
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/27178D9E7FBC11EEAF80B825C4F9AE02.roa
File: 27178D9E7FBC11EEAF80B825C4F9AE02.roa (raw, json)
Hash identifier: GZUw3zYmkPD1oIQsIFHheUysQrlXgVMcApDvpUWdnAE=
Subject key identifier: 84:E6:A8:4D:D1:09:63:35:CB:50:EF:30:5A:1F:A5:2A:57:C4:FC:B8
Certificate issuer: /CN=A916B02F/serialNumber=87F31B201BDD187581540C5B8B864438C29990B9
Certificate serial: 0208
Authority key identifier: 87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/27178D9E7FBC11EEAF80B825C4F9AE02.roa
Signing time: Sat 01 Aug 2026 04:53:16 +0000
ROA not before: Sat 01 Aug 2026 04:53:16 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 134484
IP address blocks: 103.197.156.0/23 maxlen: 23
103.197.156.0/24 maxlen: 24
103.197.157.0/24 maxlen: 24
2001:df2:6f40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl
rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:38:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B02F, serialNumber=87F31B201BDD187581540C5B8B864438C29990B9
Validity
Not Before: Aug 1 04:53:16 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a6d7bbc-234c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:56:71:f5:27:06:49:c0:f5:5e:b9:8b:44:
6c:1e:0a:e2:9f:ea:c2:51:6e:5a:d9:e7:e3:8a:94:
ac:8e:15:15:ab:3d:da:f1:80:c6:b8:5b:79:e4:52:
a9:d0:72:43:10:c6:39:be:22:1e:e3:51:2c:6a:bf:
f1:da:f5:a6:eb:d6:7b:53:af:58:09:1a:2d:ea:03:
b8:c4:12:9d:92:50:94:c9:7f:13:7b:f6:61:c5:fb:
a7:64:db:f8:06:6a:b6:d8:27:8d:06:90:49:92:26:
58:2c:76:70:d7:9c:17:85:f4:40:f2:86:99:95:7f:
d9:b8:a4:e0:54:a0:e9:55:6a:0d:ab:fc:c6:9b:d0:
4c:58:35:c8:a1:1d:e7:1b:61:29:48:31:d3:37:c6:
6e:3f:74:70:23:ea:2f:83:3d:6f:4c:8b:f5:05:b4:
e5:c2:b4:b2:51:2d:b9:c6:9f:6a:1f:48:5c:60:22:
f7:c2:93:7a:2b:33:91:11:ef:8f:55:75:45:ed:05:
60:87:a0:a8:d4:f7:a6:65:2a:27:1c:1f:3a:60:75:
64:a3:bb:39:d0:ad:18:e8:cb:ce:be:35:c3:be:19:
17:cf:66:3c:9b:38:9b:b3:77:6a:70:b9:e0:e9:55:
73:3c:8d:ac:de:4f:c7:10:b4:06:21:c6:4f:cc:84:
43:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E6:A8:4D:D1:09:63:35:CB:50:EF:30:5A:1F:A5:2A:57:C4:FC:B8
X509v3 Authority Key Identifier:
keyid:87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/27178D9E7FBC11EEAF80B825C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.197.156.0/23
IPv6:
2001:df2:6f40::/48
Signature Algorithm: sha256WithRSAEncryption
4f:6d:bb:de:eb:78:4d:0b:53:11:69:4b:e7:88:26:31:aa:b5:
1a:b5:b2:90:e6:8f:ee:39:90:8a:40:95:59:30:5f:af:ca:05:
22:89:e2:56:4d:58:fa:b7:30:91:ca:ee:ec:0a:a2:8e:ea:9f:
c9:7e:29:cc:2e:26:a5:34:62:9f:d7:0c:de:1c:99:eb:2e:b3:
05:9d:1c:5b:82:05:3f:e7:ff:16:4e:c7:69:92:3f:53:ad:bc:
ac:8f:4f:6b:a8:92:5a:8c:8b:72:17:7c:45:f1:f8:0b:76:7a:
b6:92:b1:2f:dd:72:bd:b7:48:90:3b:30:d5:ba:00:ac:05:c3:
49:cd:28:3c:47:b3:a7:8f:93:67:0c:69:73:79:ee:ba:29:ff:
cc:19:26:7a:8b:78:ec:91:d0:8b:b8:03:ac:05:3b:0d:7e:f4:
18:a5:b7:59:82:2b:e3:99:ab:29:72:a3:d1:ce:06:e8:d6:4e:
4f:45:3e:d1:61:b6:f9:cf:08:20:51:e0:d9:5c:7b:8f:24:a7:
cb:d7:e0:43:fe:de:56:85:b2:28:bf:5c:e0:ed:5e:80:11:2a:
7d:c0:94:8d:f7:a0:c9:72:81:95:b8:16:33:bd:66:8c:e5:52:
ab:a2:f3:25:95:d2:b4:89:45:8e:ba:10:7d:43:08:38:ea:c3:
b4:2f:60:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:15:03 2026 by rpki-client