
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/82D8082A292611EF875A5C36C4F9AE02.roa
File: 82D8082A292611EF875A5C36C4F9AE02.roa (raw, json)
Hash identifier: SyXuffXDHXPbASG7Y+LG0Brt2u6hsVNRNcrnMwVVAGw=
Subject key identifier: 68:35:06:E7:DF:A7:ED:73:77:9A:28:6E:43:87:02:57:FA:61:C4:9C
Certificate issuer: /CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Certificate serial: 0193
Authority key identifier: CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/82D8082A292611EF875A5C36C4F9AE02.roa
Signing time: Wed 29 Apr 2026 05:41:43 +0000
ROA not before: Wed 29 Apr 2026 05:41:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4768
IP address blocks: 103.19.194.0/24 maxlen: 24
203.12.172.0/24 maxlen: 24
203.12.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 05:41:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169C00, serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Validity
Not Before: Apr 29 05:41:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f19a17-9899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6c:c6:33:5c:9c:00:01:d5:2f:30:bb:ee:aa:
0b:6e:fc:78:96:fa:b9:ac:22:22:cf:2e:7b:f3:7b:
9d:37:5d:c7:a9:ab:3b:07:1b:75:11:0f:4b:cd:ec:
52:8f:34:64:ab:87:b0:1f:2b:06:d6:ef:64:8d:99:
f9:39:8a:b5:eb:ff:31:bf:9e:88:5a:bf:ac:7c:a2:
a0:ad:0b:6b:d5:d8:a7:5b:01:09:7a:15:52:80:7c:
1d:3a:cc:b8:a9:0e:89:e4:3e:77:aa:e2:dc:d7:f0:
9e:05:0a:f1:0b:78:7b:0f:3f:47:d0:88:1e:ad:d8:
01:ce:5d:a5:67:f6:99:00:42:70:07:24:13:b5:bf:
47:cd:05:11:f8:af:63:ed:3e:dc:2c:aa:b9:36:c9:
84:51:da:17:cf:97:3c:b6:1d:8f:a7:57:8e:84:8c:
e1:a4:0c:93:62:7e:4f:52:c4:44:ea:df:8a:6c:1d:
a4:73:cc:ea:ea:70:85:14:09:c4:f3:65:cd:3c:90:
0d:25:93:5f:d2:5e:38:7b:09:e9:ea:f6:36:57:ee:
7f:e9:80:4f:6f:76:02:e8:4e:b4:4b:41:7c:0f:d9:
7e:c0:b3:d3:71:55:bf:cc:8d:b7:e0:f2:0f:2c:74:
66:d3:d1:ae:c5:b2:0a:48:6a:58:b3:ed:82:11:da:
1e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:35:06:E7:DF:A7:ED:73:77:9A:28:6E:43:87:02:57:FA:61:C4:9C
X509v3 Authority Key Identifier:
keyid:CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/82D8082A292611EF875A5C36C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.19.194.0/24
203.12.172.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:9a:db:db:0b:fc:b1:c4:90:b0:39:ed:04:d5:93:ae:7c:64:
ed:b4:1f:73:6f:70:5f:cb:a1:64:32:c1:fb:ec:45:d5:44:da:
b3:81:e5:4b:e2:75:3d:c7:19:b7:6a:73:88:7b:22:08:52:a4:
f9:e2:81:74:77:c5:0b:ac:a6:fe:38:1b:46:bc:6b:4e:0b:53:
e4:40:ab:92:15:29:f3:b8:b1:21:52:d6:95:5f:61:d3:92:5c:
ec:d2:c3:d9:69:42:32:d2:4e:0b:75:59:09:e9:1b:e1:57:00:
2a:5f:6b:b8:38:3c:4f:1c:18:07:e2:7e:4e:69:37:29:8d:df:
6e:fb:d1:58:a9:25:0d:d0:eb:1a:6f:db:64:34:5e:f8:88:a9:
10:98:c4:a3:4f:80:d6:19:97:ee:9c:20:7d:c0:b8:0f:c6:5e:
9d:86:70:b0:63:88:84:40:81:4a:d0:a9:28:73:84:bc:59:b8:
aa:fc:be:6c:38:36:dd:34:f5:36:07:ab:01:91:6f:30:8b:16:
76:18:33:14:01:7a:0a:8d:96:24:a6:3d:10:0c:20:3c:6f:82:
d9:0c:c6:af:d7:58:60:e5:62:d5:47:2a:34:58:1f:7d:5d:6e:
c0:03:cc:c2:95:76:49:bf:a9:dc:18:67:96:87:ff:01:be:d5:
87:c9:55:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 14:34:57 2026 by rpki-client