
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/6E3B1338F41211E9AAF5924EC4F9AE02.roa
File: 6E3B1338F41211E9AAF5924EC4F9AE02.roa (raw, json)
Hash identifier: vAJQDBAbqSvKlyjILfpEs40GEZSujGVNMsS2YT9xHAs=
Subject key identifier: 34:36:AC:31:98:01:0A:F0:C8:26:0F:79:31:8D:21:55:81:33:BB:73
Certificate issuer: /CN=A9171B1A/serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611
Certificate serial: 0DA8
Authority key identifier: 91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/6E3B1338F41211E9AAF5924EC4F9AE02.roa
Signing time: Sat 26 Sep 2026 18:36:04 +0000
ROA not before: Sat 26 Sep 2026 18:36:04 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 63526
IP address blocks: 103.101.197.0/24 maxlen: 24
103.101.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl
rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 18:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3496 (0xda8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171B1A, serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611
Validity
Not Before: Sep 26 18:36:04 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ab81093-dabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9c:aa:f2:fa:2c:e5:10:0c:e1:1a:79:05:26:
6e:83:da:67:c9:4f:87:53:93:d5:cc:fb:16:9e:d5:
24:49:91:5e:5c:a8:cc:1f:71:b0:80:03:82:eb:48:
ad:c5:66:32:8e:df:34:ef:10:a4:2e:fb:7a:d1:18:
93:e8:90:6c:fa:52:37:b0:bb:1b:62:d4:ff:1a:78:
ea:d4:ef:61:24:25:38:b8:2f:65:65:29:d6:b2:61:
ef:fa:3d:65:88:e9:61:bc:3a:f7:51:5a:ee:2e:f3:
95:7f:ac:6c:23:27:a3:19:17:71:07:ac:40:ea:58:
9e:ac:4a:0c:2c:bd:00:3f:ef:ed:99:a6:f7:af:4c:
d1:05:24:7d:71:8e:32:75:db:2a:c2:21:50:28:e7:
7a:dd:e3:5e:bc:b2:74:50:11:63:b8:b4:44:f4:4b:
9a:45:39:89:69:a1:b9:62:76:fb:78:27:61:14:28:
0f:09:f2:26:a9:bd:12:c3:d0:4d:11:01:d5:07:1e:
55:6a:9c:02:f5:18:bb:13:78:df:4f:2f:9b:aa:53:
50:3c:84:9c:ce:0a:0c:2d:77:ed:17:97:65:1c:61:
5b:61:b2:d1:fc:27:ae:8c:f5:7a:6c:67:42:64:78:
6d:4b:37:32:ff:8a:5c:bc:5e:1a:53:13:cd:86:44:
4d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:36:AC:31:98:01:0A:F0:C8:26:0F:79:31:8D:21:55:81:33:BB:73
X509v3 Authority Key Identifier:
keyid:91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/6E3B1338F41211E9AAF5924EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.101.197.0/24
103.101.199.0/24
Signature Algorithm: sha256WithRSAEncryption
92:58:d8:81:e9:4a:9d:c3:ff:bc:59:0d:50:ec:f7:25:6d:2a:
7e:4d:e8:4a:44:bf:0a:2f:35:5f:37:c7:37:aa:7c:4d:92:67:
fd:a3:de:62:03:a6:a1:ec:45:03:38:22:67:b2:df:91:96:a6:
ef:41:c7:6c:80:3f:63:07:63:01:64:f5:07:9d:20:1f:ef:fb:
a9:14:bd:f2:c3:45:ef:a3:89:cb:2b:e3:dc:2d:6f:b3:05:20:
40:74:3a:66:fb:c5:ee:f7:4c:ec:9e:7e:06:3f:1a:11:3f:11:
42:82:cb:61:55:9a:b1:6b:35:1a:36:5a:f8:03:24:cd:9d:65:
fb:10:53:4b:96:de:13:3d:fa:3d:58:7a:7f:c8:0a:09:1b:66:
af:69:95:73:64:3d:de:5a:3b:51:4f:7e:9d:1b:63:d4:c6:0b:
f1:2f:1b:65:52:49:c4:94:55:b1:2d:8e:d6:ee:dd:1b:f0:06:
e9:09:b2:18:62:ee:dc:87:73:29:9d:de:e0:6f:98:65:62:35:
4f:ea:d7:f3:ff:bb:07:8d:6b:0f:5b:f7:a3:81:f1:d0:82:28:
2f:25:ad:5b:ef:19:d3:c7:81:ab:92:7a:0b:f5:db:d1:44:0f:
0b:78:53:73:49:bd:8a:c9:a2:d8:0a:85:0b:40:f0:73:0f:c1:
78:9f:97:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:03:26 2026 by rpki-client