
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/394CC63C2D2F11F19323886DBB833773.roa
File: 394CC63C2D2F11F19323886DBB833773.roa (raw, json)
Hash identifier: 45eCaBsMYY5Dq3/DduTYtQquofDXNyzGbOAJxOjVzdY=
Subject key identifier: A7:7D:8B:2C:B9:89:61:78:BE:88:98:F8:4F:3B:33:6C:F3:BD:FF:15
Certificate issuer: /CN=A9171B8D/serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52
Certificate serial: C8
Authority key identifier: BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/394CC63C2D2F11F19323886DBB833773.roa
Signing time: Tue 31 Mar 2026 18:29:00 +0000
ROA not before: Tue 31 Mar 2026 18:29:00 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135145
IP address blocks: 103.240.40.0/23 maxlen: 23
2401:1be0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl
rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171B8D, serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52
Validity
Not Before: Mar 31 18:29:00 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69cc126c-9ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b8:d3:89:4f:71:70:7b:60:42:f4:2d:29:48:
63:ee:6a:f4:2e:a0:3e:bf:5a:ba:58:9f:58:11:42:
a4:27:d5:a7:dd:94:3a:0e:99:90:15:68:6b:9e:b9:
60:8d:54:d2:2c:61:7e:77:23:15:5a:56:df:82:6a:
3a:90:21:e2:1d:ec:cb:5e:0e:1f:68:88:a9:7b:3d:
08:2b:d7:90:3e:13:bd:46:a8:de:91:99:af:6e:92:
04:44:65:19:a5:b2:a4:2a:c5:d5:16:64:bd:eb:9b:
b7:85:8a:d3:3c:cf:16:36:62:fe:4a:bb:72:4e:3b:
d3:95:c8:ad:16:27:ca:fb:a6:59:c1:34:ca:27:3e:
30:38:29:3d:31:56:f2:3b:6f:97:95:54:f3:21:0b:
0b:2d:0c:1e:de:97:d8:ab:26:04:e6:cf:86:af:d8:
3a:89:9b:ea:b5:c0:be:4b:72:3a:7e:a6:92:28:46:
72:3a:61:43:86:ef:77:ed:4d:3a:74:83:7c:ee:86:
b0:dd:c0:38:89:93:90:c7:d0:45:5c:2d:5f:0b:a8:
18:f9:2e:30:1a:b1:0d:28:c9:ae:77:f7:a7:c8:1b:
94:2c:a8:07:40:da:86:b9:7f:cb:e5:41:0f:79:ed:
3c:87:62:39:d3:49:57:5d:eb:af:aa:fb:51:f5:95:
2c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7D:8B:2C:B9:89:61:78:BE:88:98:F8:4F:3B:33:6C:F3:BD:FF:15
X509v3 Authority Key Identifier:
keyid:BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/394CC63C2D2F11F19323886DBB833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.240.40.0/23
IPv6:
2401:1be0::/32
Signature Algorithm: sha256WithRSAEncryption
1f:29:07:2d:d3:f4:85:41:40:09:11:bc:79:ca:17:d5:97:60:
de:e9:0a:39:28:03:a8:ef:43:cc:8f:8b:92:b1:bb:ff:62:f1:
6a:a1:71:3b:c5:4e:50:9b:8a:3b:19:1e:4e:33:9e:d0:6b:13:
97:54:c4:c8:7d:0c:ec:13:f9:47:8f:fb:0b:2b:e2:93:3d:9d:
d3:bb:8c:2d:c9:69:df:8a:60:f7:f6:2b:ea:bc:3f:82:c7:2d:
61:6c:ce:4e:35:fe:34:66:2e:e1:d0:e6:05:d6:68:71:8e:f1:
01:8b:6b:d9:d7:06:db:63:ca:fe:0a:6d:78:14:f0:a9:a9:ea:
b1:52:e3:aa:c2:19:ee:e6:d8:d5:dc:1a:5b:e2:d2:ef:32:af:
1f:1b:18:ec:41:30:52:bb:58:4a:69:4a:15:17:6e:c4:70:73:
51:fb:e1:4e:ab:22:ce:41:c5:5b:ea:80:ae:2b:a2:2b:e8:29:
92:d5:44:75:34:08:cb:6e:12:57:e6:d5:aa:a3:68:a8:10:1a:
ab:c2:32:e3:08:c4:6f:c1:30:25:61:6c:d0:47:68:2a:25:42:
c0:0a:70:77:4a:7b:16:eb:36:27:30:03:88:11:22:35:0d:7b:
c3:e8:92:34:c9:27:fd:2d:f1:e7:d9:f3:90:8f:6b:85:51:3b:
e5:54:d2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:04:54 2026 by rpki-client