
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/97A9C872450611F093EC3A65C4F9AE02.roa
File: 97A9C872450611F093EC3A65C4F9AE02.roa (raw, json)
Hash identifier: 4Ydikq6YDNqhVsd3RsOKhT3gtOyRUGklOgVJco/t5aw=
Subject key identifier: 9C:E3:E5:E2:E3:92:7A:FA:EB:EF:9D:97:A7:BA:2D:9D:EF:AF:E9:FA
Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Certificate serial: 1516
Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/97A9C872450611F093EC3A65C4F9AE02.roa
Signing time: Thu 02 Jul 2026 17:17:56 +0000
ROA not before: Thu 02 Jul 2026 17:17:56 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 401696
IP address blocks: 103.106.188.0/22 maxlen: 24
103.116.244.0/22 maxlen: 24
116.204.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 16:53:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5398 (0x1516)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Validity
Not Before: Jul 2 17:17:56 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a469d44-4ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:e7:c2:9b:85:26:ac:a0:53:75:0f:63:dc:
fb:18:35:1e:f0:5d:92:7d:90:94:6e:24:15:a4:18:
0d:9e:6c:5b:46:81:33:72:92:73:a7:15:7d:d2:e1:
43:3b:e8:7d:6a:3e:8a:31:33:2b:52:bd:a1:e8:ac:
a0:64:f5:3a:21:a3:9e:83:8a:52:03:42:d7:ba:d1:
66:33:e6:6c:ef:6c:6e:a9:a2:c8:97:fa:d3:be:90:
3a:58:68:d2:cf:50:d4:5c:6e:48:e9:b0:53:69:ba:
58:ae:93:b6:5e:e4:d1:3d:f9:73:9e:55:6a:ae:fa:
90:ee:03:36:35:69:fb:f4:c7:36:83:58:56:03:80:
6e:db:82:68:98:21:60:5e:e3:41:a8:94:20:49:2b:
2d:84:0b:6d:25:27:eb:eb:b8:d4:73:01:6b:d9:3e:
fd:86:d6:80:c2:a4:fc:49:4e:7b:f7:fd:be:7a:12:
02:f8:61:92:37:17:7f:8a:2a:db:93:2e:6d:08:80:
de:e4:58:fb:d0:86:97:c6:9f:13:13:0c:dc:1e:ad:
fb:72:5a:7c:a5:1f:47:d8:e0:e9:42:04:5f:0e:06:
54:f5:6b:2a:29:f0:28:3c:74:60:eb:66:a6:b5:47:
b7:2c:8d:99:61:d5:24:1e:d6:33:e9:4f:ce:87:e0:
ab:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E3:E5:E2:E3:92:7A:FA:EB:EF:9D:97:A7:BA:2D:9D:EF:AF:E9:FA
X509v3 Authority Key Identifier:
keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/97A9C872450611F093EC3A65C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.106.188.0/22
103.116.244.0/22
116.204.132.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:39:b0:ef:ea:df:5e:20:f1:9b:0a:20:53:23:c1:e5:d8:d7:
d6:5c:5d:e9:cb:2d:e8:15:ae:7b:c0:73:a8:2e:56:90:61:ba:
98:2b:14:7a:01:b6:e4:b4:b6:dc:72:f2:16:67:ad:9b:3e:c8:
9f:64:d4:5d:d5:6b:12:7c:cb:62:57:05:44:4a:ce:0f:b8:03:
15:d7:59:a2:5e:7a:c7:ae:7f:88:89:c5:86:77:40:d8:5e:85:
77:c9:71:10:2a:a6:00:1a:e3:ef:c0:d0:fe:1d:5d:c9:a7:0c:
2d:d5:c2:5b:63:45:d6:f1:bb:c9:db:90:51:98:f2:10:ed:6a:
62:fe:7e:32:fa:c2:2b:3d:2a:4c:c6:fe:f4:0c:8e:9e:c0:30:
75:e6:e1:b8:b7:b8:eb:72:1b:c5:d3:e0:47:00:4c:47:37:05:
65:bf:a8:13:05:a6:1e:74:41:bc:a8:ef:0e:0d:43:b1:29:b1:
38:4c:be:3e:a5:f0:bf:5f:52:3a:d2:5e:51:34:8b:51:89:93:
93:dd:d2:ab:14:81:50:b5:60:6f:67:54:c7:75:88:d0:b1:57:
d1:f8:19:7d:24:1c:c9:6f:60:20:97:5d:d4:9b:c9:f9:57:94:
e3:90:76:8a:52:4c:24:fd:01:8a:f1:02:60:65:df:c2:8b:2e:
08:b0:22:5c
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICFRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC
RDY0MDBFMDkwHhcNMjYwNzAyMTcxNzU2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQ2OWQ0NC00YWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtmvnwpuFJqygU3UPY9z7GDUe8F2SfZCUbiQVpBgNnmxbRoEzcpJzpxV90uFD
O+h9aj6KMTMrUr2h6KygZPU6IaOeg4pSA0LXutFmM+Zs72xuqaLIl/rTvpA6WGjS
z1DUXG5I6bBTabpYrpO2XuTRPflznlVqrvqQ7gM2NWn79Mc2g1hWA4Bu24JomCFg
XuNBqJQgSSsthAttJSfr67jUcwFr2T79htaAwqT8SU579/2+ehIC+GGSNxd/iirb
ky5tCIDe5Fj70IaXxp8TEwzcHq37clp8pR9H2ODpQgRfDgZU9WsqKfAoPHRg62am
tUe3LI2ZYdUkHtYz6U/Oh+CrkwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFJzj5eLj
knr66++dl6e6LZ3vr+n6MB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw
MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjhCNEEvMEFEQjE3QzA4MDBBMTFFODlCNDgzRTdDQzRGOUFFMDIvOTdBOUM4NzI0
NTA2MTFGMDkzRUMzQTY1QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQCZ2q8AwQCZ3T0AwQCdMyEMA0GCSqGSIb3DQEBCwUAA4IBAQCsObDv
6t9eIPGbCiBTI8Hl2NfWXF3pyy3oFa57wHOoLlaQYbqYKxR6AbbktLbccvIWZ62b
PsifZNRd1WsSfMtiVwVESs4PuAMV11miXnrHrn+IicWGd0DYXoV3yXEQKqYAGuPv
wND+HV3Jpwwt1cJbY0XW8bvJ25BRmPIQ7Wpi/n4y+sIrPSpMxv70DI6ewDB15uG4
t7jrchvF0+BHAExHNwVlv6gTBaYedEG8qO8ODUOxKbE4TL4+pfC/X1I60l5RNItR
iZOT3dKrFIFQtWBvZ1THdYjQsVfR+Bl9JBzJb2Agl13Um8n5V5TjkHaKUkwk/QGK
8QJgZd/Ciy4IsCJc
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:45:51 2026 by rpki-client