
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/C5C77866584111EE85E40820C4F9AE02.roa
File: C5C77866584111EE85E40820C4F9AE02.roa (raw, json)
Hash identifier: o09B0PsJspIE7YM1wHmZQROS9GUS/vHR3P6a96Hv63k=
Subject key identifier: C1:47:DA:0C:39:82:EB:9C:58:F0:07:4A:2B:89:E3:FF:DD:87:D6:36
Certificate issuer: /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388
Certificate serial: 0231
Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/C5C77866584111EE85E40820C4F9AE02.roa
Signing time: Sun 07 Jun 2026 00:28:56 +0000
ROA not before: Sun 07 Jun 2026 00:28:56 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 212921
IP address blocks: 103.151.172.0/23 maxlen: 23
103.151.172.0/24 maxlen: 24
103.151.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 01:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 561 (0x231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170829, serialNumber=F897422E501006D2601D85A501795326BAFE7388
Validity
Not Before: Jun 7 00:28:56 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a24bb48-d68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:38:00:06:98:c8:b0:a8:bb:70:ce:95:aa:52:
fa:7c:ed:32:02:09:31:df:f2:7e:f3:a2:6a:28:49:
f7:80:a9:1d:55:1a:e7:74:18:c2:d3:b7:e8:60:72:
d4:d9:52:80:e0:18:0c:5a:3f:21:1b:96:5d:fe:f7:
e4:5c:95:95:fa:4b:58:66:38:6b:2b:71:99:e4:b0:
8b:1f:a8:b7:cf:7d:e5:24:58:a5:33:7e:0a:8f:db:
7f:1a:f4:14:45:de:fe:28:3b:e0:da:5b:65:a2:46:
2c:f5:20:20:17:f6:4d:07:0c:b2:f3:6b:80:44:66:
2f:2d:e9:66:0a:a1:50:74:55:58:7a:a9:f6:57:01:
f6:52:fc:56:0b:c8:15:cc:3f:0f:40:50:52:79:d2:
ad:02:7e:cc:8d:3f:d9:e5:77:87:9e:d1:99:a8:92:
d9:b6:88:7f:32:32:2c:24:17:85:8e:7c:7a:31:b4:
e9:99:49:e6:89:fa:bc:1e:03:44:ed:8f:e7:01:47:
dd:1a:9e:36:14:53:2d:f1:57:f5:26:f0:55:79:b7:
87:25:9a:db:f1:aa:d9:28:df:7c:fa:12:25:03:10:
23:9b:48:dd:f4:92:43:13:86:05:40:3b:0c:82:a2:
eb:c8:0f:f3:d1:f8:c4:cb:48:3a:88:34:bb:b3:67:
64:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:47:DA:0C:39:82:EB:9C:58:F0:07:4A:2B:89:E3:FF:DD:87:D6:36
X509v3 Authority Key Identifier:
keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/C5C77866584111EE85E40820C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.151.172.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:fa:a8:64:74:51:ff:03:cc:b3:c2:f6:10:51:63:c5:5b:c6:
8b:37:a8:16:8b:8b:53:37:33:86:36:02:78:64:f5:98:e6:bb:
2e:63:7d:ff:f9:a3:0a:16:43:21:3b:2f:2a:b9:94:0d:6a:30:
5f:41:f5:e6:67:96:1a:c7:5d:87:89:c8:67:dd:ee:9d:0e:da:
f1:fc:4f:26:62:7a:88:db:a1:ce:02:2a:9e:61:db:e1:e1:3f:
cb:b7:86:54:5d:7b:09:e9:7d:ec:f0:2e:ea:4b:57:d7:7b:d6:
45:a0:f1:48:34:69:55:35:bb:37:93:6e:1c:fa:c0:68:5d:ca:
51:cd:4b:b5:e5:3d:92:01:f6:64:39:54:d4:52:d2:f8:a9:37:
d5:2c:96:f3:5e:73:65:85:4b:f5:93:f1:98:29:60:9f:60:d1:
22:cc:f1:d9:c6:89:18:b4:df:b3:3a:33:f4:f9:e3:54:7e:a8:
66:1f:73:19:2b:cb:d9:9c:a4:37:d4:58:26:f8:56:69:e6:47:
6f:ee:bd:8f:3f:9f:a4:71:1a:87:77:55:71:b5:e4:7d:76:25:
8e:26:dc:33:30:ed:9c:95:75:a6:e7:c3:ed:16:cc:d6:92:19:
05:62:83:3d:ad:05:7a:b1:29:0a:da:e8:8c:75:77:70:9a:de:
b3:a8:33:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:29:02 2026 by rpki-client