
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/86080D8A940511EE8A83F00DC4F9AE02.roa
File: 86080D8A940511EE8A83F00DC4F9AE02.roa (raw, json)
Hash identifier: Vbr5tSAUt1o9rWvWC45nwleB9ODJmGpA18ZNisnMw58=
Subject key identifier: 31:57:6B:B3:2C:D1:4C:BF:3F:29:54:27:B5:0B:96:20:73:1B:97:69
Certificate issuer: /CN=A9169351/serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09
Certificate serial: 01B4
Authority key identifier: B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/86080D8A940511EE8A83F00DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:01:55 +0000
ROA not before: Tue 11 Nov 2025 02:19:30 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 135652
IP address blocks: 103.78.40.0/24 maxlen: 24
103.78.42.0/24 maxlen: 24
103.78.43.0/24 maxlen: 24
2001:df6:200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl
rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169351, serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09
Validity
Not Before: Nov 11 02:19:30 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a41ca2-6c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:6d:6a:1f:bd:df:66:6f:a7:3c:be:72:bc:
fa:66:f3:8f:6e:9b:e4:61:f8:f7:3b:06:64:0c:59:
35:33:64:93:97:75:de:a4:fe:66:60:5c:ed:f1:f6:
d8:38:a9:8e:e3:8b:9d:3e:3a:91:9e:88:a0:fe:c0:
ba:7b:b6:00:0f:22:bb:eb:6e:f0:16:12:17:c8:04:
de:69:01:8f:72:68:ce:5a:c4:22:e8:43:cf:91:b1:
02:13:b6:57:29:71:b4:bd:61:4d:76:9a:af:ad:2d:
28:3b:48:7e:e7:41:4e:47:3b:ab:f9:a8:c9:db:86:
b9:fe:f2:28:60:0f:a1:14:01:72:66:0e:e4:77:15:
ea:25:8f:6e:6f:c4:a6:c1:44:f7:9e:77:1c:ee:a6:
70:dc:ea:46:a6:c4:ef:1f:12:a9:97:41:e3:db:e6:
70:2a:e2:80:f4:9f:e0:9d:69:47:c4:fe:80:4b:c8:
73:e7:70:92:af:e6:f7:22:e5:7a:1c:d5:1a:84:2b:
83:d8:54:e1:59:9c:45:2f:e1:dd:bf:56:5a:be:5f:
3b:d0:5f:d8:9f:65:6d:a8:2a:49:d4:a6:3a:b6:a7:
27:66:b3:fe:26:97:28:fd:79:bd:ec:8e:9a:da:df:
dc:c8:d5:7c:6a:c2:b0:e0:f0:c3:17:ff:7d:34:71:
87:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:57:6B:B3:2C:D1:4C:BF:3F:29:54:27:B5:0B:96:20:73:1B:97:69
X509v3 Authority Key Identifier:
keyid:B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/86080D8A940511EE8A83F00DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.78.40.0/24
103.78.42.0/23
IPv6:
2001:df6:200::/48
Signature Algorithm: sha256WithRSAEncryption
25:97:d4:b9:96:49:02:d5:c2:b5:14:6c:3c:e7:23:31:f3:4c:
15:71:14:52:a7:6d:25:8a:6a:0c:33:8e:8f:f0:b9:3d:b7:49:
79:c6:47:5b:86:a9:ec:25:80:b0:80:c2:d2:f9:6d:2c:96:88:
71:b5:ce:65:11:3e:c1:3c:b1:37:ae:82:64:c0:44:b9:f2:e0:
bb:61:af:80:96:04:50:34:25:0b:c1:02:ec:1f:a0:d9:d0:23:
a7:9d:eb:97:67:1c:3c:30:1e:40:12:af:75:39:d0:b6:f0:78:
05:71:e6:fd:a4:59:2c:3a:db:68:f4:82:97:0b:0b:74:ec:d0:
57:07:69:1a:07:be:fe:63:78:e2:c6:c4:95:6a:f9:ed:22:fa:
9a:08:63:17:5f:2c:be:d4:cc:d1:8f:36:ae:9a:62:90:69:6f:
b9:42:24:75:bb:9d:b4:63:a0:1c:6f:ec:70:10:80:0d:fa:c7:
ca:37:4f:1d:b3:6e:82:93:6f:0d:39:e8:e8:1f:83:f6:ff:92:
94:c1:ad:52:49:2a:4b:11:77:ed:e1:96:be:be:29:f4:f7:4c:
13:34:64:27:98:33:a7:2b:d1:fb:99:3b:77:4c:57:4f:8e:17:
52:f5:95:e3:54:9e:ea:75:7c:b7:a0:94:43:ca:7a:a7:67:4f:
34:c5:4a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:06:11 2026 by rpki-client