
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/C7FAB578FEEC11EFB40D667FC4F9AE02.roa
File: C7FAB578FEEC11EFB40D667FC4F9AE02.roa (raw, json)
Hash identifier: HQl5Zh3nLn33eyl8y5su1Pqf5kEfuukUkh6VmRnjQfE=
Subject key identifier: 86:01:24:D0:5D:A2:72:F7:0E:B3:89:62:C1:50:53:A3:EA:87:D6:90
Certificate issuer: /CN=A911A7D2/serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC
Certificate serial: B9
Authority key identifier: B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/C7FAB578FEEC11EFB40D667FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:01:18 +0000
ROA not before: Tue 13 May 2025 07:33:48 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 398704
IP address blocks: 103.167.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl
rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:18:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A7D2, serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC
Validity
Not Before: May 13 07:33:48 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3e43e-4258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:d8:c5:61:70:82:f4:8f:60:6a:19:f3:2d:
27:d9:91:01:fc:d5:57:cd:8f:d4:5a:87:64:26:e5:
25:f3:7a:7f:8c:51:55:77:03:f3:40:fc:d5:5a:95:
2d:27:1c:31:fe:a8:d8:60:41:87:4f:c8:b7:83:72:
50:f2:04:d4:c0:7f:76:43:1d:4b:8f:9f:67:27:84:
41:91:d7:98:8f:65:cd:b8:40:c6:1b:be:0c:f7:24:
82:18:92:1d:ea:0d:be:f3:fc:52:cd:76:38:c1:12:
76:96:85:9e:ae:84:35:41:67:50:32:1f:8f:ca:c5:
6d:9d:74:ba:0f:88:9a:3f:20:e7:f8:c0:ff:aa:98:
cc:18:37:80:c4:35:f4:14:fe:b3:77:48:1e:50:fa:
42:be:99:31:9f:a3:c9:0e:87:78:9b:fe:b3:68:57:
35:3b:97:40:c4:69:01:b1:12:e6:51:33:4b:f8:42:
6f:c3:16:75:cf:be:02:28:74:58:7b:31:aa:0c:7e:
91:3c:02:04:f6:69:b3:09:9e:e1:05:da:54:15:f5:
69:87:b1:96:8b:a9:e8:3b:ea:15:fe:06:94:71:42:
86:90:92:d4:95:d4:f7:0d:31:f5:ba:2f:fa:34:58:
54:c2:49:4b:13:34:ba:11:4c:6e:d5:0b:7c:bf:11:
89:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:01:24:D0:5D:A2:72:F7:0E:B3:89:62:C1:50:53:A3:EA:87:D6:90
X509v3 Authority Key Identifier:
keyid:B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/C7FAB578FEEC11EFB40D667FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.60.0/23
Signature Algorithm: sha256WithRSAEncryption
d7:16:2b:56:22:14:4c:4e:ba:48:27:4c:93:6a:82:be:cf:28:
41:98:09:ff:00:7d:4b:6b:f4:21:ea:46:81:a5:ce:5a:3c:99:
48:b5:69:24:a9:a1:28:80:b8:3f:e3:e5:23:9b:e0:dd:fd:84:
c1:7e:24:04:6a:b1:33:5c:9f:7d:83:95:ca:ec:97:98:39:da:
84:c9:79:53:f6:cc:f4:fe:a0:5a:c8:d6:4d:a2:61:07:68:c7:
3a:94:df:6b:ee:25:97:de:07:71:0d:e8:75:c2:87:dc:23:b7:
f6:c8:0b:06:b5:24:f1:c4:aa:df:33:ac:75:16:8b:1f:0a:59:
8b:51:a9:4e:87:9e:5f:0d:00:50:6a:f0:0b:1f:7a:c9:91:e0:
bf:19:9b:4d:c8:4a:03:a0:3d:e1:4c:cb:7b:11:d4:5d:68:0e:
0c:66:90:75:b2:7f:3f:2e:7c:0b:fa:41:c8:53:8c:fb:eb:5a:
5f:0b:e5:67:7f:c7:5c:4a:14:9a:97:9c:5b:e4:bb:9b:67:57:
f4:b9:85:84:24:5d:26:08:90:ab:28:db:1c:63:e6:87:62:c6:
39:75:c8:e0:d8:79:10:82:c9:e1:69:06:8c:d1:28:51:c5:f1:
f6:1e:68:85:2f:13:01:bf:13:ed:16:eb:32:fb:b6:8f:d4:88:
37:1e:f7:c6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUE3RDIxMTAvBgNVBAUTKEIyMUMyQjhCQ0Y0ODJGOUQ3NjZEMkE0RDMyNTk4RUU5
NEJGNjY1QUMwHhcNMjUwNTEzMDczMzQ4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZTQzZS00MjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApMbYxWFwgvSPYGoZ8y0n2ZEB/NVXzY/UWodkJuUl83p/jFFVdwPzQPzVWpUt
Jxwx/qjYYEGHT8i3g3JQ8gTUwH92Qx1Lj59nJ4RBkdeYj2XNuEDGG74M9ySCGJId
6g2+8/xSzXY4wRJ2loWeroQ1QWdQMh+PysVtnXS6D4iaPyDn+MD/qpjMGDeAxDX0
FP6zd0geUPpCvpkxn6PJDod4m/6zaFc1O5dAxGkBsRLmUTNL+EJvwxZ1z74CKHRY
ezGqDH6RPAIE9mmzCZ7hBdpUFfVph7GWi6noO+oV/gaUcUKGkJLUldT3DTH1ui/6
NFhUwklLEzS6EUxu1Qt8vxGJYwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIYBJNBd
onL3DrOJYsFQU6Pqh9aQMB8GA1UdIwQYMBaAFLIcK4vPSC+ddm0qTTJZjulL9mWs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTdEMi81QkRCMTUyQ0ZF
RUMxMUVGQUZBNjkxN0VDNEY5QUUwMi9zaHdyaTg5SUw1MTJiU3BOTWxtTzZVdjJa
YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Nod3JpODlJTDUxMmJTcE5NbG1PNlV2Mlphdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUE3RDIvNUJEQjE1MkNGRUVDMTFFRkFGQTY5MTdFQzRGOUFFMDIvQzdGQUI1NzhG
RUVDMTFFRkI0MEQ2NjdGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ6c8MA0GCSqGSIb3DQEBCwUAA4IBAQDXFitWIhRMTrpIJ0yTaoK+
zyhBmAn/AH1La/Qh6kaBpc5aPJlItWkkqaEogLg/4+Ujm+Dd/YTBfiQEarEzXJ99
g5XK7JeYOdqEyXlT9sz0/qBayNZNomEHaMc6lN9r7iWX3gdxDeh1wofcI7f2yAsG
tSTxxKrfM6x1FosfClmLUalOh55fDQBQavALH3rJkeC/GZtNyEoDoD3hTMt7EdRd
aA4MZpB1sn8/LnwL+kHIU4z761pfC+Vnf8dcShSal5xb5LubZ1f0uYWEJF0mCJCr
KNscY+aHYsY5dcjg2HkQgsnhaQaM0ShRxfH2HmiFLxMBvxPtFusy+7aP1Ig3HvfG
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:55:31 2026 by rpki-client