
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/5D7779A6108A11EC9E1F3D49C4F9AE02.roa
File: 5D7779A6108A11EC9E1F3D49C4F9AE02.roa (raw, json)
Hash identifier: fiCnSMT0n0WOVMvnoMFzcVyWrn5X5mwai9+H97Mx1gM=
Subject key identifier: 14:40:63:E4:E5:92:78:84:7A:D5:6E:7D:E6:DD:64:AF:F6:5E:77:1E
Certificate issuer: /CN=A9170AE9/serialNumber=1B7F7981D9E2C2C30F6F2C34871A2986D85F890E
Certificate serial: 05FC
Authority key identifier: 1B:7F:79:81:D9:E2:C2:C3:0F:6F:2C:34:87:1A:29:86:D8:5F:89:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/5D7779A6108A11EC9E1F3D49C4F9AE02.roa
Signing time: Sat 26 Sep 2026 23:44:51 +0000
ROA not before: Sat 26 Sep 2026 23:44:51 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 147017
IP address blocks: 103.173.2.0/23 maxlen: 23
103.173.2.0/24 maxlen: 24
103.173.3.0/24 maxlen: 24
2001:df7:8280::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.crl
rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 22:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1532 (0x5fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170AE9, serialNumber=1B7F7981D9E2C2C30F6F2C34871A2986D85F890E
Validity
Not Before: Sep 26 23:44:51 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ab858f3-78b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3d:6b:f4:5f:ed:cb:7e:20:b8:f4:91:f4:65:
94:45:4a:02:13:40:92:74:0d:c5:d7:6f:90:55:01:
0c:58:42:db:53:09:34:b3:48:68:3f:25:97:60:21:
f9:2b:9c:4e:21:c8:59:50:99:d6:3c:3b:ad:14:ca:
92:03:78:1d:7d:93:2e:53:99:04:da:63:0c:c5:21:
7e:85:8f:05:0e:b0:b2:6f:1d:66:9c:73:2e:5e:b6:
bc:56:8d:65:01:b0:1d:ba:b1:e6:fd:53:4a:e2:6e:
85:ef:ce:e2:a8:93:72:4f:bd:ad:48:2d:20:81:ca:
5e:3e:a9:0b:c9:59:7b:19:2d:7e:8c:38:ab:ea:ce:
19:aa:07:d3:1b:de:19:f4:ca:a8:82:34:09:5c:c9:
3b:0d:99:1c:c1:1e:a0:32:dc:1e:5a:8c:33:e7:66:
c8:c2:4a:fc:be:e0:ad:90:57:65:31:84:db:09:05:
2e:d5:c0:db:e4:d4:37:bd:e6:c5:90:d0:1c:89:57:
78:b1:ec:54:87:08:2c:85:90:af:7b:9f:1e:cb:41:
d2:d5:b3:17:5a:f2:16:ff:51:13:49:72:21:09:e6:
ee:8b:f1:af:f3:2b:1a:cc:05:05:20:0c:e3:ff:9b:
94:52:86:c6:ea:e4:cb:12:ae:c7:91:f9:4d:59:60:
56:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:40:63:E4:E5:92:78:84:7A:D5:6E:7D:E6:DD:64:AF:F6:5E:77:1E
X509v3 Authority Key Identifier:
keyid:1B:7F:79:81:D9:E2:C2:C3:0F:6F:2C:34:87:1A:29:86:D8:5F:89:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/5D7779A6108A11EC9E1F3D49C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.173.2.0/23
IPv6:
2001:df7:8280::/48
Signature Algorithm: sha256WithRSAEncryption
2b:17:e0:e9:64:34:c4:f9:7b:d1:78:dd:0a:85:c0:5e:dd:3d:
eb:d5:ce:bf:73:19:d7:03:f7:dd:74:fd:e4:e7:04:80:4a:9c:
a1:07:dd:2d:d2:c9:41:51:58:0f:d5:b0:3b:5f:09:f9:f0:90:
7f:2e:b0:a5:cb:79:86:8b:f1:5d:ce:21:53:b7:ef:7b:f6:1f:
a9:11:d0:1c:12:46:e6:9b:14:2c:6e:9f:bc:97:5b:db:15:57:
51:a3:88:88:3e:6d:bb:25:ab:e5:09:e9:b3:cc:51:c8:8c:3d:
61:98:81:26:a6:1a:c0:4f:e2:6b:b6:2a:fe:f5:03:a1:39:33:
aa:8f:3f:d5:48:81:12:aa:97:a8:36:f7:f5:8f:3f:90:91:d2:
07:b9:1c:75:13:3a:b2:c0:40:de:f3:ce:c3:96:4e:84:d8:ef:
e0:08:3d:a2:fe:4a:5e:7a:61:1e:cb:7c:0e:e3:bf:97:f3:07:
f2:26:d8:7b:e4:42:fe:f9:d7:f3:43:03:6d:fd:89:a5:db:26:
dd:87:2d:27:91:01:a2:b6:50:48:c0:d3:ec:09:f4:2c:81:f2:
9f:10:08:a1:15:e9:b1:2c:49:cd:69:80:74:9e:04:ff:89:70:
d3:f6:04:65:ca:8e:0f:39:50:02:8c:9d:58:fc:72:29:96:58:
65:c0:dc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:52:56 2026 by rpki-client