
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/7BFE665EE17F11EF9536DC48C4F9AE02.roa
File: 7BFE665EE17F11EF9536DC48C4F9AE02.roa (raw, json)
Hash identifier: PEc8Q36ZmFJmCyC4ydlSensDrscyZNlNt/tGuMlxL2g=
Subject key identifier: CB:DD:9D:C5:9C:DC:37:0C:2C:4F:D5:D2:CC:25:CF:73:4D:95:73:F0
Certificate issuer: /CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
Certificate serial: 025A
Authority key identifier: B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/7BFE665EE17F11EF9536DC48C4F9AE02.roa
Signing time: Sat 29 Aug 2026 02:53:00 +0000
ROA not before: Sat 29 Aug 2026 02:53:00 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 149765
IP address blocks: 103.238.216.0/24 maxlen: 24
103.238.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl
rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 02:22:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 602 (0x25a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176DFC, serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
Validity
Not Before: Aug 29 02:53:00 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a92498c-90de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fd:e0:8e:33:4f:a7:99:27:96:88:00:5a:28:
37:f9:85:3d:70:1f:d2:c1:ca:73:4b:20:d3:e7:a7:
2d:07:e4:4a:d6:be:03:02:25:1e:71:09:9e:77:37:
ba:66:4d:68:c7:72:0a:49:ed:d7:28:c2:b9:e2:37:
21:94:30:5e:47:b1:28:7f:63:5e:46:a1:f3:f3:01:
6d:60:b3:86:50:ea:7d:f1:98:a6:24:69:d3:4f:96:
59:aa:a6:ab:e6:bc:93:a2:d3:27:e0:c2:c6:13:4a:
7f:c8:36:d1:21:fe:10:59:7b:12:7c:9b:c6:81:7c:
4e:05:38:3c:d0:36:18:cf:be:86:fe:54:72:27:ab:
50:0f:c3:4a:96:4c:80:16:9e:e4:98:9b:8a:0e:71:
68:55:70:51:e6:6e:07:f5:d4:27:59:cb:eb:83:9a:
ce:04:e0:f0:fe:e8:b0:2b:5d:9b:f7:4b:ef:ea:ee:
97:ea:6a:5d:32:88:e2:10:24:9b:a0:05:36:93:6a:
70:f9:f0:fc:1c:68:0a:97:4e:a4:aa:83:4f:37:42:
1a:58:37:fe:86:0c:00:ce:d2:ab:d8:14:35:fd:e8:
b2:ee:1a:2e:84:d4:ff:93:d8:c9:36:49:a8:69:85:
5d:5b:39:de:f5:b6:50:17:98:3d:13:dc:d0:35:33:
df:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DD:9D:C5:9C:DC:37:0C:2C:4F:D5:D2:CC:25:CF:73:4D:95:73:F0
X509v3 Authority Key Identifier:
keyid:B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/7BFE665EE17F11EF9536DC48C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.238.216.0/23
Signature Algorithm: sha256WithRSAEncryption
55:45:ac:64:96:9d:12:7a:14:58:71:48:37:ce:1e:13:3f:97:
ca:76:5b:16:06:7a:08:cf:4e:2f:72:f8:4e:ec:89:ea:22:14:
3b:15:75:3c:1f:3d:b0:bf:c6:3d:49:ce:6d:81:05:2e:1e:78:
8c:8e:85:0c:41:16:c3:af:bd:69:d8:95:38:56:49:5f:42:8e:
f4:eb:39:a0:e5:1a:99:c6:b4:5e:49:6e:e6:c5:c3:cb:92:19:
07:9f:a4:0c:cd:da:4d:ca:0e:6c:a0:a1:2e:79:91:b3:9a:6c:
65:d3:dd:f4:11:ca:a9:27:09:86:17:0a:c1:26:88:26:8f:93:
38:0f:5b:94:a4:78:c7:f6:7d:78:54:54:e1:44:84:cc:b3:92:
6b:95:8e:b4:ec:fd:5a:5b:e0:fe:47:5d:d9:4e:29:07:c4:9b:
b3:37:0f:77:da:42:4b:ef:33:4b:12:e8:e3:76:49:9d:51:3a:
ae:5c:a4:1e:5d:87:76:57:2e:2e:71:33:60:45:6c:b0:01:8e:
f7:d0:fd:b5:c7:51:5f:7d:e5:5c:67:f4:33:81:d7:ef:7b:38:
77:d9:74:b3:57:6b:30:e6:cb:54:84:c6:e1:77:86:31:9b:9b:
3c:12:cb:73:5a:73:28:9f:23:b0:dc:3b:e9:8b:03:c2:9f:09:
3c:f0:ba:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:37:51 2026 by rpki-client