
$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/9D834ED4E48F11F086089575466F56BC.roa
File: 9D834ED4E48F11F086089575466F56BC.roa (raw, json)
Hash identifier: cawn4yhO8WZa1I2Ob/aWE7RXAnVQqAZfiCinpK+xtsM=
Subject key identifier: 39:11:6E:C2:E6:A7:E9:7A:85:5A:71:1A:6C:D8:00:93:33:BE:A7:FA
Certificate issuer: /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial: 0650
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/9D834ED4E48F11F086089575466F56BC.roa
Signing time: Sun 01 Mar 2026 17:29:53 +0000
ROA not before: Mon 29 Dec 2025 08:23:12 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 25846
IP address blocks: 103.172.134.0/24 maxlen: 24
103.172.135.0/24 maxlen: 24
2407:d340::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 22:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1616 (0x650)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917419E, serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Validity
Not Before: Dec 29 08:23:12 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a47791-7af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:9b:9a:7e:28:8f:dc:e6:ce:6f:a9:b5:16:
00:00:d7:e4:ff:db:6d:30:a7:fe:2d:4a:ce:a8:3e:
41:ba:9f:10:cc:38:18:61:83:44:74:c1:26:a6:f8:
68:69:8d:cc:19:e9:47:8b:dd:80:cd:6d:5d:c0:8f:
ef:53:c1:58:ec:fe:e0:c1:01:79:c8:35:b8:c6:3f:
26:e0:7a:97:9a:e8:73:49:ae:20:0e:6d:b1:66:84:
f5:b0:cc:37:86:28:7e:0c:15:65:a2:23:8b:8f:70:
38:8c:c8:36:4b:66:0e:5e:4f:d8:e0:54:3b:9c:e1:
bd:41:0f:20:2b:87:e9:a6:eb:18:88:ba:59:9e:58:
0a:67:b0:b3:f0:f4:c8:3f:8a:76:00:94:9d:b5:f1:
bd:66:57:cf:1c:b1:fb:e3:10:a1:de:08:d8:33:5e:
5b:12:9c:d4:a5:ca:e9:cd:c2:f3:44:90:7e:dd:f1:
a5:5c:eb:c0:9f:cd:f8:a8:6e:db:75:a1:17:35:3d:
24:4f:67:9a:e0:f0:fe:a1:09:c8:cb:fb:d9:bd:63:
d4:ce:87:2f:ef:78:01:94:62:ae:17:38:d3:5b:c9:
d6:fb:54:41:fa:9f:34:a5:2f:f1:79:73:f5:16:7e:
de:bf:45:f9:aa:9b:01:30:2f:6c:be:2b:95:9e:db:
60:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:11:6E:C2:E6:A7:E9:7A:85:5A:71:1A:6C:D8:00:93:33:BE:A7:FA
X509v3 Authority Key Identifier:
keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/9D834ED4E48F11F086089575466F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.172.134.0/23
IPv6:
2407:d340::/32
Signature Algorithm: sha256WithRSAEncryption
9c:a5:82:ea:2c:8c:26:71:be:31:d6:b8:32:25:d6:ff:22:33:
6f:70:84:c8:61:a0:65:b8:94:66:9d:ac:90:78:dd:03:c1:c8:
37:35:0d:fe:21:f6:b2:96:b2:5c:ae:23:29:0f:49:d0:28:c2:
39:0d:6e:1c:3d:34:32:f4:3f:de:d7:79:8f:77:95:e3:2c:f7:
e0:69:fd:41:04:a5:3d:9e:7a:60:7f:56:6b:e6:e2:5f:05:0f:
b1:a9:f4:f5:5e:b5:a3:5a:c0:96:51:1d:71:c4:69:93:c1:93:
be:66:4a:43:94:a9:dd:86:b1:b1:e9:32:31:df:61:a7:ee:13:
2c:ab:db:ca:42:23:52:cc:f9:ab:20:51:06:0f:e5:7d:1e:ad:
e1:a2:c6:4e:f5:27:0a:65:7e:08:dd:b1:73:fd:33:ed:6d:0c:
9a:b2:a6:8f:43:48:71:b9:1b:11:a1:5c:c8:97:ed:86:02:87:
72:e0:81:d2:e3:7e:26:8c:10:11:b9:4c:cd:55:8a:5c:b9:4e:
6a:51:17:d9:b0:60:dd:21:dc:68:41:89:d2:80:19:9d:4f:69:
20:5d:8a:28:2c:f4:a1:53:b5:44:50:a2:2b:76:f1:91:37:40:
b9:47:95:1b:39:62:b9:fc:6f:93:9a:7d:ee:0e:bc:14:31:8d:
6b:76:ec:13
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICBlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQxOUUxMTAvBgNVBAUTKDE0NDU0ODlGREQ1MEFBNDRBQzFEMkEzQzNBMTY2RTA2
QzY2MkFGRDUwHhcNMjUxMjI5MDgyMzEyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0Nzc5MS03YWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnqObmn4oj9zmzm+ptRYAANfk/9ttMKf+LUrOqD5Bup8QzDgYYYNEdMEmpvho
aY3MGelHi92AzW1dwI/vU8FY7P7gwQF5yDW4xj8m4HqXmuhzSa4gDm2xZoT1sMw3
hih+DBVloiOLj3A4jMg2S2YOXk/Y4FQ7nOG9QQ8gK4fppusYiLpZnlgKZ7Cz8PTI
P4p2AJSdtfG9ZlfPHLH74xCh3gjYM15bEpzUpcrpzcLzRJB+3fGlXOvAn834qG7b
daEXNT0kT2ea4PD+oQnIy/vZvWPUzocv73gBlGKuFzjTW8nW+1RB+p80pS/xeXP1
Fn7ev0X5qpsBMC9sviuVnttgCQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFDkRbsLm
p+l6hVpxGmzYAJMzvqf6MB8GA1UdIwQYMBaAFBRFSJ/dUKpErB0qPDoWbgbGYq/V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDE5RS85ODFFRTk4NjBC
MjExMUVDODQyMTQ5NERDNEY5QUUwMi9GRVZJbjkxUXFrU3NIU284T2hadUJzWmly
OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZFVkluOTFRcWtTc0hTbzhPaFp1QnNaaXI5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzQxOUUvOTgxRUU5ODYwQjIxMTFFQzg0MjE0OTREQzRGOUFFMDIvOUQ4MzRFRDRF
NDhGMTFGMDg2MDg5NTc1NDY2RjU2QkMucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ6yGMA0EAgACMAcDBQAkB9NAMA0GCSqGSIb3DQEBCwUAA4IBAQCc
pYLqLIwmcb4x1rgyJdb/IjNvcITIYaBluJRmnayQeN0Dwcg3NQ3+IfaylrJcriMp
D0nQKMI5DW4cPTQy9D/e13mPd5XjLPfgaf1BBKU9nnpgf1Zr5uJfBQ+xqfT1XrWj
WsCWUR1xxGmTwZO+ZkpDlKndhrGx6TIx32Gn7hMsq9vKQiNSzPmrIFEGD+V9Hq3h
osZO9ScKZX4I3bFz/TPtbQyasqaPQ0hxuRsRoVzIl+2GAody4IHS434mjBARuUzN
VYpcuU5qURfZsGDdIdxoQYnSgBmdT2kgXYooLPShU7VEUKIrdvGRN0C5R5UbOWK5
/G+Tmn3uDrwUMY1rduwT
-----END CERTIFICATE-----
Generated at Wed Mar 11 18:44:06 2026 by rpki-client