
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/F81F7E0EE2A111EEA2DD9E18C4F9AE02.roa
File: F81F7E0EE2A111EEA2DD9E18C4F9AE02.roa (raw, json)
Hash identifier: VkTWZOhptlmUjpj+fKDaWZKr/by4lrIHVYy8lO2gJqI=
Subject key identifier: B1:B8:DF:42:90:4C:6C:3D:F3:C8:B3:92:45:DF:D9:97:62:C6:73:47
Certificate issuer: /CN=A9167A72/serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4
Certificate serial: 01AB
Authority key identifier: 90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/F81F7E0EE2A111EEA2DD9E18C4F9AE02.roa
Signing time: Mon 25 May 2026 04:36:24 +0000
ROA not before: Mon 25 May 2026 04:36:24 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 63981
IP address blocks: 103.167.140.0/24 maxlen: 24
103.167.141.0/24 maxlen: 24
103.197.28.0/22 maxlen: 24
2407:6bc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl
rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167A72, serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4
Validity
Not Before: May 25 04:36:24 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a13d1c7-4284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e6:2f:32:18:f5:91:e1:36:55:b6:b2:d1:0b:
bd:3b:ee:ec:6b:7a:4c:05:17:e8:dc:51:9c:02:54:
f5:61:df:d5:c5:d1:95:78:4b:f7:ca:3e:ab:64:88:
f4:6a:bd:ac:ce:21:51:36:dd:94:3a:d6:5f:20:18:
b1:f0:c8:82:2a:f1:34:6c:c9:3e:9e:9c:74:4f:d8:
15:63:20:2c:7b:f7:e7:16:4f:ea:45:ff:95:f1:d0:
08:dc:5a:4f:ed:05:e5:57:b6:19:81:5f:5d:1e:27:
67:d1:d7:0c:78:f6:ed:fc:b7:75:24:64:35:92:2c:
77:6d:03:69:b5:ba:cc:8c:27:58:67:a3:9f:f8:a0:
5b:f3:7b:37:38:01:d2:ea:64:98:13:c0:35:e8:e6:
28:f0:0e:18:63:69:fa:91:cc:c4:f0:cc:78:cc:f2:
9f:7f:19:a1:15:06:4a:58:2f:d4:95:50:30:78:8d:
0b:e1:55:79:d8:b4:00:e2:93:30:dc:2e:99:2e:f3:
72:6f:1c:9c:67:55:da:6e:0b:b5:aa:0d:13:63:c1:
c9:5c:6e:0c:ac:24:65:9c:23:69:da:ec:7a:15:b7:
ea:77:d3:d5:c5:d0:0f:0f:dd:7c:b7:6e:21:81:8f:
3f:2f:61:69:cb:92:eb:3d:79:2e:1d:68:9f:8f:30:
14:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B8:DF:42:90:4C:6C:3D:F3:C8:B3:92:45:DF:D9:97:62:C6:73:47
X509v3 Authority Key Identifier:
keyid:90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/F81F7E0EE2A111EEA2DD9E18C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.140.0/23
103.197.28.0/22
IPv6:
2407:6bc0::/32
Signature Algorithm: sha256WithRSAEncryption
47:14:18:57:56:9b:95:5f:b5:de:18:19:4b:c0:49:e1:9a:14:
a3:3b:1a:5b:97:a8:ef:01:13:f0:80:b0:c0:79:b4:e6:09:a5:
d5:5d:5c:c7:16:11:5c:1d:d3:fe:ee:2f:4e:b6:7f:2f:83:4a:
20:56:b0:5c:c3:ef:94:b2:51:47:9e:c7:82:f7:30:4f:13:4d:
ab:ca:3a:a0:82:a8:9a:0d:3d:fa:8c:04:a9:f7:c9:16:36:12:
fb:32:fa:54:49:8c:9d:5e:1e:48:f9:12:35:6c:ca:0f:6b:b3:
a8:7b:96:8d:d7:65:be:e3:b8:9d:f6:45:50:23:ce:78:4c:08:
2d:4d:b3:6e:18:de:b8:dc:ba:9f:1c:77:24:bd:68:dd:c7:57:
98:e6:65:5f:47:1f:55:ce:bb:db:83:42:a5:f4:f5:a2:db:c3:
fa:72:13:e0:91:1c:d8:be:57:d5:e6:07:63:b7:5c:85:24:5b:
36:1c:a5:29:a3:c0:08:3a:e4:36:ba:3a:40:ba:19:63:42:7a:
29:f0:9c:0c:32:4f:42:29:d5:f3:95:99:bc:4b:f7:44:e5:56:
be:94:2b:53:54:4a:c5:24:7a:f5:0e:cd:19:b6:05:c9:e2:a1:
56:67:ea:7f:c3:c8:6d:67:3a:a9:54:03:3f:c8:f0:bc:27:fa:
15:7a:b0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:09:19 2026 by rpki-client