
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/6AA5FC16905211EE840DED1DC4F9AE02.roa
File: 6AA5FC16905211EE840DED1DC4F9AE02.roa (raw, json)
Hash identifier: g6N8lL87Yao5mRB/IHXmKQRBTCgAMuqrQnNSGfaMRK8=
Subject key identifier: 96:12:F6:63:7B:D9:E9:52:D6:63:C1:95:2D:54:0C:D4:E9:85:85:D0
Certificate issuer: /CN=A9171927/serialNumber=2A69D699F13C041BFDA3DAA57E21FFAB3C53ED5F
Certificate serial: 029B
Authority key identifier: 2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/6AA5FC16905211EE840DED1DC4F9AE02.roa
Signing time: Sat 01 Aug 2026 03:51:53 +0000
ROA not before: Sat 01 Aug 2026 03:51:53 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 149838
IP address blocks: 103.187.190.0/23 maxlen: 23
103.187.190.0/24 maxlen: 24
103.187.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl
rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 00:53:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667 (0x29b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171927, serialNumber=2A69D699F13C041BFDA3DAA57E21FFAB3C53ED5F
Validity
Not Before: Aug 1 03:51:53 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a6d6d58-09d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:96:dc:ca:c2:5a:1f:c5:d4:c8:b4:f1:b4:
34:e9:52:42:2b:ba:75:30:82:08:82:31:ab:55:dc:
8b:09:4c:1b:72:78:61:c9:eb:de:fe:69:0f:74:16:
50:45:9c:aa:fc:7c:f7:ed:6d:03:4a:33:bf:5b:90:
7c:5a:04:77:59:32:33:1c:c9:67:a1:2b:81:c1:e5:
c0:c0:1a:7b:38:f1:6b:1a:94:bb:9d:fa:98:2d:d9:
c5:c5:58:36:5c:54:be:66:b0:2e:e0:c9:3d:d0:cd:
ce:f2:21:73:f4:24:35:26:d5:6a:d5:0c:82:9a:52:
06:99:c7:08:3c:66:fd:58:ba:3c:8b:25:cb:2f:cd:
12:fc:cc:83:1b:82:63:45:71:14:c4:11:21:0e:6b:
ba:2e:9a:f9:c4:4e:33:32:76:b4:16:e5:49:1f:45:
98:e4:c2:c0:51:06:55:de:8e:d0:76:4c:87:c6:6f:
31:aa:d3:88:68:cf:8a:18:83:18:1f:eb:d8:8f:b5:
f0:06:dc:08:bb:03:9b:57:1c:50:93:8b:7d:4b:c2:
34:73:45:34:d2:a0:9f:0f:7d:89:76:74:1b:d2:8f:
95:19:88:96:1f:1b:4d:b8:00:74:bc:8e:86:a0:dc:
5c:59:56:b0:a4:af:f2:c3:ab:4e:0e:6c:ab:5d:c7:
2a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:12:F6:63:7B:D9:E9:52:D6:63:C1:95:2D:54:0C:D4:E9:85:85:D0
X509v3 Authority Key Identifier:
keyid:2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/6AA5FC16905211EE840DED1DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.187.190.0/23
Signature Algorithm: sha256WithRSAEncryption
11:b7:1a:71:10:d1:d1:51:1d:a6:ef:d0:5e:ab:d6:82:56:5c:
99:9f:51:ea:a2:10:e7:7b:5c:c8:8a:5e:84:a9:45:47:90:20:
e1:7f:78:37:5b:26:fe:1d:92:cc:2d:35:68:3a:ed:51:8a:2b:
07:75:ac:f2:62:bc:ee:46:93:92:04:55:19:5a:c7:ec:be:30:
c4:34:66:3b:7d:20:ef:1a:12:3b:bf:cc:64:65:1a:0c:e9:44:
10:68:82:bb:8f:3f:e7:6a:6e:bb:ce:cb:63:c8:8e:14:eb:ba:
9f:fb:53:bd:98:3c:7e:06:36:97:33:a6:04:a3:40:e5:76:81:
99:78:22:52:48:e1:ed:11:43:ad:c5:f6:e0:82:28:36:9b:e4:
95:a2:f0:8f:f0:25:ab:92:c8:41:79:07:34:60:a1:4f:d6:de:
1c:7c:44:f1:90:fb:81:f3:49:1f:1c:d9:be:5a:98:9d:f2:84:
51:e0:59:2e:e4:82:37:8f:87:37:ef:48:02:2d:76:0d:48:b9:
33:6b:b4:97:ea:56:92:0a:f9:0e:57:b5:b1:6d:85:53:17:39:
39:fd:af:cd:3b:55:82:ed:eb:cd:8b:b4:70:2f:88:1d:82:f5:
20:b2:59:80:65:d6:9a:e7:49:b4:c5:55:f1:34:db:8c:a4:90:
f1:b4:5e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:09:36 2026 by rpki-client