
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/029780A8791D11F08A28C96CC4F9AE02.roa
File: 029780A8791D11F08A28C96CC4F9AE02.roa (raw, json)
Hash identifier: EvnupFOZS9saBqM7mIs3MvjaMbJtIFIC/WVZZVoBHUA=
Subject key identifier: 29:39:EE:04:69:0F:B7:B5:B5:45:A5:D9:AE:FC:88:4B:0E:3F:92:D1
Certificate issuer: /CN=A917F116/serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB
Certificate serial: AF
Authority key identifier: DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/029780A8791D11F08A28C96CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:19:32 +0000
ROA not before: Sat 07 Feb 2026 07:25:40 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 6453
IP address blocks: 203.105.174.0/23 maxlen: 23
203.105.174.0/24 maxlen: 24
203.105.175.0/24 maxlen: 24
203.105.176.0/23 maxlen: 23
203.105.176.0/24 maxlen: 24
203.105.177.0/24 maxlen: 24
203.105.178.0/23 maxlen: 23
203.105.178.0/24 maxlen: 24
203.105.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl
rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 07:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175 (0xaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F116, serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB
Validity
Not Before: Feb 7 07:25:40 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a48334-b38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:6e:55:a3:7e:df:31:b6:c3:b9:58:f1:48:
a3:f2:0e:bd:e8:1d:de:f2:dd:5b:17:d0:fc:76:00:
45:94:f7:f4:b7:c0:7f:2e:04:a1:79:6d:92:f8:56:
09:d2:fa:c4:86:f0:82:de:03:cb:24:c7:6d:8d:6d:
65:26:87:f7:ac:e1:eb:58:c8:4b:d2:ea:d9:a4:6d:
fe:55:bf:2d:d7:bf:fb:db:37:01:22:28:5d:d7:92:
d0:89:9a:5b:2b:40:35:91:3d:7f:22:38:5e:a7:70:
87:9a:c3:fe:72:1b:e6:93:bc:8e:38:0f:70:c0:d4:
b9:15:15:26:98:5f:dd:2f:4a:f7:76:82:1f:38:d2:
3d:f2:9a:5d:29:f6:76:2f:c6:9b:bf:79:d5:d2:46:
e9:26:0e:f9:6c:b0:dc:9b:e8:9f:eb:d0:c4:3e:de:
db:66:e2:7d:a8:c5:5f:93:c5:3f:e6:20:e0:e5:c9:
31:05:27:4a:12:82:55:90:2e:c7:ce:94:97:cb:04:
3e:83:b0:d2:e9:40:9e:0c:07:91:09:06:33:10:a4:
b9:33:83:92:8c:35:c2:63:a4:52:b0:34:d4:42:f5:
4c:81:d3:1d:86:e1:51:4c:8d:7b:28:8b:95:07:79:
86:90:b2:87:28:a6:d8:73:c2:8d:9d:ff:27:31:5b:
03:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:39:EE:04:69:0F:B7:B5:B5:45:A5:D9:AE:FC:88:4B:0E:3F:92:D1
X509v3 Authority Key Identifier:
keyid:DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/029780A8791D11F08A28C96CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.105.174.0-203.105.179.255
Signature Algorithm: sha256WithRSAEncryption
8e:c7:ff:83:47:c0:30:1d:5a:b6:29:05:ec:c1:b4:10:e0:b3:
ec:a3:ba:d1:f4:ff:4d:eb:02:28:f2:06:d7:97:55:09:1d:bf:
0f:1b:12:5a:a9:16:c3:39:8a:f7:de:48:39:f7:21:5c:b1:00:
0e:92:06:00:6c:90:57:91:89:e5:c8:60:72:87:a7:72:96:e2:
53:ee:e5:07:72:24:94:46:6e:4b:60:74:04:24:c4:e2:97:a1:
f6:5b:ee:57:a2:55:86:cf:64:f4:b8:75:e5:e6:4e:5a:38:7d:
5f:65:d8:94:0f:e4:f5:32:f3:e8:25:d1:50:e4:a9:04:ec:f9:
9b:5e:47:f1:04:22:8a:59:82:0f:06:ef:1e:78:51:28:45:38:
37:34:a4:51:4a:46:c7:11:56:95:e2:9c:8a:1b:a5:b6:5f:95:
b9:39:0e:85:fd:41:2f:2e:68:16:82:c7:48:e3:2a:74:67:94:
24:05:17:98:69:8a:3e:fc:f4:48:0e:b5:9e:a4:c4:3c:65:a9:
b3:d4:bf:df:c3:09:1d:e8:05:d8:be:8a:f0:b1:26:1d:02:11:
81:48:3d:e7:c6:89:fc:c8:30:ed:d1:f9:bd:78:cd:b6:e4:06:
fc:ed:4b:79:79:1b:3f:42:7e:af:1c:02:09:5a:10:6d:d4:80:
d8:c7:94:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:03:16 2026 by rpki-client