
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/82001182986511EFBFE02134C4F9AE02.roa
File: 82001182986511EFBFE02134C4F9AE02.roa (raw, json)
Hash identifier: 4xed0sK4baVvOh15UIAaSnd/q9/IOI6CF4yRtHq7S8c=
Subject key identifier: 3B:90:44:84:12:51:C1:31:3F:39:83:2C:95:53:36:6F:A5:F3:90:72
Certificate issuer: /CN=A9172EF8/serialNumber=E8DDECEC16FE3485D5B61A65A61EECD75A981B43
Certificate serial: 0916
Authority key identifier: E8:DD:EC:EC:16:FE:34:85:D5:B6:1A:65:A6:1E:EC:D7:5A:98:1B:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/82001182986511EFBFE02134C4F9AE02.roa
Signing time: Fri 02 Oct 2026 20:41:30 +0000
ROA not before: Fri 02 Oct 2026 20:41:30 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 131464
IP address blocks: 103.154.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.crl
rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 20:20:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2326 (0x916)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172EF8, serialNumber=E8DDECEC16FE3485D5B61A65A61EECD75A981B43
Validity
Not Before: Oct 2 20:41:30 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac016fa-eae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:87:de:85:94:47:e7:b7:39:f0:69:d6:36:1f:
bf:d3:67:5d:2b:f2:92:b3:51:fc:c0:f2:21:69:66:
8c:fc:58:4e:cb:e5:3b:52:6e:66:07:b1:43:79:7d:
de:e1:52:65:db:d2:66:38:c3:d4:5a:78:48:b0:61:
9e:d8:fa:a9:05:17:3f:1a:42:be:1d:2f:13:67:ce:
b8:f4:80:36:b3:fe:ce:b8:00:fe:44:c4:f3:c6:64:
af:88:9a:a7:7b:4c:f9:8f:e8:f2:3e:92:f6:3c:dc:
02:2a:1e:16:14:f1:49:6e:30:c4:4f:55:1e:af:b3:
dd:71:cd:4f:66:2d:73:24:c9:98:d9:5a:d5:cb:56:
03:fb:7c:29:67:13:1d:51:6d:04:22:c6:df:ba:af:
5a:0b:88:00:8f:eb:4d:17:1e:69:5f:e4:72:55:93:
88:58:68:78:74:a2:ec:5b:76:46:55:2a:e4:11:47:
3d:86:d2:8f:88:d9:31:d1:e5:5d:8c:be:28:ae:ae:
fd:7a:74:71:32:38:5e:b8:14:0e:2d:05:f1:1d:74:
e1:01:74:56:fe:8c:42:b4:8d:b6:75:1d:d4:8a:11:
ba:8c:ed:33:23:b9:af:e3:59:f5:ab:b5:c1:67:72:
21:89:8a:aa:ba:38:14:c6:53:ed:35:bc:31:06:88:
12:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:90:44:84:12:51:C1:31:3F:39:83:2C:95:53:36:6F:A5:F3:90:72
X509v3 Authority Key Identifier:
keyid:E8:DD:EC:EC:16:FE:34:85:D5:B6:1A:65:A6:1E:EC:D7:5A:98:1B:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/82001182986511EFBFE02134C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.154.159.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:c1:93:6f:28:1e:a2:a0:93:39:96:24:a5:28:bc:b9:f1:99:
c2:af:97:8e:4b:a6:9c:05:5b:49:28:a5:79:16:46:5c:1c:cd:
d0:4d:93:dd:1e:56:d5:2e:7f:38:4a:87:fe:e9:91:35:3f:37:
15:2f:bc:96:58:d8:df:b2:ef:fd:86:0b:f9:b0:e6:88:a1:d4:
26:8c:a3:d0:ec:2b:5e:a9:6c:60:7c:ed:fa:6c:e3:42:6b:e0:
3a:d1:45:6f:f8:ce:98:63:e6:d6:ab:5c:29:c6:4d:e6:2b:f4:
00:70:24:eb:9d:24:55:e3:01:3a:61:6b:3e:10:f1:e4:e7:05:
ad:3b:3d:f4:3c:ad:e4:6a:60:c4:46:97:c1:34:b2:db:16:9e:
8b:c6:11:66:2c:5f:39:d1:4c:76:34:ba:1a:ef:b3:83:d6:12:
ea:f8:3e:80:4f:1a:48:4e:7d:a8:cc:9b:5b:aa:cb:61:5c:e5:
63:bc:f1:86:72:fa:a5:0a:1f:bc:b5:89:d8:ad:a4:f0:cf:85:
9f:68:cb:d0:c6:e9:b5:3b:ae:db:83:cf:5d:27:3d:2c:c4:b0:
51:de:2d:92:36:cb:89:dd:ef:50:e3:0f:e6:b2:91:ba:35:dd:
12:72:a4:42:c4:a4:ae:fc:04:de:3a:57:b9:c7:5e:dd:a8:76:
21:b5:cb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 17:44:51 2026 by rpki-client