
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/2FF4108A0C3911EB828BDC25C4F9AE02.roa
File: 2FF4108A0C3911EB828BDC25C4F9AE02.roa (raw, json)
Hash identifier: HKGRir2n7i6fdg97EN5g+9sFpLyOtuQtaP0V1gAFbbw=
Subject key identifier: 3B:B2:3E:C0:78:23:55:0E:18:19:08:E6:7F:7A:E9:BF:11:86:1C:EF
Certificate issuer: /CN=A9164FD2/serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04
Certificate serial: 089A
Authority key identifier: 93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/2FF4108A0C3911EB828BDC25C4F9AE02.roa
Signing time: Thu 08 Oct 2026 21:40:09 +0000
ROA not before: Thu 08 Oct 2026 21:40:09 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 55720
IP address blocks: 103.9.51.0/24 maxlen: 24
103.81.162.0/24 maxlen: 24
103.195.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl
rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Oct 2026 20:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2202 (0x89a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164FD2, serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04
Validity
Not Before: Oct 8 21:40:09 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ac80db9-f75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:19:0b:2b:91:bf:26:29:3a:b3:b7:d4:a7:e4:
47:49:64:14:9c:a5:3f:a7:cf:8c:c2:db:a4:b9:45:
28:ad:33:54:d2:bb:a2:8f:25:fe:61:5f:4b:ba:7e:
39:45:58:2b:19:c7:d0:22:80:83:0c:e7:8f:ca:37:
ce:17:39:f7:5e:d7:d4:d6:e7:1a:7c:1c:99:68:78:
51:f5:f7:08:fd:93:14:86:22:fe:87:92:28:5c:53:
4d:ac:da:d1:d7:c0:6d:0e:4d:e4:da:81:b9:83:a5:
09:01:7f:30:6c:98:2c:fa:a1:92:17:48:59:2d:2c:
d7:32:c2:48:17:cb:40:61:1f:69:f7:a5:0f:ed:12:
ef:f6:1c:be:aa:49:d9:0e:9d:5c:d4:69:d3:20:bc:
ae:99:dd:ec:30:78:2f:e9:12:15:b6:73:04:ca:d2:
0d:23:0e:ee:61:ee:97:45:06:5e:9c:c0:55:09:dd:
8d:ef:bd:90:b3:74:a7:92:4e:65:3d:4e:c0:1a:41:
93:6c:58:fb:9e:78:fd:e8:ac:f8:6c:5c:06:35:1a:
ed:60:ce:0d:a3:e2:0f:29:74:04:66:19:86:0c:df:
a7:d1:f4:7e:d2:d5:f2:7e:07:72:be:e5:8e:a7:0a:
41:69:c7:98:f7:a1:73:f9:ab:d4:35:9d:a4:33:f0:
d6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B2:3E:C0:78:23:55:0E:18:19:08:E6:7F:7A:E9:BF:11:86:1C:EF
X509v3 Authority Key Identifier:
keyid:93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/2FF4108A0C3911EB828BDC25C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.9.51.0/24
103.81.162.0/24
103.195.143.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:0b:a0:86:a8:6e:0b:3f:c0:56:2f:56:73:91:22:46:f9:52:
7f:94:d7:4f:1f:44:79:0a:aa:ed:c5:99:71:13:4f:fb:61:7b:
06:eb:53:0a:20:46:2b:89:68:75:2a:e1:36:22:a0:b1:32:1b:
ef:70:75:82:96:f4:a7:62:43:68:76:20:00:c8:04:5f:06:20:
42:55:12:74:fb:ea:89:a8:49:ea:5c:c9:99:c0:69:93:8e:29:
ac:10:04:5e:49:f7:9f:8d:93:ad:db:97:93:9c:41:0a:90:fb:
69:6a:dc:d2:18:e9:b1:9f:f4:b3:c4:a9:b1:c2:5a:26:21:c7:
42:bf:53:9b:d1:17:5d:47:c2:bd:d6:ba:2f:2c:c6:2a:ba:fb:
30:8a:a5:c3:91:56:d7:a2:a9:0c:7e:c0:f7:74:a7:0a:3c:20:
f2:8d:49:73:35:1d:29:b6:4c:27:61:c8:b6:1f:b5:33:c2:2f:
a9:52:03:2b:dd:88:b1:ec:28:e4:5e:15:2f:34:84:eb:2f:4f:
70:8d:50:c2:8e:0f:ef:e1:b1:23:e5:98:d6:ce:af:d4:9c:83:
00:e2:0b:56:f0:47:8f:56:5c:e7:f7:0a:5c:29:22:2a:21:98:
d4:3f:73:42:11:61:a1:f4:28:7d:62:92:aa:d0:12:cd:17:5d:
e0:84:51:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 06:22:48 2026 by rpki-client