
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/C3417AA6593611E98E4C8C44C4F9AE02.roa
File: C3417AA6593611E98E4C8C44C4F9AE02.roa (raw, json)
Hash identifier: /4N48zzcy6D/CNaLLPlisBpyod+blzNhzyN1ErITlg8=
Subject key identifier: F0:A3:8D:83:DF:DE:6C:C2:51:89:DC:87:C1:0C:8C:AA:DC:7E:EF:18
Certificate issuer: /CN=A9166708/serialNumber=22792C70C98947BE8AF4F4A3E755AEDE7959D278
Certificate serial: 1074
Authority key identifier: 22:79:2C:70:C9:89:47:BE:8A:F4:F4:A3:E7:55:AE:DE:79:59:D2:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/C3417AA6593611E98E4C8C44C4F9AE02.roa
Signing time: Sun 31 May 2026 18:05:01 +0000
ROA not before: Sun 31 May 2026 18:05:01 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 132232
IP address blocks: 103.7.252.0/22 maxlen: 22
2403:8700::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.crl
rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4212 (0x1074)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166708, serialNumber=22792C70C98947BE8AF4F4A3E755AEDE7959D278
Validity
Not Before: May 31 18:05:01 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c784d-5fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8b:d2:f9:74:b6:40:08:2c:d2:84:c7:39:77:
7d:b1:fb:a6:95:b1:3b:20:60:3d:9c:d6:06:89:2b:
5f:9d:f9:b6:65:6f:1d:71:6c:3b:d3:c3:fc:91:06:
ea:a1:c7:c1:f8:f1:44:b7:f0:16:b0:e5:a8:55:ef:
f0:5a:55:74:67:0a:99:bf:31:94:be:b0:c8:85:2d:
97:7f:7a:88:be:26:f0:a5:e1:83:04:44:ec:ac:30:
d6:94:49:22:c2:8b:e0:e8:78:7d:80:88:23:58:81:
0d:97:13:e7:6c:a7:a2:21:51:8f:e7:82:36:d1:ce:
8f:6c:26:71:73:71:43:34:ae:bf:62:73:9f:6d:4c:
59:38:df:46:1f:07:c7:ef:fb:98:d1:07:e6:00:21:
c3:22:24:2d:81:23:7b:0f:1a:52:e0:cd:73:c1:0b:
5f:65:e2:93:1f:97:87:37:d0:22:97:e4:b4:c6:f7:
7e:d6:30:36:a6:0e:c7:ca:77:99:3f:84:bf:56:7a:
65:a2:32:6d:93:e4:0c:20:e1:b4:4e:2b:db:33:f8:
62:fd:a7:ce:27:78:e7:17:a9:2e:f3:ff:83:c3:de:
a8:f3:4d:9a:03:01:70:03:df:80:c8:d0:42:21:67:
cd:91:2a:28:fa:50:33:3a:88:9c:67:3a:4c:9d:9e:
b9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A3:8D:83:DF:DE:6C:C2:51:89:DC:87:C1:0C:8C:AA:DC:7E:EF:18
X509v3 Authority Key Identifier:
keyid:22:79:2C:70:C9:89:47:BE:8A:F4:F4:A3:E7:55:AE:DE:79:59:D2:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/C3417AA6593611E98E4C8C44C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.7.252.0/22
IPv6:
2403:8700::/32
Signature Algorithm: sha256WithRSAEncryption
b0:45:a2:5f:24:86:75:37:01:42:21:bc:df:ce:c7:1f:9b:d7:
6e:e7:20:38:ec:ed:d0:25:49:29:2a:f5:2d:61:c8:4a:3e:f8:
63:c2:40:8d:80:91:99:46:e1:bd:b0:52:19:03:c2:b7:c5:52:
04:ce:6e:65:77:51:ff:e5:92:f9:a9:4a:38:6f:2e:e3:b1:91:
33:62:16:e6:14:94:66:6c:a5:c5:c7:f9:51:b6:0a:1b:a4:17:
ad:ef:cd:9e:ed:bc:50:40:cf:16:49:cd:9b:ce:5f:98:68:88:
a0:57:41:ea:c9:4a:47:56:0b:05:49:9a:4a:c6:33:1b:69:c8:
33:5f:c3:70:4a:a4:80:64:7f:7e:00:3f:a1:b1:97:7d:c3:20:
d3:f4:3e:62:8a:b5:88:a1:9f:f1:22:ab:9f:5b:1b:6b:52:04:
32:70:dc:d1:d2:45:5a:b7:8e:10:65:c3:8e:08:37:74:c3:4b:
dd:52:84:ac:eb:32:64:6e:1e:da:3a:75:28:87:43:e8:fa:6b:
d9:e3:b7:ab:33:0b:fe:87:99:02:67:b8:5e:46:0e:bf:50:53:
35:cd:16:ce:31:df:72:0f:33:45:82:ea:2a:c7:b0:59:fd:18:
38:df:23:9f:8f:b0:6f:75:4e:21:6a:1b:65:2c:34:6a:7d:63:
ce:58:97:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:49:42 2026 by rpki-client