
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/DBEED4E0B44911EEA11B100BC4F9AE02.roa
File: DBEED4E0B44911EEA11B100BC4F9AE02.roa (raw, json)
Hash identifier: FHMw7TIkQ5w3jytcpOZYdMbiPYWeOiZ6Fey0Hmv9PZw=
Subject key identifier: 57:80:0C:C0:1A:DA:0A:2E:40:C3:22:75:09:14:93:6A:17:CB:DD:69
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: 044D
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/DBEED4E0B44911EEA11B100BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:04:24 +0000
ROA not before: Wed 07 May 2025 01:38:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 103.229.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 00:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1101 (0x44d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Validity
Not Before: May 7 01:38:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a47fa8-96cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0a:35:ef:71:fd:4b:19:59:93:a2:5a:3e:38:
3b:64:98:e1:c3:79:9f:c9:90:ae:82:04:6c:87:0e:
fc:58:6d:c2:ad:76:46:5c:3f:b2:40:5e:1b:e0:5f:
b0:18:9b:b6:cd:57:4c:88:e9:4d:00:5c:59:ad:8d:
4b:92:af:27:9f:1f:ef:db:97:b1:9e:e9:ec:fc:bd:
20:2b:43:26:92:31:99:4e:a4:f6:95:52:90:9a:43:
e0:0d:47:8f:7b:56:6d:1b:bd:28:f7:8d:ca:d3:11:
a5:f2:80:d5:eb:f9:8d:31:b2:eb:18:0d:77:b7:3b:
da:82:f8:54:67:5a:88:8e:fe:9f:48:52:0e:ff:51:
2e:75:5a:b9:e3:09:8a:4a:51:ff:e4:9d:32:b6:61:
fd:0c:3d:e0:8e:f7:8a:bb:d0:41:c0:0d:22:66:e2:
b9:a9:14:7f:d0:f1:2c:71:d0:f6:e9:c0:1f:d9:c8:
70:36:c3:44:c8:8a:b0:1c:27:13:a2:69:9c:eb:d8:
47:d0:0a:96:4d:0d:55:95:06:ae:bf:1e:98:26:6c:
9d:ac:95:01:ad:b0:c9:5e:c6:c6:0e:7d:07:34:e4:
9a:80:ad:ea:4f:a1:29:fe:e5:0d:00:0c:c0:8f:02:
5c:e2:48:4e:4d:86:86:56:56:63:2c:d6:ea:2b:52:
61:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:80:0C:C0:1A:DA:0A:2E:40:C3:22:75:09:14:93:6A:17:CB:DD:69
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/DBEED4E0B44911EEA11B100BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.229.116.0/24
Signature Algorithm: sha256WithRSAEncryption
64:0e:26:6b:67:6a:48:68:96:9e:b4:79:ae:5d:52:b5:9d:cf:
d2:cb:a6:e1:c8:06:18:86:0e:0e:88:97:97:51:24:ae:eb:78:
69:20:fe:6c:b0:73:70:66:7f:09:7e:cf:a5:08:40:90:ea:49:
77:5b:1f:bb:56:2f:dd:a6:69:0a:5b:b6:75:91:0e:6c:8b:7a:
7d:04:c9:ad:84:a8:01:a9:31:ac:4c:9d:0a:e4:15:d6:43:e7:
f1:fe:65:d9:2d:59:2b:84:00:ad:29:bb:bf:5b:e1:36:d2:f3:
af:d6:94:75:9e:29:c8:e2:fe:14:7e:8d:58:d7:2e:c7:9c:0e:
4e:dc:7e:20:35:c4:27:4d:0c:6b:32:3a:2c:e4:97:ba:a4:3c:
02:b9:b8:7d:5c:d9:88:de:fb:1b:2d:6b:52:f4:65:8e:e1:56:
7a:22:80:39:93:14:4f:91:2b:e3:83:ae:d7:c6:ba:de:f3:31:
56:12:d9:9f:27:3f:d2:bd:ff:55:3d:30:71:23:34:4c:b5:fc:
d7:cf:c8:3f:7d:bc:ef:54:78:4d:15:6b:e5:92:2e:0f:5b:3b:
be:d6:c8:24:79:5b:e2:1f:23:53:80:2d:ec:ec:89:30:3c:0d:
6f:05:88:7b:f9:f1:50:5e:f0:6c:05:66:be:73:69:2c:c5:47:
12:89:22:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 19:17:20 2026 by rpki-client