
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/FD41FC5EEA6811EDBE3EE23CC4F9AE02.roa
File: FD41FC5EEA6811EDBE3EE23CC4F9AE02.roa (raw, json)
Hash identifier: Cs3bVmbYBB0b2ZAeoSeXTm/ceUq6lP9LdgAJFfPHDiQ=
Subject key identifier: 74:AB:29:92:27:44:23:5B:ED:9A:3A:12:F6:23:F6:81:47:08:A2:B2
Certificate issuer: /CN=A9171927/serialNumber=2A69D699F13C041BFDA3DAA57E21FFAB3C53ED5F
Certificate serial: 029A
Authority key identifier: 2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/FD41FC5EEA6811EDBE3EE23CC4F9AE02.roa
Signing time: Sat 01 Aug 2026 03:51:50 +0000
ROA not before: Sat 01 Aug 2026 03:51:50 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 10225
IP address blocks: 103.187.190.0/23 maxlen: 23
103.187.190.0/24 maxlen: 24
103.187.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl
rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 01:53:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 666 (0x29a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171927, serialNumber=2A69D699F13C041BFDA3DAA57E21FFAB3C53ED5F
Validity
Not Before: Aug 1 03:51:50 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a6d6d56-2e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f0:3d:4e:6a:08:cb:d2:90:25:cf:74:af:10:
54:fc:26:79:f6:74:7d:bc:ce:f1:2b:17:72:9b:26:
e9:ae:22:76:65:12:b5:83:a5:a6:4e:6c:91:c1:13:
0e:37:7e:e4:6e:02:fe:04:66:cc:8e:1f:07:19:f8:
84:b7:b2:39:d6:ae:2c:3f:be:08:de:5c:66:91:01:
ff:77:eb:33:76:cc:62:11:b5:31:f1:be:78:15:14:
51:ac:2b:18:9d:64:5b:7c:a8:da:09:0e:10:e2:9c:
5c:06:46:a6:b2:02:d7:f9:79:71:4b:bb:1e:d0:74:
e8:b9:09:23:00:53:88:97:86:46:dc:05:4d:a1:b0:
12:6a:4f:5e:f5:74:82:2d:33:db:69:ca:ad:e7:aa:
9d:86:6b:a4:46:42:cb:ad:f9:68:ab:0b:92:12:b2:
06:db:89:de:5b:2a:4b:9a:49:66:97:5e:b5:ca:19:
fc:f0:33:e8:9c:93:c3:d3:e5:f0:c7:85:cb:77:8b:
0f:24:2a:86:2d:9f:90:67:67:e6:a2:4d:0a:cd:66:
b2:e3:e9:48:79:91:9b:3c:6a:c7:f4:8a:2b:34:62:
4e:ea:32:79:c5:33:b1:91:32:c7:bf:46:4d:75:ec:
c5:2e:95:a1:d0:f1:4f:c4:76:b5:8c:de:18:3a:2c:
00:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AB:29:92:27:44:23:5B:ED:9A:3A:12:F6:23:F6:81:47:08:A2:B2
X509v3 Authority Key Identifier:
keyid:2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/FD41FC5EEA6811EDBE3EE23CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.187.190.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:18:d0:ad:88:5c:1b:97:93:21:c7:20:b8:19:9f:1c:92:be:
ca:dc:0e:05:5f:43:fc:c2:dc:75:69:6d:d1:08:a9:5f:b9:9e:
28:18:bc:4a:21:e7:a3:52:ad:eb:f8:1f:88:3d:01:e7:eb:ce:
63:4e:23:fd:94:8f:9b:7d:40:b7:42:8e:b1:fc:1c:36:01:98:
cf:61:12:7c:5c:52:e7:89:7c:11:64:1f:6d:0f:e6:74:b1:8a:
68:cf:9e:e9:6d:2e:1b:80:68:9a:a4:63:34:ab:bf:90:c2:b6:
ce:b5:f2:45:e9:6c:eb:e7:7a:3c:6a:ba:40:a1:af:60:37:83:
df:7d:9f:b9:08:22:17:45:19:c2:8c:1a:1e:46:1a:13:fd:cc:
78:2e:23:a3:70:74:08:ce:53:49:3a:56:ea:65:12:a6:da:a2:
35:64:21:4f:76:a3:fc:bf:34:65:af:35:5f:b1:84:b6:15:c7:
17:99:96:c8:c3:cb:7c:08:cb:19:36:6c:34:6e:4e:c9:16:94:
ca:32:68:57:84:34:26:fb:8b:56:3d:f6:4f:ea:5b:65:2b:2e:
1c:6b:8e:a7:c0:8f:14:54:35:bd:90:5e:ae:8d:db:29:0d:9b:
4c:a1:a2:54:a0:92:bc:47:07:eb:c6:ca:09:64:e0:88:42:ec:
43:d6:d8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:43 2026 by rpki-client