
$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/F8769F9AA4B111EF8F61B261C4F9AE02.roa
File: F8769F9AA4B111EF8F61B261C4F9AE02.roa (raw, json)
Hash identifier: WWoSAUMqi1pfNdPU0PAFZbhg/xN3/ydn2IO/3Y3q7Xo=
Subject key identifier: FE:1D:84:41:2F:09:04:62:63:A4:09:02:B7:24:48:88:7C:3D:40:F7
Certificate issuer: /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial: 064D
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/F8769F9AA4B111EF8F61B261C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:29:50 +0000
ROA not before: Sun 28 Sep 2025 23:57:02 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 396073
IP address blocks: 103.172.134.0/24 maxlen: 24
103.172.135.0/24 maxlen: 24
2407:d340::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Mar 2026 22:46:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1613 (0x64d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917419E, serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Validity
Not Before: Sep 28 23:57:02 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4778e-406c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8f:bb:ad:3f:70:19:99:4a:d0:6f:36:75:eb:
99:06:d7:27:ed:05:85:2a:4f:18:3a:17:9c:0b:49:
ee:58:6a:4b:d4:ce:db:41:20:12:88:da:b2:fd:d7:
21:22:b0:aa:b2:e0:3e:a3:f5:08:30:c0:7e:18:e4:
a7:96:4c:f6:43:2a:af:49:72:b0:23:f4:76:3c:44:
49:5d:9a:96:5a:0f:20:32:34:56:ed:a1:01:c4:75:
1b:66:b3:c8:47:3d:c9:cc:dd:7d:c0:1a:33:ae:9d:
7c:00:c3:ad:6c:1b:0f:60:15:7b:82:0e:63:9d:ea:
bd:fa:e5:74:a9:c6:10:61:5e:37:a7:64:35:93:ad:
18:e7:16:22:3f:a6:87:07:7b:d7:de:1f:f2:93:e1:
7d:57:0d:58:7a:f2:40:f6:cd:08:98:ef:97:08:ff:
52:20:f6:bb:ce:a6:c8:4e:ee:10:7b:4c:be:c4:ac:
06:67:10:f8:ab:fd:86:d8:97:0c:42:48:31:82:45:
fe:36:74:d0:de:c4:6f:3c:b1:87:b1:cb:2d:7f:e4:
99:99:94:54:43:56:7d:42:35:5d:3a:16:cc:66:92:
b4:a8:65:db:50:d7:3d:74:4f:25:93:38:79:cd:19:
6d:41:4f:6c:48:8e:14:43:3b:b4:16:85:cb:d6:e1:
b7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1D:84:41:2F:09:04:62:63:A4:09:02:B7:24:48:88:7C:3D:40:F7
X509v3 Authority Key Identifier:
keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/F8769F9AA4B111EF8F61B261C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.172.134.0/23
IPv6:
2407:d340::/32
Signature Algorithm: sha256WithRSAEncryption
a7:ed:6f:6a:ac:33:37:92:f3:1c:06:89:dc:af:3d:6a:53:aa:
08:e1:6f:68:03:04:72:16:d2:4c:17:94:08:b8:98:fb:8b:eb:
5c:f1:ad:fd:68:4a:2e:6f:b0:19:e8:80:27:c3:57:f4:be:7e:
7b:b1:4d:e2:cc:29:23:91:54:dd:6d:9f:99:4a:ce:cf:cc:87:
51:0b:00:41:79:4c:12:5d:f7:0b:8f:cc:42:07:6c:91:52:7e:
20:e5:8b:e7:15:7f:53:06:49:a9:7c:c0:91:b5:0e:a2:75:05:
f9:f1:7e:8d:37:5b:d9:fe:42:cb:d4:64:a7:bc:cf:75:25:34:
c3:91:73:63:fb:fe:5b:36:a3:61:cb:13:5c:81:a1:80:fe:d6:
37:cb:2a:fc:fb:04:63:88:26:76:67:04:0a:2c:3c:0f:d5:12:
6d:c4:09:90:de:08:c8:8c:e7:c8:96:6c:33:52:99:c2:fa:d6:
0e:b3:84:a1:d7:9b:c3:5a:7d:ba:0c:59:43:83:00:52:82:15:
d7:06:da:51:62:72:00:a8:70:86:b4:d0:ea:07:7f:a7:7a:25:
1a:5a:fa:a9:0f:5c:04:8f:81:95:de:ab:e0:be:c6:f5:de:a0:
f9:da:67:51:d3:8b:47:c2:17:75:da:d6:f0:14:c1:5c:ed:72:
b3:23:49:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 03:46:32 2026 by rpki-client