
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/AD25E68EBCE911F188D206D73B11F970.roa
File: AD25E68EBCE911F188D206D73B11F970.roa (raw, json)
Hash identifier: diltmmmWHW+C37knALH+XbUCojZpVW6vPiqZlJaUGgI=
Subject key identifier: 73:36:76:3D:49:86:F3:C3:04:CD:2C:FF:3D:51:90:98:C7:D7:D3:FC
Certificate issuer: /CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
Certificate serial: 0312
Authority key identifier: 3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/AD25E68EBCE911F188D206D73B11F970.roa
Signing time: Wed 30 Sep 2026 16:12:05 +0000
ROA not before: Wed 30 Sep 2026 16:12:05 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 150740
IP address blocks: 103.20.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl
rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 01:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 786 (0x312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176909, serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
Validity
Not Before: Sep 30 16:12:05 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6abd34d4-c38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:8c:93:2c:1f:62:49:39:fa:e8:c7:18:35:
c7:39:ab:40:8a:ed:a1:a6:1d:b2:67:89:e8:83:49:
50:69:ed:4c:05:7b:dc:3e:43:28:8f:50:29:7c:ac:
f9:86:70:e9:47:ee:0f:16:db:f0:e2:e9:8f:97:f4:
06:61:50:50:4a:73:88:03:38:dd:98:e8:f5:2d:cd:
90:fc:d2:11:8b:55:fa:42:29:e7:a6:cf:a8:14:fc:
af:66:af:85:53:b1:cd:34:35:d2:6a:6d:98:ba:9a:
08:97:95:23:7f:81:9c:bd:f6:fa:18:2b:f8:9f:0b:
46:73:f9:f6:5f:92:d6:d4:ab:33:2c:6b:e1:36:7c:
79:98:41:9b:3e:6a:50:06:d5:4e:3b:81:6d:9c:38:
7d:63:b6:b3:a2:f3:ce:ea:48:a0:36:9c:aa:42:f6:
d8:80:d2:5f:e1:a4:ce:16:bf:33:89:5a:67:47:8c:
55:1e:d1:e3:17:40:37:71:de:e0:b3:06:ee:e1:4a:
87:0c:c1:68:30:0e:0c:c0:62:b7:13:47:9a:a3:5c:
57:0d:7e:4d:3f:ea:1c:05:8e:51:87:f7:04:12:04:
40:01:70:94:af:0a:c0:72:01:c1:39:cc:5e:d1:0d:
d3:06:cb:ce:29:5a:c7:f1:e8:3e:8e:fb:89:ab:0f:
12:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:36:76:3D:49:86:F3:C3:04:CD:2C:FF:3D:51:90:98:C7:D7:D3:FC
X509v3 Authority Key Identifier:
keyid:3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/AD25E68EBCE911F188D206D73B11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.20.242.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:23:39:b7:34:cf:85:2d:a8:a4:b2:42:cf:cb:65:15:24:c3:
94:91:bc:97:47:35:db:26:56:23:e9:b7:f5:42:9a:5c:81:4a:
65:17:27:da:e5:16:18:a9:cd:df:d1:57:0e:30:48:25:41:84:
60:df:06:55:10:47:0d:79:1a:e4:9d:45:e5:d5:01:53:32:f2:
b0:5d:c8:20:8d:ed:48:b3:2c:9a:a8:98:09:8b:50:3d:e7:c8:
92:53:ca:7a:80:cb:ba:20:f9:94:bc:13:fa:44:e2:4e:d2:95:
ae:ee:cf:41:69:d8:a4:57:d9:04:23:1d:81:59:da:52:4e:83:
a2:88:b6:04:95:51:fd:73:4e:ec:ee:ad:bb:76:ca:cd:4c:29:
98:50:23:d4:f1:c6:ba:47:3a:55:28:fe:b8:e4:07:c8:b7:f6:
1e:26:0e:be:e6:c7:ae:20:c8:33:63:b8:be:74:f2:ec:a6:04:
24:4e:0b:86:26:66:34:7a:48:60:71:03:89:5a:7f:3e:bd:33:
ec:a1:fa:7b:59:75:4f:a8:8d:c5:29:b2:6d:f1:af:8e:79:3c:
90:fc:3a:e8:a9:dc:97:88:c8:db:5b:3f:d1:d8:7e:02:0c:d8:
b1:7f:d4:27:13:37:0d:53:65:54:d0:d7:fa:4c:f7:e4:bf:0a:
e0:7b:83:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:02:24 2026 by rpki-client