRKbB3
ZMNBFO0M20j6PBfHmi38QhE=
-----END CERTIFICATE-----
Generated at Thu Oct 8 00:49:10 2026 by rpki-client