
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/7AAA81CC97A211F1B4CCDFD05411F970.roa
File: 7AAA81CC97A211F1B4CCDFD05411F970.roa (raw, json)
Hash identifier: tmTcUM1Gt6DkqNwBrnAaOzy4iBZeySyylbDIucJKHRw=
Subject key identifier: 73:44:A8:5B:22:D7:EF:AE:B6:07:63:22:F0:3B:47:3F:6F:27:D2:26
Certificate issuer: /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
Certificate serial: 0AB3
Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/7AAA81CC97A211F1B4CCDFD05411F970.roa
Signing time: Thu 08 Oct 2026 20:39:20 +0000
ROA not before: Thu 08 Oct 2026 20:39:20 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 139293
IP address blocks: 103.207.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl
rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 19:44:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2739 (0xab3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
Validity
Not Before: Oct 8 20:39:20 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac7ff78-3a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:d1:86:95:84:a9:72:b4:54:95:ca:97:11:
05:d5:fa:4f:eb:ce:b8:48:52:7e:3e:e5:ad:12:b5:
2f:70:6a:a0:99:6c:c8:58:20:49:cd:78:e7:98:c6:
1f:98:53:67:41:ae:e4:66:76:ed:f8:15:5b:ab:7b:
ab:c0:d3:d1:41:c5:66:3f:ef:0f:e1:43:00:41:7d:
26:f4:d0:e1:fb:cf:cc:4f:26:ba:cd:c5:d6:5f:fc:
fd:24:40:a3:4a:07:db:9d:46:3c:95:2b:cb:cd:3a:
a6:96:ef:5c:27:cd:c9:7d:a8:4e:dd:3c:59:8f:54:
06:2d:5a:85:bc:56:fd:f7:2e:40:e1:aa:d4:59:89:
8c:92:e9:d6:02:c9:2b:0b:f9:4b:17:ce:68:98:6f:
82:f3:30:a4:d1:f8:6b:14:16:96:61:f4:4a:26:be:
c5:0d:f6:8e:72:40:46:f4:0c:15:22:b4:95:af:df:
27:06:11:eb:2a:fe:5d:d5:f0:47:22:78:fc:a1:d7:
f8:14:3a:85:f9:0f:46:40:6f:cb:be:38:cc:69:19:
68:41:84:17:70:04:9a:56:49:5a:22:49:87:1c:8c:
88:91:0a:bd:71:61:22:a8:84:f4:59:96:fd:f0:96:
2d:2d:5a:6b:0c:b9:cc:15:50:b6:db:63:f2:3d:6e:
db:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:44:A8:5B:22:D7:EF:AE:B6:07:63:22:F0:3B:47:3F:6F:27:D2:26
X509v3 Authority Key Identifier:
keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/7AAA81CC97A211F1B4CCDFD05411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.207.166.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:61:b6:86:eb:79:c2:17:3c:ae:26:a2:94:f3:c7:1c:71:55:
33:d7:01:8a:98:f4:d5:3f:05:b6:7c:4e:bd:2d:5e:38:62:75:
ea:7b:c3:bd:e4:35:90:d8:ab:95:97:e1:df:42:e1:13:c4:c6:
f6:6a:50:76:3d:44:ae:a8:3b:0b:2b:0e:dc:2c:fa:ab:7c:8a:
1b:01:6b:9a:52:3b:a7:a6:0f:f3:8d:f1:1a:9e:ee:76:4d:f7:
03:1a:e8:fb:5f:5a:22:a1:ba:c9:d6:f4:b7:1b:67:e4:e7:11:
6f:f2:a4:ab:1c:94:a9:84:a6:d0:c2:26:b4:8b:4b:17:09:61:
0a:1a:0a:03:36:6b:57:12:74:61:c9:8a:ae:7c:a3:3c:33:fb:
fc:10:4f:7d:0f:f4:16:8f:6a:ad:dd:fe:89:ab:65:cd:12:26:
a7:d0:14:1a:8c:55:1e:d4:64:ca:4b:f3:f3:4c:21:73:a4:9c:
d3:fd:b7:f5:d1:a7:13:2e:33:98:75:bf:0e:80:18:3d:32:37:
1d:aa:f8:86:2c:0b:67:ef:62:22:59:73:25:7f:c4:30:68:a5:
c6:96:5c:61:b2:f3:de:42:2e:01:15:d5:0c:f7:f8:bc:02:e1:
ec:c2:53:0b:8a:89:be:73:f7:32:06:97:2d:12:ad:c6:93:6b:
af:21:58:d9
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTZERTUxMTAvBgNVBAUTKEQ4MzkyQjBEOTE1QjlBQzFGNEQyM0JGOTg0MTk3MTQw
NkZCNjFBQzYwHhcNMjYxMDA4MjAzOTIwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWM3ZmY3OC0zYTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuKfRhpWEqXK0VJXKlxEF1fpP6864SFJ+PuWtErUvcGqgmWzIWCBJzXjnmMYf
mFNnQa7kZnbt+BVbq3urwNPRQcVmP+8P4UMAQX0m9NDh+8/MTya6zcXWX/z9JECj
SgfbnUY8lSvLzTqmlu9cJ83JfahO3TxZj1QGLVqFvFb99y5A4arUWYmMkunWAskr
C/lLF85omG+C8zCk0fhrFBaWYfRKJr7FDfaOckBG9AwVIrSVr98nBhHrKv5d1fBH
Inj8odf4FDqF+Q9GQG/LvjjMaRloQYQXcASaVklaIkmHHIyIkQq9cWEiqIT0WZb9
8JYtLVprDLnMFVC222PyPW7bbQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHNEqFsi
1++utgdjIvA7Rz9vJ9ImMB8GA1UdIwQYMBaAFNg5Kw2RW5rB9NI7+YQZcUBvthrG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRFNS83MkM1QTlDQzk0
MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1zSDAwanY1aEJseFFHLTJH
c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJEa3JEWkZibXNIMDBqdjVoQmx4UUctMkdzWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTZERTUvNzJDNUE5Q0M5NDMwMTFFQUJENzVGOTgzQzRGOUFFMDIvN0FBQTgxQ0M5
N0EyMTFGMUI0Q0NERkQwNTQxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ8+mMA0GCSqGSIb3DQEBCwUAA4IBAQA8YbaG63nCFzyuJqKU88cc
cVUz1wGKmPTVPwW2fE69LV44YnXqe8O95DWQ2KuVl+HfQuETxMb2alB2PUSuqDsL
Kw7cLPqrfIobAWuaUjunpg/zjfEanu52TfcDGuj7X1oiobrJ1vS3G2fk5xFv8qSr
HJSphKbQwia0i0sXCWEKGgoDNmtXEnRhyYqufKM8M/v8EE99D/QWj2qt3f6Jq2XN
Eian0BQajFUe1GTKS/PzTCFzpJzT/bf10acTLjOYdb8OgBg9MjcdqviGLAtn72Ii
WXMlf8QwaKXGllxhsvPeQi4BFdUM9/i8AuHswlMLiom+c/cyBpctEq3Gk2uvIVjZ
-----END CERTIFICATE-----
Generated at Mon Oct 19 06:25:45 2026 by rpki-client