
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/C4D7F9DA584111EE85E40820C4F9AE02.roa
File: C4D7F9DA584111EE85E40820C4F9AE02.roa (raw, json)
Hash identifier: B9f80EoI0x+BIg2AFxeHEGvINQTmjdsYocZpJvfDc0A=
Subject key identifier: 8C:94:6F:45:C1:99:74:FC:2F:3E:AA:70:7C:DD:14:28:8E:57:F4:37
Certificate issuer: /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388
Certificate serial: 022F
Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/C4D7F9DA584111EE85E40820C4F9AE02.roa
Signing time: Sun 07 Jun 2026 00:28:51 +0000
ROA not before: Sun 07 Jun 2026 00:28:51 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 137427
IP address blocks: 103.151.172.0/23 maxlen: 23
103.151.172.0/24 maxlen: 24
103.151.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 01:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170829, serialNumber=F897422E501006D2601D85A501795326BAFE7388
Validity
Not Before: Jun 7 00:28:51 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a24bb42-2e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:2e:28:ac:fe:4f:9b:87:f7:83:be:f2:53:
01:42:c0:b5:85:cf:11:f7:84:95:1b:d2:3a:d7:d8:
05:2f:6a:8f:79:8d:17:05:59:70:a4:6e:76:38:bd:
c7:f6:db:3f:d0:ec:e5:43:b2:f8:78:df:00:b8:5b:
57:84:83:74:6b:99:b9:b5:ed:1c:19:3b:f1:4d:df:
11:1e:49:56:09:25:ee:7f:94:5b:9a:ec:d3:9f:6b:
a9:1a:82:a4:de:0c:35:21:29:bd:2f:86:78:c6:c9:
55:bc:dd:bd:5f:29:05:fd:ec:aa:5d:40:ee:dc:a4:
4f:e6:b3:6c:03:45:83:bc:28:ca:f3:e3:81:24:11:
f6:c0:00:26:de:03:ee:53:f6:15:fd:95:cb:a2:34:
15:90:44:7d:04:9b:9e:a5:32:d4:0b:66:db:33:6e:
c3:c1:dc:f3:f3:e1:4c:e5:7e:d9:ef:d6:bd:bc:87:
76:ec:5d:bb:b8:e6:fc:c0:60:7e:c5:2f:e7:20:01:
fd:be:a0:d9:ff:e4:e0:fb:e8:d6:84:f8:ce:47:77:
2e:5f:90:21:60:07:a5:83:26:f8:c3:f4:42:f7:6c:
f1:4d:00:0f:da:26:cb:9c:62:89:56:67:c4:2c:0b:
6d:cd:2f:4c:63:25:39:71:df:cb:a9:be:0d:ee:07:
0d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:94:6F:45:C1:99:74:FC:2F:3E:AA:70:7C:DD:14:28:8E:57:F4:37
X509v3 Authority Key Identifier:
keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/C4D7F9DA584111EE85E40820C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.151.172.0/23
Signature Algorithm: sha256WithRSAEncryption
04:6c:c2:b1:ef:ce:c3:34:3f:20:a4:a7:6a:13:37:7c:34:fd:
c0:63:20:d3:a1:1f:c0:59:f8:6b:0c:0d:c8:98:64:cc:2c:70:
d8:29:2b:91:85:39:4a:29:49:0e:ab:e5:91:ca:c5:56:ad:1b:
7c:23:1d:68:0f:b6:05:11:f5:21:78:f1:c7:3a:15:8e:04:8c:
c3:18:a1:06:36:61:dc:08:5c:86:3b:b2:57:7f:e2:f0:52:70:
58:0f:55:5b:30:3e:d7:4b:7d:7e:a2:bc:a0:ff:43:7f:47:7d:
ae:e6:0a:45:16:89:89:b1:29:30:89:bd:aa:6d:1b:76:fc:6a:
f7:6b:ae:d0:fd:2e:e7:df:54:7f:4a:fc:7f:9c:2b:b2:ad:75:
c8:1c:a7:32:8b:3b:45:a7:9e:d9:ee:6d:7e:e5:c8:d1:e2:bc:
3f:b4:c7:a1:d0:0f:29:69:b4:ed:74:fd:19:03:4f:0d:0c:4d:
b4:3d:db:59:00:96:a1:d1:93:59:e8:f9:9d:fb:21:33:c9:25:
f8:f0:9e:21:91:be:39:70:76:0f:59:7b:31:5b:db:74:96:24:
63:d8:c8:43:b9:bc:d7:08:cd:62:eb:59:88:6b:5b:ef:c2:8b:
24:13:d1:8b:00:73:2e:c1:48:cd:61:18:df:ad:0a:ec:d9:ea:
72:af:00:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:27:00 2026 by rpki-client