
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/8642C6D6582111EC8035E069C4F9AE02.roa
File: 8642C6D6582111EC8035E069C4F9AE02.roa (raw, json)
Hash identifier: 3qnOXrnSYilkPrzc6qI1Kjq0gVZpAPwCQX12gHkKLIA=
Subject key identifier: 1B:A5:BD:63:A2:11:96:5A:49:D3:8E:E3:28:28:44:D9:01:E8:51:28
Certificate issuer: /CN=A9181437/serialNumber=AF0BE0B24A119D3B3E93FD0CD3B3415A2C0D01B8
Certificate serial: 0583
Authority key identifier: AF:0B:E0:B2:4A:11:9D:3B:3E:93:FD:0C:D3:B3:41:5A:2C:0D:01:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwvgskoRnTs-k_0M07NBWiwNAbg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/8642C6D6582111EC8035E069C4F9AE02.roa
Signing time: Sun 04 Oct 2026 23:45:01 +0000
ROA not before: Sun 04 Oct 2026 23:45:01 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 138997
IP address blocks: 103.171.176.0/23 maxlen: 24
2407:c640::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.crl
rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwvgskoRnTs-k_0M07NBWiwNAbg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 23:16:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1411 (0x583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181437, serialNumber=AF0BE0B24A119D3B3E93FD0CD3B3415A2C0D01B8
Validity
Not Before: Oct 4 23:45:01 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac2e4fd-af14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7b:1a:f1:3f:bf:22:46:af:69:dd:e6:b1:34:
84:f7:a2:b0:1e:ba:e2:67:37:15:72:79:38:f4:ee:
83:bc:11:e2:76:02:b9:61:7a:91:ac:69:73:c9:18:
70:f9:36:7e:58:38:49:b6:be:24:43:fe:59:bc:9a:
51:92:59:14:9b:1d:3d:a3:8b:12:57:44:87:22:d0:
72:64:c0:da:d0:40:ac:4c:9c:ac:b4:e7:f1:40:f7:
2d:58:33:e0:b3:66:45:d2:7d:b3:b3:36:34:23:5c:
b9:f2:73:51:25:18:64:eb:a8:23:25:6f:3d:0c:cf:
2d:be:6a:4c:e5:0b:c0:77:e4:f5:44:46:7f:84:f0:
e2:73:cd:0b:28:7d:36:cb:63:2e:62:83:66:c3:cc:
58:78:2e:0b:10:30:ec:db:e9:c8:23:e0:6f:13:db:
68:82:97:fe:2d:25:89:ab:9c:bb:48:ec:fb:88:ef:
4f:99:a3:fd:de:ee:26:b2:40:94:40:2f:76:8b:ae:
e7:00:56:39:9e:6f:3d:90:a3:b2:a5:8b:a4:8a:0e:
43:4c:71:72:a7:37:81:28:39:f9:e5:4d:f5:7d:c1:
dd:57:ab:bb:fa:a2:b9:6c:90:1d:03:fc:44:84:87:
70:5f:d5:6d:02:a9:01:e4:6d:08:c3:95:ed:2a:49:
1d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A5:BD:63:A2:11:96:5A:49:D3:8E:E3:28:28:44:D9:01:E8:51:28
X509v3 Authority Key Identifier:
keyid:AF:0B:E0:B2:4A:11:9D:3B:3E:93:FD:0C:D3:B3:41:5A:2C:0D:01:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwvgskoRnTs-k_0M07NBWiwNAbg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/8642C6D6582111EC8035E069C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.171.176.0/23
