
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/99D6FBE6341F11E9BF826924C4F9AE02.roa
File: 99D6FBE6341F11E9BF826924C4F9AE02.roa (raw, json)
Hash identifier: DTA9mxmgUMp5dN7zA4nVO7JGbSY6mzRAlz02SBccYEA=
Subject key identifier: DB:73:53:1C:64:6B:49:0A:74:BF:25:78:30:86:0D:BC:25:9F:F6:DA
Certificate issuer: /CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Certificate serial: 1911
Authority key identifier: 22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/99D6FBE6341F11E9BF826924C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:54:43 +0000
ROA not before: Tue 30 Sep 2025 16:45:16 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 133229
IP address blocks: 103.71.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl
rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:32:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6417 (0x1911)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B5BD, serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Validity
Not Before: Sep 30 16:45:16 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a47d63-4bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:4e:77:6b:84:69:cf:69:8d:e9:d0:8a:ea:
fb:2b:86:d3:9d:80:f6:30:79:e9:37:df:f6:00:41:
1f:1a:6a:22:11:56:a9:4a:1d:0a:65:06:d5:cd:2f:
04:00:83:a4:0b:9a:f8:fb:b9:30:60:e9:5f:1f:e4:
a8:a8:80:e0:ab:40:33:53:d3:b8:f0:60:ec:4c:c7:
c0:0e:89:1c:cf:ef:3a:96:19:75:c8:bd:3d:73:a3:
c7:52:9c:34:55:66:e1:e1:c1:c2:a5:67:e7:1e:ca:
b9:9f:da:b5:46:17:e8:e8:84:29:69:eb:73:10:eb:
12:07:28:5e:6c:2a:17:7f:d6:33:56:7e:da:27:fd:
8a:d2:26:92:1e:41:ab:8b:b9:6f:b4:b2:64:ae:b2:
c0:d4:f5:ff:bf:4e:32:6b:ad:57:98:ec:2f:ad:05:
90:37:c5:37:d4:88:4c:03:5d:37:b1:2f:c2:01:74:
27:52:0e:d1:62:21:35:35:04:76:16:d3:c6:0c:c4:
8d:c3:e0:18:57:df:bd:86:3a:7d:cc:f7:07:df:74:
42:dd:6b:0d:07:84:cb:fd:aa:9b:bb:60:41:dc:32:
a9:59:8c:18:b8:fe:68:24:71:fb:26:bf:6d:a3:0c:
a2:c5:6e:62:7e:d8:fd:64:64:78:7b:f9:ac:2d:e0:
0f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:73:53:1C:64:6B:49:0A:74:BF:25:78:30:86:0D:BC:25:9F:F6:DA
X509v3 Authority Key Identifier:
keyid:22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/99D6FBE6341F11E9BF826924C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.71.173.0/24
Signature Algorithm: sha256WithRSAEncryption
76:29:fe:0a:cc:cb:46:ae:e5:f9:37:1b:dc:7c:2d:f6:09:53:
1f:54:7a:a7:bc:35:04:ee:15:95:04:f9:a5:e4:6b:e7:0b:70:
dc:d2:20:29:de:9c:6f:c3:e5:21:d7:28:c6:84:c0:bf:ee:52:
4e:b3:a8:ab:6b:7a:eb:27:7e:f2:7b:10:4f:6d:3d:b0:16:16:
a6:28:9c:4e:7e:8b:a4:20:d0:6f:77:59:2e:b2:09:73:61:9a:
70:68:63:cc:8b:92:ab:a3:88:7f:0e:93:76:cf:5c:c2:e4:82:
a7:75:ef:39:bf:cd:59:a3:0c:92:cc:21:65:bd:6f:f4:37:35:
b2:76:5b:d9:bc:ef:52:fa:ff:3d:10:16:2b:a0:ef:05:df:6c:
78:f1:eb:f0:e5:3e:48:3d:45:4a:b0:5b:ca:4b:76:3f:4f:bc:
37:1b:c1:14:f5:b3:a8:9d:cd:a1:12:23:76:b3:59:15:cb:34:
5f:ee:f9:06:6e:87:4c:7d:d9:a7:50:91:e6:6c:b7:c2:6e:26:
39:bf:43:59:e4:41:74:cc:84:67:33:33:d7:97:fd:4b:4d:6a:
8a:1e:25:05:01:c4:af:a0:5f:17:bd:34:e8:a3:eb:e9:78:b9:
29:79:47:20:1f:d5:bd:a9:56:c5:0f:4d:5b:a6:68:2e:67:0a:
8e:de:63:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:41:59 2026 by rpki-client