
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/D9D6FFE098E311F08722B635C4F9AE02.roa
File: D9D6FFE098E311F08722B635C4F9AE02.roa (raw, json)
Hash identifier: 5sks7401iF6XRicrl8vnu/qqHYhqGytZkOAF+7ZwKW0=
Subject key identifier: B3:96:44:AD:4E:54:D2:CD:7A:8D:BE:C9:A9:7B:73:C6:20:06:91:AB
Certificate issuer: /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial: 078E
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/D9D6FFE098E311F08722B635C4F9AE02.roa
Signing time: Sat 04 Jul 2026 22:23:23 +0000
ROA not before: Sat 04 Jul 2026 22:23:23 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 133510
IP address blocks: 103.105.139.0/24 maxlen: 24
203.8.10.0/24 maxlen: 24
203.31.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 22:18:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1934 (0x78e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Validity
Not Before: Jul 4 22:23:23 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a4987db-24d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:04:ce:ac:7a:f7:64:80:ec:84:4b:9c:21:dc:
d1:22:1f:52:2d:30:55:c3:24:87:90:ae:c4:d4:cd:
ab:08:58:32:3c:d1:98:b6:d1:59:5a:65:bb:f2:31:
a1:a3:bd:a4:d6:98:a8:bd:30:5c:8b:6c:22:8f:78:
d1:41:05:de:a2:61:00:c8:78:ad:5c:58:54:3b:e8:
3c:b9:7a:5a:89:e5:c4:21:7b:5e:57:f6:d7:8d:52:
d8:08:c4:0a:04:17:fa:25:3a:90:e2:a3:7e:7a:93:
4d:27:98:48:82:7d:00:24:62:28:28:2f:a6:a5:52:
51:a7:77:06:21:46:32:4e:8d:dd:06:be:3b:18:90:
3a:8c:b0:ee:3f:9e:fe:e2:2a:5d:3c:67:44:a4:9e:
ea:72:0c:22:2d:9f:96:74:42:40:de:c8:f3:f1:49:
ab:5f:ec:d4:77:95:66:70:56:48:6c:53:38:34:b5:
ac:0c:d6:e7:cb:75:67:4b:1f:f0:ad:24:69:b5:77:
96:36:a3:49:71:ff:c0:bb:18:64:bf:13:70:00:27:
a8:5f:b5:55:ce:eb:5a:02:f2:63:fa:91:eb:04:b4:
d7:d9:20:f2:0e:bc:44:10:ba:de:e3:0b:39:51:65:
e2:a2:51:a8:44:4a:37:d0:6b:da:a6:df:3b:9c:18:
5a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:96:44:AD:4E:54:D2:CD:7A:8D:BE:C9:A9:7B:73:C6:20:06:91:AB
X509v3 Authority Key Identifier:
keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/D9D6FFE098E311F08722B635C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.105.139.0/24
203.8.10.0/24
203.31.118.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:70:65:80:f8:1b:69:5f:cb:4d:25:e3:f6:df:6a:6e:f4:56:
71:76:92:73:ef:a8:b1:bc:87:20:0e:f3:16:b2:37:ff:98:bf:
ca:57:ca:63:c6:f0:c9:5c:4b:78:58:37:8a:5d:91:19:e6:73:
da:ca:64:35:d6:91:f8:dc:be:bc:fa:08:0a:4c:c1:e0:70:5f:
63:f3:a2:cc:c9:ee:03:03:9d:69:c9:ec:47:41:c5:60:16:c2:
12:4f:38:0b:03:ed:c7:45:c6:a1:2e:9b:16:c7:49:cc:45:dc:
23:73:64:97:85:68:a0:58:71:cc:6f:38:28:74:b1:6c:2e:f2:
ed:90:1f:c9:e9:9a:95:43:88:53:68:b4:c9:76:97:d1:81:71:
4c:f7:13:10:27:61:48:4e:70:1e:66:fa:22:a7:2d:e3:75:cb:
1e:c3:02:a4:dd:53:8f:e3:d0:fa:e6:1f:22:2f:a8:79:31:fc:
eb:8d:0d:39:3c:a7:0e:c1:32:5c:83:5f:7c:70:60:16:77:1a:
ad:1b:e5:9e:00:91:da:b8:d4:4f:88:95:76:88:b9:03:97:e1:
15:5a:e0:5c:4b:4c:66:83:f5:f3:d5:51:06:98:06:09:b6:1c:
88:c5:2a:18:4d:ed:35:f0:fd:4b:b0:ac:33:cc:88:e9:78:23:
bd:c4:a0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 15:49:40 2026 by rpki-client