
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/C68D1AE69B9611EFB95B8038C4F9AE02.roa
File: C68D1AE69B9611EFB95B8038C4F9AE02.roa (raw, json)
Hash identifier: RaDvqbQpfLLb/dtrakTSbpiJKcS+OXOV5EoJAMjCew4=
Subject key identifier: DF:A6:95:BB:CF:62:E4:43:41:91:05:02:E3:DB:9A:3F:D8:D7:79:BD
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: 048A
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/C68D1AE69B9611EFB95B8038C4F9AE02.roa
Signing time: Mon 25 May 2026 01:35:01 +0000
ROA not before: Mon 25 May 2026 01:35:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395793
IP address blocks: 103.229.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 01:26:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1162 (0x48a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Validity
Not Before: May 25 01:35:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a13a745-eefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:74:3e:7e:e4:be:7b:5d:24:7c:ee:fd:0f:
76:cf:08:b0:2c:b5:92:1d:6c:8c:96:02:27:7f:a2:
1d:04:fd:29:21:f1:24:78:18:3a:6a:eb:93:a8:7a:
55:d9:6b:12:93:6b:cc:f3:24:4e:f4:d0:41:2f:9c:
6f:80:da:20:fe:6f:b9:67:a1:32:ed:e3:d5:5d:df:
7b:47:6d:3a:50:fc:62:a1:3b:ff:95:17:4b:fe:4d:
af:63:35:03:7b:61:34:22:15:62:59:7d:3e:92:3d:
6a:91:13:c4:ac:71:18:56:d6:a1:24:8d:fc:01:99:
57:11:98:5f:b5:00:8f:eb:36:c1:0c:f3:2f:88:28:
34:2c:91:41:7a:59:11:63:e7:3a:31:f7:06:b4:a5:
16:62:22:ca:d4:39:ec:8f:d7:b5:6a:64:72:97:4e:
fe:6a:b3:ff:8e:b0:a8:39:9c:e8:23:ea:d6:2a:fe:
4e:a6:30:31:98:d6:c1:db:86:56:4c:df:74:c3:b3:
af:10:8d:e5:4e:32:07:84:a1:9a:dc:e6:61:f1:1a:
31:50:77:66:98:4b:99:fe:55:85:0a:6d:88:34:aa:
12:3d:25:06:3d:e1:06:4b:a2:ff:6a:b8:ab:e6:c5:
38:f2:ee:25:3e:9e:71:f8:d2:9a:a2:c5:d9:61:ef:
00:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A6:95:BB:CF:62:E4:43:41:91:05:02:E3:DB:9A:3F:D8:D7:79:BD
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/C68D1AE69B9611EFB95B8038C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.229.118.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:60:8a:a7:0c:ba:f2:6c:b0:91:1f:44:33:46:24:53:9c:e2:
b0:34:35:0b:6d:3d:30:92:2a:fa:cd:8a:2a:d0:ae:37:2a:15:
2b:e3:4c:de:a4:60:3e:62:55:78:87:61:b7:7e:a8:91:8c:12:
19:9f:6c:b8:ab:1d:10:42:5a:4a:fd:f2:0e:0e:86:5e:08:81:
e4:cb:58:05:4c:13:aa:d9:5d:9a:bb:2b:6e:50:f5:6c:b4:e7:
b1:6b:c4:d4:09:0d:38:e3:1a:ee:41:75:f2:e7:fe:0d:19:c5:
d7:f2:c0:16:50:77:aa:34:57:d7:5e:e7:e6:44:12:89:47:4a:
2e:0b:59:f3:4b:4a:b3:5e:3e:d3:33:d6:0b:8a:c0:82:64:b2:
54:f6:f3:9d:85:ba:58:d2:42:44:4e:3d:0c:aa:7d:ed:e6:a7:
54:40:72:96:52:e8:0a:76:bf:53:5f:cd:d7:6c:f6:a8:09:d7:
80:10:52:bd:44:5a:e3:31:98:03:5d:b4:17:05:40:68:64:f0:
45:81:21:a1:75:4b:a4:3f:5e:76:f2:28:1f:da:88:f4:09:73:
ba:97:b0:ec:38:ba:6e:33:7a:2d:ff:5d:30:c3:b0:6e:6c:e5:
b0:31:46:0d:cc:c2:fa:63:74:a0:f6:bf:c9:c2:c7:cc:df:c7:
61:41:b0:cd
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4
RjEzRTQxNzIwHhcNMjYwNTI1MDEzNTAxWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTEzYTc0NS1lZWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArh50Pn7kvntdJHzu/Q92zwiwLLWSHWyMlgInf6IdBP0pIfEkeBg6auuTqHpV
2WsSk2vM8yRO9NBBL5xvgNog/m+5Z6Ey7ePVXd97R206UPxioTv/lRdL/k2vYzUD
e2E0IhViWX0+kj1qkRPErHEYVtahJI38AZlXEZhftQCP6zbBDPMviCg0LJFBelkR
Y+c6MfcGtKUWYiLK1Dnsj9e1amRyl07+arP/jrCoOZzoI+rWKv5OpjAxmNbB24ZW
TN90w7OvEI3lTjIHhKGa3OZh8RoxUHdmmEuZ/lWFCm2INKoSPSUGPeEGS6L/arir
5sU48u4lPp5x+NKaosXZYe8AewIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN+mlbvP
YuRDQZEFAuPbmj/Y13m9MB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw
NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R
WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzhBRjIvNzNDODg3OTJFMDY3MTFFQ0I5RDJGRjgxQzRGOUFFMDIvQzY4RDFBRTY5
Qjk2MTFFRkI5NUI4MDM4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ+V2MA0GCSqGSIb3DQEBCwUAA4IBAQCqYIqnDLrybLCRH0QzRiRT
nOKwNDULbT0wkir6zYoq0K43KhUr40zepGA+YlV4h2G3fqiRjBIZn2y4qx0QQlpK
/fIODoZeCIHky1gFTBOq2V2auytuUPVstOexa8TUCQ044xruQXXy5/4NGcXX8sAW
UHeqNFfXXufmRBKJR0ouC1nzS0qzXj7TM9YLisCCZLJU9vOdhbpY0kJETj0Mqn3t
5qdUQHKWUugKdr9TX83XbPaoCdeAEFK9RFrjMZgDXbQXBUBoZPBFgSGhdUukP152
8igf2oj0CXO6l7DsOLpuM3ot/10ww7BubOWwMUYNzML6Y3Sg9r/JwsfM38dhQbDN
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:30:10 2026 by rpki-client