
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/95C64BC0A20C11F1978F0A1A4811F970.roa
File: 95C64BC0A20C11F1978F0A1A4811F970.roa (raw, json)
Hash identifier: wL66YNVnRgEwAMiQSYr0PpdCCahvdrdoToc9iJC1nx8=
Subject key identifier: A5:3E:91:79:58:1E:2B:8B:D0:F9:89:7D:5D:E2:3C:50:9C:F9:56:35
Certificate issuer: /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Certificate serial: 0442
Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/95C64BC0A20C11F1978F0A1A4811F970.roa
Signing time: Thu 27 Aug 2026 11:43:56 +0000
ROA not before: Thu 27 Aug 2026 11:43:56 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 133551
IP address blocks: 103.209.76.0/24 maxlen: 24
103.209.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 00:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1090 (0x442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Validity
Not Before: Aug 27 11:43:56 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a9022fc-b83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:59:f7:e7:3a:aa:02:4f:12:97:fc:e2:a9:1e:
80:8c:a1:db:14:a5:6f:12:f8:1b:ba:c7:f8:cf:98:
3f:f4:cc:60:07:5b:b6:f6:fd:c8:59:e0:16:bc:2a:
71:36:4b:bd:58:e2:e3:eb:c3:71:f3:55:d9:38:e1:
3a:35:86:b2:f1:de:57:2d:d3:91:ae:fb:9a:c3:f7:
18:84:57:42:bd:10:80:ea:b2:f1:d2:88:ac:31:f3:
56:e0:95:e9:53:86:90:9c:13:23:28:c5:d2:ce:42:
34:53:6a:e1:77:f0:7c:55:86:50:81:49:60:63:ee:
d3:b6:d1:01:29:96:53:5a:48:16:1b:6f:b7:3a:04:
59:c0:f6:e7:d0:e6:a7:ea:3b:36:b5:0d:7b:6e:61:
ca:e9:ce:25:6f:8a:f9:1c:53:30:56:f7:21:13:74:
3e:10:3c:08:75:45:ce:37:45:4d:06:05:e3:6f:54:
88:08:1a:26:75:81:fe:d3:00:d5:4e:1d:9b:52:0d:
3b:86:22:e3:89:59:67:fa:9e:00:0a:e0:c6:85:c7:
d9:1c:9f:b3:f7:4c:90:fe:ec:32:22:18:0f:11:9e:
b9:8e:bc:eb:2c:2d:5b:ac:65:39:f1:72:9d:cc:93:
c8:b2:89:c8:41:73:a2:26:57:1d:d9:be:b3:c7:0f:
1c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3E:91:79:58:1E:2B:8B:D0:F9:89:7D:5D:E2:3C:50:9C:F9:56:35
X509v3 Authority Key Identifier:
keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/95C64BC0A20C11F1978F0A1A4811F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.209.76.0/24
103.209.79.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:97:cb:df:40:fa:ca:57:bf:9c:26:ff:7d:7b:d8:27:a1:07:
a6:46:0e:64:54:1f:f6:9a:9b:c7:1e:0c:f6:e8:65:22:39:87:
b5:c5:5d:15:89:2d:bb:2d:70:cd:2d:2a:69:8b:c6:8e:1a:3a:
44:fc:c7:75:b8:9a:5b:e3:67:4d:55:6b:6a:13:c7:12:23:61:
eb:c1:a4:cf:f1:50:b5:45:b6:ea:2b:cd:e3:33:ac:58:a2:db:
55:d0:a0:d1:d5:8d:5a:28:13:51:7a:18:ae:51:be:0a:ee:eb:
24:c2:d0:4f:0a:fd:98:15:34:81:a3:b2:40:58:5f:21:87:b1:
c8:10:a5:20:93:b6:1e:e6:0a:8a:36:4e:9f:f6:73:52:f4:59:
c9:9e:81:73:cd:e1:2a:e2:75:a0:c1:18:e0:c2:ae:4f:fc:fa:
bd:79:9b:36:85:c9:42:04:7f:fe:75:43:e0:b5:b5:ac:83:73:
91:e9:f3:f9:f8:fe:e8:9f:28:7c:dc:a6:41:27:81:aa:19:40:
c0:ee:bb:56:79:19:fc:b9:99:7a:6a:ce:6d:8f:f5:e7:0c:09:
4a:8f:d5:f6:42:5b:1a:a9:d4:50:43:0b:f4:fd:bf:55:5b:4e:
84:50:d6:e4:27:6a:5c:22:35:3f:7a:80:8e:13:07:7a:f5:e9:
87:b0:e7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:11:30 2026 by rpki-client