IPv6:
2407:c640::/32
Signature Algorithm: sha256WithRSAEncryption
d0:7f:7b:18:bf:26:b6:54:93:f8:c7:13:5b:4e:8f:7e:2e:b2:
53:45:81:86:95:70:78:d4:fd:92:4a:b4:2c:f7:65:47:cf:77:
74:9c:0c:b0:16:a2:25:ec:27:33:69:9a:08:fe:d4:0d:1e:04:
c2:d4:fa:61:db:23:d9:71:15:1a:44:84:a2:e9:8d:e9:61:82:
1d:f0:9d:69:2c:68:df:2d:c2:af:60:ea:0b:f3:60:f3:21:7e:
54:cd:61:39:55:a0:8f:57:7f:3f:ef:e8:eb:66:53:5d:37:2b:
af:03:09:58:b5:c2:c2:ef:e4:31:1f:80:8d:6d:8a:fb:b7:88:
c4:64:54:79:ea:f9:e3:78:2c:73:97:25:10:4c:2f:fe:7f:59:
b5:d8:f4:a7:b3:57:6f:e1:c6:b7:b0:20:e2:60:5b:2e:d7:48:
39:d2:d9:47:1a:a2:2d:ee:d5:b4:08:61:ec:9e:9f:0e:28:f6:
5a:a4:84:0b:5f:c3:e4:cf:87:70:38:2b:5c:8e:00:97:09:bf:
b9:fd:46:e9:9c:44:c2:a0:12:0d:f3:f0:b3:24:7c:5b:00:55:
21:b2:fd:68:6d:2b:89:9e:3e:25:f7:dc:ed:cb:bd:2a:68:cb:
e0:11:a6:b1:20:26:02:6b:62:1c:2a:40:8c:59:af:98:ee:e1:
8d:b9:13:93
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICBYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODE0MzcxMTAvBgNVBAUTKEFGMEJFMEIyNEExMTlEM0IzRTkzRkQwQ0QzQjM0MTVB
MkMwRDAxQjgwHhcNMjYxMDA0MjM0NTAxWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWMyZTRmZC1hZjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAynsa8T+/Ikavad3msTSE96KwHrriZzcVcnk49O6DvBHidgK5YXqRrGlzyRhw
+TZ+WDhJtr4kQ/5ZvJpRklkUmx09o4sSV0SHItByZMDa0ECsTJystOfxQPctWDPg
s2ZF0n2zszY0I1y58nNRJRhk66gjJW89DM8tvmpM5QvAd+T1REZ/hPDic80LKH02
y2MuYoNmw8xYeC4LEDDs2+nII+BvE9togpf+LSWJq5y7SOz7iO9PmaP93u4mskCU
QC92i67nAFY5nm89kKOypYukig5DTHFypzeBKDn55U31fcHdV6u7+qK5bJAdA/xE
hIdwX9VtAqkB5G0Iw5XtKkkdJwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFBulvWOi
EZZaSdOO4ygoRNkB6FEoMB8GA1UdIwQYMBaAFK8L4LJKEZ07PpP9DNOzQVosDQG4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTQzNy9ERUIwRkJDNjQ4
OUExMUVDODFBMkQ1MTRDNEY5QUUwMi9yd3Znc2tvUm5Ucy1rXzBNMDdOQldpd05B
YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3J3dmdza29SblRzLWtfME0wN05CV2l3TkFiZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODE0MzcvREVCMEZCQzY0ODlBMTFFQzgxQTJENTE0QzRGOUFFMDIvODY0MkM2RDY1
ODIxMTFFQzgwMzVFMDY5QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ6uwMA0EAgACMAcDBQAkB8ZAMA0GCSqGSIb3DQEBCwUAA4IBAQDQ
f3sYvya2VJP4xxNbTo9+LrJTRYGGlXB41P2SSrQs92VHz3d0nAywFqIl7CczaZoI
/tQNHgTC1Pph2yPZcRUaRISi6Y3pYYId8J1pLGjfLcKvYOoL82DzIX5UzWE5VaCP
V38/7+jrZlNdNyuvAwlYtcLC7+QxH4CNbYr7t4jEZFR56vnjeCxzlyUQTC/+f1m1
2PSns1dv4ca3sCDiYFsu10g50tlHGqIt7tW0CGHsnp8OKPZapIQLX8Pkz4dwOCtc
jgCXCb+5/UbpnETCoBIN8/CzJHxbAFUhsv1obSuJnj4l99zty70qaMvgEaaxICYC
a2IcKkCMWa+Y7uGNuROT
-----END CERTIFICATE-----
Generated at Mon Oct 26 20:55:21 2026 by rpki-client