
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/27E5184CCC6211EFA20BEE1BC4F9AE02.roa
File: 27E5184CCC6211EFA20BEE1BC4F9AE02.roa (raw, json)
Hash identifier: x4m5M8TdUipL7o6slEBASzNPQRc6mguoljJR97i4R5w=
Subject key identifier: 2C:56:F5:23:5D:63:70:8F:42:E2:E6:86:67:D3:85:AD:61:B1:C0:30
Certificate issuer: /CN=A917F0AF/serialNumber=E114378DA934861469F495D97598E0F00289C330
Certificate serial: DD
Authority key identifier: E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/27E5184CCC6211EFA20BEE1BC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:12:21 +0000
ROA not before: Wed 03 Sep 2025 07:37:01 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 16789
IP address blocks: 103.170.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl
rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:40:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F0AF, serialNumber=E114378DA934861469F495D97598E0F00289C330
Validity
Not Before: Sep 3 07:37:01 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a58cb5-47ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:65:39:ea:3c:e9:0b:8c:be:ef:fb:04:10:
dc:56:c6:55:1d:dc:e3:a4:03:52:f4:fa:0c:9d:2c:
6f:c2:ee:0c:2b:82:58:08:b5:3a:a7:04:86:5a:88:
e1:64:3b:0d:df:9d:59:f5:68:55:38:2c:21:2e:ad:
0f:07:0b:e5:8f:39:97:32:da:c4:0e:52:ca:4b:b3:
84:4e:8c:09:55:31:27:c9:f2:48:f0:0c:03:42:46:
9c:ab:e3:f6:20:43:7f:02:27:54:31:55:a5:35:7e:
a8:1d:05:41:33:eb:04:d2:f1:7c:1e:5d:9f:d4:58:
3c:0e:50:ef:8c:5b:84:78:4c:69:e1:74:6f:8d:44:
38:d4:45:e6:98:29:de:92:a8:40:be:55:c7:41:02:
1c:59:75:f1:8e:37:06:dd:d7:4c:bd:41:e3:29:a1:
7b:87:f8:29:f3:d5:f7:d3:29:52:b9:7f:7a:e2:79:
d4:0a:65:83:a1:08:9a:a2:80:cf:7b:50:07:4b:e4:
05:88:68:87:d2:a4:5c:0e:56:c5:04:02:c5:b6:34:
a4:da:6a:6d:c0:72:dc:e2:20:95:76:50:da:c2:8e:
f4:c8:e6:1c:86:54:db:8e:46:a6:b9:ce:5f:d7:04:
40:e7:01:7d:dc:54:17:79:14:a8:a1:ae:20:b9:d7:
f7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:56:F5:23:5D:63:70:8F:42:E2:E6:86:67:D3:85:AD:61:B1:C0:30
X509v3 Authority Key Identifier:
keyid:E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/27E5184CCC6211EFA20BEE1BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.170.76.0/24
Signature Algorithm: sha256WithRSAEncryption
81:22:c2:55:94:f5:4a:d2:53:ae:f6:e9:0a:73:d9:cc:59:5f:
8a:f8:ed:3a:58:1f:80:1f:a9:cb:65:f3:de:49:10:a8:57:0a:
46:d7:5c:f8:88:dd:e1:6e:0d:01:b7:41:ba:e3:f9:c1:1d:a7:
5b:8a:40:9a:48:54:e5:92:12:ca:4e:cf:8c:de:3b:c3:83:4e:
1a:de:0d:b8:94:e2:50:e7:29:4c:d2:d3:ec:a5:96:a7:8e:b1:
19:1e:d2:70:1e:d9:e3:b1:35:73:c6:fc:92:cb:2e:21:b4:d5:
5a:13:f8:f1:b7:b4:2b:dd:6b:05:60:0a:0d:a3:e0:76:9e:11:
6c:0a:47:5a:e3:10:52:4b:fb:03:1f:6e:57:9f:19:f9:d6:5b:
0a:f2:d3:fb:e2:25:69:8b:07:e1:88:85:e0:40:1e:1e:15:44:
d5:6e:fb:67:2b:77:1a:fe:3a:7d:51:d7:51:21:42:bb:ff:54:
b3:d2:6c:9b:77:4e:81:ef:4f:e7:63:f5:92:5a:2e:66:93:b7:
08:81:dc:b3:d0:65:95:4c:9f:b4:a5:bd:7c:62:c9:d0:74:4e:
a1:57:15:8b:2a:f1:ac:84:93:d6:b9:97:ff:69:3b:79:3b:67:
2d:2e:66:74:bc:d0:8f:75:d9:53:e1:89:29:7e:75:65:a8:71:
29:af:50:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 14:57:31 2026 by rpki-client