
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/99D6FBE6341F11E9BF826924C4F9AE02.roa
File: 99D6FBE6341F11E9BF826924C4F9AE02.roa (raw, json)
Hash identifier: bhokbIwrS3369JUyV8c4Xk8Qp1nB7OHrNTNTjnsXPLc=
Subject key identifier: F3:69:7F:FD:97:1E:69:02:72:2F:86:93:14:A5:27:F9:8F:BB:36:01
Certificate issuer: /CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Certificate serial: 198E
Authority key identifier: 22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/99D6FBE6341F11E9BF826924C4F9AE02.roa
Signing time: Sun 04 Oct 2026 16:29:43 +0000
ROA not before: Sun 04 Oct 2026 16:29:43 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 133229
IP address blocks: 103.71.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl
rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 16:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6542 (0x198e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B5BD, serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Validity
Not Before: Oct 4 16:29:43 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac27ef7-dd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:35:18:37:6e:1f:8d:f8:6a:dc:f9:dd:67:
47:4d:51:eb:7d:8d:a3:66:d2:dc:e4:85:13:6a:ea:
03:04:fc:1a:b2:12:e0:7e:b2:8a:7d:6b:0d:bd:fa:
ac:7f:eb:8e:c0:7e:af:e8:19:6d:45:62:06:b4:bc:
db:75:9e:79:59:b8:36:92:ae:9f:87:47:4d:a9:d0:
84:65:bc:69:1d:24:3c:b0:a4:8e:8d:5f:a0:cd:bd:
eb:b2:54:1f:d6:fb:c9:57:c5:63:68:30:4e:45:ec:
6c:1a:25:40:9e:9d:69:f3:0d:f1:2e:bf:6d:49:39:
8d:4d:dc:11:9d:fb:c2:35:de:53:b8:b3:cf:1a:3f:
85:d9:99:ed:6e:6e:01:d5:09:b1:a7:42:a6:6f:61:
c6:39:76:20:5a:56:22:05:83:a8:e0:e7:a3:9c:dd:
10:b0:ee:09:1e:7d:3a:38:c4:12:fe:c4:a5:40:bc:
20:76:83:d3:af:90:c6:cf:50:e6:ab:10:01:c4:0c:
77:bf:f9:16:84:d9:72:9b:ae:55:91:f9:80:05:0d:
a9:18:2d:de:a5:e8:c8:1a:37:9e:91:72:e0:b0:0f:
a8:45:c8:24:35:8e:c9:d6:6b:10:0a:3f:8c:26:8f:
88:b6:e4:2d:e0:ce:89:8e:07:80:36:16:36:1f:e2:
c5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:69:7F:FD:97:1E:69:02:72:2F:86:93:14:A5:27:F9:8F:BB:36:01
X509v3 Authority Key Identifier:
keyid:22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/99D6FBE6341F11E9BF826924C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.71.173.0/24
Signature Algorithm: sha256WithRSAEncryption
75:dc:99:c0:63:b3:67:47:dd:13:db:a0:3b:f8:5f:d4:28:e8:
c1:96:05:ec:bf:0d:20:79:90:b2:2f:7b:9a:e9:d2:eb:3b:0b:
50:b3:9f:62:90:9a:10:74:a4:7f:3a:e2:48:29:ad:51:f5:e0:
4f:7d:47:c2:b2:25:d7:0d:29:1e:54:ac:8e:00:01:de:f7:8c:
e8:4a:df:c4:ae:fd:64:52:87:a9:0d:ca:8e:87:0a:4e:41:e7:
8f:99:94:3c:fc:b0:42:a9:45:e4:06:df:2d:c4:89:da:52:74:
05:0c:6b:3d:c3:88:fc:13:63:c7:c3:01:31:b5:d7:a0:c0:64:
46:cc:69:a1:bf:76:9d:de:f7:79:1b:8b:2c:44:1d:40:19:4c:
d6:b2:39:ed:a1:42:d7:ad:c2:5d:bc:f4:68:69:cc:a6:ec:01:
e3:ff:90:05:9f:9f:be:68:56:06:11:83:b5:52:b1:70:94:17:
d7:fa:14:15:74:bb:46:63:a8:5b:73:14:72:22:68:e1:52:fb:
d3:b7:8c:8f:51:38:e6:b3:0c:a9:9f:b6:50:42:de:df:4a:c0:
0d:b5:f8:a8:3a:ee:81:db:c5:53:86:6f:7d:53:13:7e:a0:d4:
0a:d2:54:32:73:f9:12:c1:d2:53:c2:36:3b:d5:df:f4:d5:fe:
71:bb:4a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:14:40 2026 by rpki-client