
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/7D16D03C861A11EF99D32B66C4F9AE02.roa
File: 7D16D03C861A11EF99D32B66C4F9AE02.roa (raw, json)
Hash identifier: KI0wtfrpzzeldL0TKgebNaTut7M4MCF1WK3HZwTSHVM=
Subject key identifier: F0:F3:08:24:9B:C2:9F:21:F7:A5:4E:84:85:DC:29:03:35:37:24:82
Certificate issuer: /CN=A9173F03/serialNumber=C99D6007CD477D89B359C33C93CAA9B5BB10601A
Certificate serial: 0CD0
Authority key identifier: C9:9D:60:07:CD:47:7D:89:B3:59:C3:3C:93:CA:A9:B5:BB:10:60:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/7D16D03C861A11EF99D32B66C4F9AE02.roa
Signing time: Sat 28 Mar 2026 19:25:14 +0000
ROA not before: Sat 28 Mar 2026 19:25:14 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 138004
IP address blocks: 103.135.234.0/24 maxlen: 24
103.135.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.crl
rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3280 (0xcd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173F03, serialNumber=C99D6007CD477D89B359C33C93CAA9B5BB10601A
Validity
Not Before: Mar 28 19:25:14 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c82b1a-c34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:19:f9:e0:49:70:e1:ec:c5:a2:be:e6:3b:
72:ab:50:b6:3c:89:c1:01:23:10:a2:03:e8:bc:00:
16:48:0c:32:0f:3a:76:63:34:42:f8:7f:28:bd:e8:
88:f0:25:b9:0b:05:92:8d:dc:4a:ce:54:80:d9:98:
eb:da:d9:bb:ec:fc:7f:fd:7e:04:e5:b0:97:8e:87:
44:df:ea:7d:8e:cd:bf:7d:7a:54:d0:bb:d0:a6:57:
0e:6d:3c:95:df:53:75:cc:35:4e:75:e2:e4:d6:f9:
ac:ce:c9:4b:b9:7e:d2:59:d7:db:8a:d8:66:bb:18:
cf:53:b0:80:b9:82:63:57:c7:a6:3c:07:be:60:a0:
95:6c:a8:1d:ae:c5:c8:07:0c:85:96:7d:0c:65:32:
b4:ad:c6:0d:c0:3a:de:3a:bd:4e:0e:b3:27:dd:50:
69:ce:1d:dd:b0:9d:2c:2a:06:ec:6d:6f:43:10:b9:
ac:c6:42:39:16:0a:11:f6:3d:41:6c:ab:26:26:2b:
b2:73:92:af:e3:bb:e0:f5:53:b2:ea:98:77:be:ee:
8b:81:b1:0b:bd:8d:50:ee:35:bc:39:aa:83:da:dd:
b8:96:86:59:80:df:86:f5:c1:ad:6a:f4:ab:a9:c9:
90:11:d3:e9:0f:79:80:97:fd:71:1e:e6:5a:af:2d:
9c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F3:08:24:9B:C2:9F:21:F7:A5:4E:84:85:DC:29:03:35:37:24:82
X509v3 Authority Key Identifier:
keyid:C9:9D:60:07:CD:47:7D:89:B3:59:C3:3C:93:CA:A9:B5:BB:10:60:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/7D16D03C861A11EF99D32B66C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.135.234.0/23
Signature Algorithm: sha256WithRSAEncryption
96:32:c7:03:4f:b1:4e:13:aa:b0:db:9e:0b:08:34:a5:d9:93:
50:a5:29:b0:f1:42:67:c4:e4:cb:6e:83:13:2a:50:e2:64:6f:
88:17:8f:c2:97:7c:5a:91:96:8c:25:10:5a:e4:24:7d:77:ae:
fc:34:92:ce:c2:4e:ee:16:82:b3:3a:08:70:e4:aa:3b:6e:01:
5e:1f:c1:65:c4:2b:09:f3:82:33:c6:6d:a9:91:c9:3e:43:b6:
3f:e3:fb:8f:10:d9:f0:ad:09:ed:de:00:09:f8:35:90:e0:c6:
de:24:3f:0b:e1:22:6a:af:b7:e2:00:3f:46:2a:f4:80:94:ff:
ea:34:a9:0c:b7:76:b2:c6:5c:90:54:67:fc:1e:4c:b6:0d:c7:
50:e3:b8:40:f2:d4:f1:ba:c8:14:6d:aa:9c:80:29:38:d1:e7:
f1:04:75:71:76:01:d1:f0:b8:4f:19:d1:39:35:e2:d0:aa:4c:
1b:f3:5b:db:3f:d4:9a:2d:f2:0e:fc:14:49:1c:3f:1b:a7:99:
d3:34:6f:19:a0:d3:07:50:5f:97:99:2d:ed:9d:13:31:65:5e:
11:5a:34:e1:04:70:1e:1b:65:72:71:e7:a7:af:e0:f8:b7:bf:
df:43:05:cc:ac:ef:97:e2:a5:ce:1f:f7:11:ba:cf:8f:d8:26:
14:ad:df:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:34:40 2026 by rpki-client