
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/82D8082A292611EF875A5C36C4F9AE02.roa
File: 82D8082A292611EF875A5C36C4F9AE02.roa (raw, json)
Hash identifier: 4hSO5GJztFmc2Bjlelb4M86yndIsa9VSTZjFpa5DDCg=
Subject key identifier: A3:EA:A7:82:F7:74:D6:47:67:BB:DB:AC:20:DC:EC:A7:0A:2D:FC:72
Certificate issuer: /CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Certificate serial: 016F
Authority key identifier: CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/82D8082A292611EF875A5C36C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:02:05 +0000
ROA not before: Sat 03 May 2025 05:42:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4768
IP address blocks: 103.19.194.0/24 maxlen: 24
203.12.172.0/24 maxlen: 24
203.12.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 04:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169C00, serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Validity
Not Before: May 3 05:42:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a58a4d-ac18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:f8:27:7c:67:9e:0d:f1:2b:44:ed:9e:9f:
4a:05:c3:00:d2:76:66:83:3c:64:a8:b9:ec:f0:8f:
0c:58:76:3e:2f:19:84:2f:2b:cd:6b:aa:08:1e:5c:
71:df:a4:60:67:73:10:6a:22:8d:1c:8f:72:53:57:
dd:79:ec:e1:71:b7:c5:81:fa:ee:d2:99:08:8a:a0:
68:6f:76:18:78:29:7d:6d:2f:5e:c1:31:1d:d1:71:
a8:ef:2b:b0:44:07:1d:95:57:f3:b0:bf:da:3f:92:
97:72:d2:e0:4e:1d:c6:ae:9f:82:68:d8:36:a5:33:
d1:c2:de:18:c6:62:73:b2:13:4f:60:52:16:0a:d5:
38:15:b4:d2:63:35:58:bf:bb:6c:88:4b:df:6b:eb:
42:1e:94:41:8c:e6:a0:57:c5:55:33:be:c5:03:4a:
81:65:39:05:cd:c8:9c:2a:3b:16:8c:ba:8c:15:9d:
87:d4:ca:c3:97:10:07:e2:09:d6:e3:3b:9d:cc:11:
1c:99:d7:0f:89:e7:4d:dd:a7:6f:a5:41:83:1c:54:
5b:7a:60:d9:6f:f1:5e:88:9d:f9:2f:55:cd:97:e0:
88:ef:4f:7d:77:a7:76:0e:d5:50:36:05:92:67:1a:
67:52:8c:b4:0c:e0:8a:e7:07:42:75:f5:ef:bd:58:
fa:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EA:A7:82:F7:74:D6:47:67:BB:DB:AC:20:DC:EC:A7:0A:2D:FC:72
X509v3 Authority Key Identifier:
keyid:CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/82D8082A292611EF875A5C36C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.19.194.0/24
203.12.172.0/23
Signature Algorithm: sha256WithRSAEncryption
16:ac:84:89:88:cf:47:80:ce:ea:37:6b:58:22:92:67:a1:78:
ae:b4:39:17:2b:99:f9:1a:5f:c8:1c:9c:8e:90:a6:f6:a4:b2:
32:57:ee:7d:b5:15:19:e9:2e:fe:1b:f2:00:13:aa:ce:a6:52:
84:13:12:4c:9a:34:b0:94:a0:f9:05:a3:64:46:d7:27:98:7c:
de:63:d6:2b:5d:b0:85:5a:36:e4:24:5e:38:15:0f:dd:fe:58:
5d:c6:70:76:e8:17:7d:34:db:0d:32:d3:6a:5b:cd:8e:d1:7c:
8b:91:7c:86:dc:ed:f2:7e:ed:68:be:e8:25:69:3c:d6:b2:ef:
05:ca:9c:8b:24:0c:b0:1f:2e:4b:cd:70:50:de:ad:31:a1:32:
a7:84:53:2a:8b:64:70:73:57:07:93:68:07:df:8e:2a:b1:f8:
42:ff:c9:b5:1a:13:4a:b7:8d:6b:7e:10:d3:e7:b0:77:d2:08:
50:ab:2a:a9:08:51:9c:34:27:c4:77:77:5b:b5:6b:53:25:17:
f1:da:a3:5a:4e:e9:86:8f:f5:b8:fd:fe:88:3c:71:08:24:b5:
50:c9:e4:10:ab:0a:f0:12:43:c0:c3:1d:34:8a:a9:ba:85:a2:
14:d5:7f:86:92:fd:d2:bc:e0:60:9c:b5:66:37:91:fe:02:82:
12:e4:67:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:25:51 2026 by rpki-client