
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/0C1EB10A3A5011ED8B4A2570C4F9AE02.roa
File: 0C1EB10A3A5011ED8B4A2570C4F9AE02.roa (raw, json)
Hash identifier: WSIfxgjwZNOHCZ6QPzrFG9htwBMGx9uCmGnFB+96CFk=
Subject key identifier: C7:AC:61:21:5B:89:CE:40:C0:06:4B:7E:9A:4A:FA:9E:7F:08:8B:C4
Certificate issuer: /CN=A9169451/serialNumber=01F95CC5F0A6B9E967C6F8F36C7F64D4244BAC72
Certificate serial: 02F3
Authority key identifier: 01:F9:5C:C5:F0:A6:B9:E9:67:C6:F8:F3:6C:7F:64:D4:24:4B:AC:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/0C1EB10A3A5011ED8B4A2570C4F9AE02.roa
Signing time: Wed 19 Aug 2026 01:50:17 +0000
ROA not before: Wed 19 Aug 2026 01:50:17 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 150138
IP address blocks: 103.16.208.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.crl
rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 01:26:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 755 (0x2f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169451, serialNumber=01F95CC5F0A6B9E967C6F8F36C7F64D4244BAC72
Validity
Not Before: Aug 19 01:50:17 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a850bd9-ad0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9b:d8:51:9f:9d:57:08:a3:cc:32:ec:7f:51:
9c:19:4e:0d:27:e0:97:ed:88:4b:55:42:cf:af:73:
fb:66:ee:60:d7:c4:35:6f:a4:24:88:6c:54:2e:92:
4b:cd:23:c4:9f:29:d7:48:c0:6c:23:85:0b:72:aa:
ad:2d:b1:0f:1f:00:e3:d8:0f:ff:d5:6b:c7:91:39:
38:c1:74:15:ea:47:cd:8b:3d:6c:20:e5:f3:ac:3b:
26:2a:f2:f8:df:85:0d:bd:93:c6:c1:f0:69:ac:14:
b1:a5:a8:07:52:1f:b0:07:06:9a:06:4a:0b:b8:7d:
2a:18:a3:df:6f:c4:11:5b:8c:d2:16:f9:5c:32:2b:
6a:d8:a7:5a:a9:df:04:ac:8e:d6:e7:49:7a:b7:93:
60:27:55:89:b6:30:d0:3d:89:c0:12:17:8f:40:b2:
bd:d0:13:a2:7f:e3:f6:7f:81:64:11:55:1c:b4:48:
27:ee:41:f3:c1:12:4d:5c:25:19:1b:90:2e:10:f6:
93:34:d0:40:10:8f:a4:37:3a:ee:11:eb:4c:39:4c:
9f:89:1e:ab:11:5f:62:b6:f6:ad:cf:8b:ed:65:3b:
4a:15:4d:ab:06:f2:b8:61:6f:a2:30:2f:e6:5f:f8:
3a:a3:02:16:ba:22:8b:6b:f1:44:3a:96:74:cc:3c:
fb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AC:61:21:5B:89:CE:40:C0:06:4B:7E:9A:4A:FA:9E:7F:08:8B:C4
X509v3 Authority Key Identifier:
keyid:01:F9:5C:C5:F0:A6:B9:E9:67:C6:F8:F3:6C:7F:64:D4:24:4B:AC:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/0C1EB10A3A5011ED8B4A2570C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.16.208.0/23
Signature Algorithm: sha256WithRSAEncryption
00:6e:85:2b:cc:ec:69:32:34:f5:92:87:79:3a:75:c9:f6:9a:
e7:75:67:36:7d:e6:51:af:1f:e8:b1:c9:38:1f:74:ea:4b:bb:
b2:af:ae:d2:d4:ed:65:af:17:06:ec:16:d4:cd:3b:f5:1c:31:
9a:c7:d1:29:3e:ef:2f:c2:8d:9b:58:82:16:6f:d6:eb:62:b9:
1a:27:a1:25:07:7f:42:cc:a1:f3:20:20:3d:a7:14:ee:77:10:
20:5e:96:ee:3f:75:bc:9f:35:35:6e:5b:31:7d:ed:3c:9d:95:
61:76:f4:26:f0:bd:66:a2:e0:fe:b5:24:65:a6:8d:ec:1e:b4:
c5:3e:2c:76:6c:7a:23:4f:bc:53:49:a5:79:48:22:22:f0:4a:
98:80:c9:85:7f:b5:43:c8:82:3d:fc:2e:18:38:24:51:db:a3:
63:78:80:d8:94:0d:3d:21:79:39:54:86:6b:9c:50:10:cb:ac:
bf:32:87:cc:25:3b:ab:c1:4d:58:af:0d:11:de:68:10:eb:f6:
84:92:85:69:e9:9c:44:61:35:3d:05:da:77:e1:da:b6:8b:57:
b9:20:67:be:bc:2d:4c:7c:90:ee:cd:b0:f4:df:d3:4a:b0:59:
3b:fe:e6:5b:c2:b5:6e:46:7f:61:e9:1b:0e:19:18:d8:83:3e:
db:e7:e8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:57:57 2026 by rpki-client