
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/B97D647C1A8811EEB5AE963CC4F9AE02.roa
File: B97D647C1A8811EEB5AE963CC4F9AE02.roa (raw, json)
Hash identifier: FH6JSVfglSJW7zuwD+OJ46zvfhHml/ygJE5GmV2jsMs=
Subject key identifier: 23:14:8D:97:93:2D:F4:E7:CF:E1:00:AF:78:00:26:6F:E8:08:5C:17
Certificate issuer: /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Certificate serial: 0201
Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/B97D647C1A8811EEB5AE963CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:17:01 +0000
ROA not before: Tue 25 Mar 2025 03:39:33 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 16509
IP address blocks: 103.73.186.0/24 maxlen: 24
103.73.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:26:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513 (0x201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Validity
Not Before: Mar 25 03:39:33 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a3f5fd-acf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:d2:8c:94:5d:51:84:a8:72:ce:b6:15:81:
0b:be:e4:bc:a5:6d:67:f0:a5:cb:46:ec:9e:64:19:
b6:7c:e9:51:13:6d:11:ca:46:75:e5:d0:dd:3a:93:
71:cf:0e:9a:6d:ee:b1:95:5a:66:58:e1:be:ba:cd:
9f:23:2f:79:e4:69:30:6e:85:59:e6:f1:1c:31:1a:
ec:b7:62:57:42:c7:25:0c:a6:c8:1c:d8:fa:fb:2e:
69:b5:1b:49:51:67:c2:d6:4e:3a:c5:66:42:47:cc:
42:84:81:b8:e0:33:1b:f5:43:c5:df:4e:a0:09:7a:
73:ce:b5:f4:d2:98:d2:27:b4:ef:b2:1e:a4:05:33:
cc:ad:81:4f:9c:f8:65:77:5a:25:2e:1f:4d:35:4a:
ad:a5:4a:b9:54:0b:8d:2a:84:ce:94:fe:0a:73:32:
4a:c1:05:70:5f:11:8d:f3:66:67:ea:5b:ed:75:f2:
d6:53:73:92:9c:06:df:f2:06:82:dd:d7:3d:c6:60:
6a:ab:6a:ea:e8:28:13:4c:bb:52:c7:87:64:b5:41:
6e:74:b3:69:3f:82:f7:b2:71:8b:8b:c9:f9:2f:0d:
49:7f:79:a3:c6:51:c1:46:3a:cf:de:06:1d:f6:cc:
c5:7b:f1:10:8e:86:08:45:80:70:ac:d8:d2:27:77:
e5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:14:8D:97:93:2D:F4:E7:CF:E1:00:AF:78:00:26:6F:E8:08:5C:17
X509v3 Authority Key Identifier:
keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/B97D647C1A8811EEB5AE963CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.73.186.0/23
Signature Algorithm: sha256WithRSAEncryption
d7:37:7f:1d:41:a6:01:84:2f:2e:87:e7:42:98:0d:73:e8:1d:
55:b0:d2:77:2b:51:72:b2:33:ab:91:61:44:db:86:10:9f:0b:
0f:c8:cf:0b:27:d4:e2:d7:00:e8:85:dc:e3:ff:6f:ef:76:af:
77:c5:b5:89:fd:db:7e:4c:f4:81:15:7f:f9:93:7a:b4:d0:be:
4b:83:3e:13:f8:52:69:31:d3:1d:42:d4:8b:6b:6f:e8:f7:b7:
9d:3f:fa:3d:a6:e0:fe:1a:fa:f4:f5:87:0d:fe:69:d3:da:90:
32:bd:10:37:f5:85:c6:bb:7a:f5:5b:fa:5c:52:28:2b:88:46:
7a:9d:63:32:ab:ff:2a:98:52:2f:ba:c0:97:a1:5d:5b:d4:60:
d1:2a:ca:4e:e0:60:ed:e1:58:25:46:2e:01:39:4b:18:4d:0f:
e5:fd:da:33:f0:40:83:a3:8f:ad:97:b6:f9:f8:9f:25:e5:e9:
fa:66:ac:0c:88:a6:e2:5e:9b:57:59:bd:a9:77:31:15:5e:2f:
e6:6c:d5:16:14:66:9e:87:51:bb:ca:d3:a2:37:32:f4:cd:be:
53:a8:aa:cc:73:d2:43:85:92:49:d6:1e:67:f9:01:9e:48:5c:
de:37:1f:52:d6:39:15:73:d5:f6:6f:88:2d:88:74:d9:2a:78:
c3:45:c0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:42:24 2026 by rpki-client