
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/ED31D84EC81D11EBA4C0E321C4F9AE02.roa
File: ED31D84EC81D11EBA4C0E321C4F9AE02.roa (raw, json)
Hash identifier: tx+Y/n+r9hRdlH/NzXABSvt/2qdhadoLP0Jf7gqVFNU=
Subject key identifier: 79:EA:25:7A:D2:D9:C0:7E:9C:07:41:56:3C:0E:9A:9C:29:D3:F5:DE
Certificate issuer: /CN=A9169903/serialNumber=C437D58F123A6AE057C608E216BB6BFD6584476A
Certificate serial: 0647
Authority key identifier: C4:37:D5:8F:12:3A:6A:E0:57:C6:08:E2:16:BB:6B:FD:65:84:47:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/ED31D84EC81D11EBA4C0E321C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:49:08 +0000
ROA not before: Sat 12 Apr 2025 23:02:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134693
IP address blocks: 103.164.162.0/23 maxlen: 24
2407:3d40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.crl
rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1607 (0x647)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169903, serialNumber=C437D58F123A6AE057C608E216BB6BFD6584476A
Validity
Not Before: Apr 12 23:02:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3fd84-37a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:f7:72:b7:31:87:9a:25:4d:00:07:9c:49:
a3:f6:bd:23:fd:4b:50:4c:39:6e:b9:aa:08:22:a3:
c6:1b:3d:9c:a6:58:ec:47:1b:8d:f9:6e:98:f4:c2:
38:31:b0:52:24:c7:c4:0d:30:0c:90:f2:e4:e3:44:
93:7d:85:09:c3:de:eb:e9:ea:5e:fd:30:0d:18:ef:
1f:d2:e9:aa:bc:3c:a9:d9:d9:8e:c7:71:d7:24:5d:
8d:a2:40:81:51:83:4d:1a:b3:f8:fc:e9:b8:5c:b0:
ce:ef:6c:2a:79:46:e2:37:01:f1:8b:39:3c:13:a5:
a5:37:01:89:bc:5a:cd:4a:b9:12:32:27:ec:73:53:
3e:0f:aa:2d:26:a3:a1:c5:81:84:ac:f3:3a:97:16:
b3:f2:46:00:0f:95:9f:90:71:62:c8:82:ee:c3:69:
3a:30:f0:ab:52:3a:27:b3:79:de:cf:6e:64:d1:fb:
61:86:07:7f:02:ec:2a:e0:9e:08:fa:32:f2:f8:c0:
84:f3:d2:f1:f5:56:39:9f:08:4a:01:b9:6a:5e:fd:
6d:4f:92:ae:84:0b:7d:b5:29:e0:91:d9:d4:6d:18:
cf:c3:3d:2f:b4:c7:be:57:67:17:a0:a4:ca:ce:46:
24:fc:4a:64:7c:ff:7f:7a:02:65:85:9b:1f:1c:51:
25:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EA:25:7A:D2:D9:C0:7E:9C:07:41:56:3C:0E:9A:9C:29:D3:F5:DE
X509v3 Authority Key Identifier:
keyid:C4:37:D5:8F:12:3A:6A:E0:57:C6:08:E2:16:BB:6B:FD:65:84:47:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/ED31D84EC81D11EBA4C0E321C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.164.162.0/23
IPv6:
2407:3d40::/32
Signature Algorithm: sha256WithRSAEncryption
10:f1:5b:9f:81:f5:72:99:9f:72:f3:1e:da:6f:3b:15:55:95:
95:71:68:b0:ee:33:fc:c6:ca:1c:80:3a:af:7b:e1:28:fc:13:
a9:33:22:bc:d5:57:68:e5:df:c1:67:be:56:6f:e3:a0:f6:99:
e4:02:21:60:6b:d2:00:a0:a7:2c:f7:15:b9:f7:1d:15:b0:42:
3a:6d:d4:1d:64:87:dc:1a:48:08:b4:63:cf:41:97:25:36:e0:
64:80:a2:e7:16:73:47:16:ef:88:74:0d:4c:6b:05:7d:37:15:
2d:77:12:57:0f:16:40:b4:54:77:c4:f1:63:07:f7:8d:bd:12:
4a:b2:85:ae:6b:08:6b:7c:ae:5e:9d:b9:f9:4d:4f:4e:0f:6f:
07:78:fa:76:c0:e9:45:b1:ac:f5:8f:04:11:88:59:7c:d5:fa:
11:b3:ac:26:d1:c4:92:9f:f5:8d:ea:ce:9d:e4:55:e8:52:a2:
97:5f:1b:c7:f0:7a:77:a8:e1:f7:25:5f:b3:50:2d:e9:29:0f:
99:e6:8c:f9:e5:48:96:43:7a:e0:1c:79:9d:15:c8:aa:19:ee:
5a:41:1c:c6:55:64:d8:b7:66:a2:a9:f7:a7:0e:f5:5d:6e:58:
12:08:56:e8:93:36:43:b9:bb:3c:19:91:c8:19:f4:a9:3a:d1:
bd:68:a3:04
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICBkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk5MDMxMTAvBgNVBAUTKEM0MzdENThGMTIzQTZBRTA1N0M2MDhFMjE2QkI2QkZE
NjU4NDQ3NkEwHhcNMjUwNDEyMjMwMjU1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZmQ4NC0zN2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtqP3crcxh5olTQAHnEmj9r0j/UtQTDluuaoIIqPGGz2cpljsRxuN+W6Y9MI4
MbBSJMfEDTAMkPLk40STfYUJw97r6epe/TANGO8f0umqvDyp2dmOx3HXJF2NokCB
UYNNGrP4/Om4XLDO72wqeUbiNwHxizk8E6WlNwGJvFrNSrkSMifsc1M+D6otJqOh
xYGErPM6lxaz8kYAD5WfkHFiyILuw2k6MPCrUjons3nez25k0fthhgd/Auwq4J4I
+jLy+MCE89Lx9VY5nwhKAblqXv1tT5KuhAt9tSngkdnUbRjPwz0vtMe+V2cXoKTK
zkYk/EpkfP9/egJlhZsfHFElAQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFHnqJXrS
2cB+nAdBVjwOmpwp0/XeMB8GA1UdIwQYMBaAFMQ31Y8SOmrgV8YI4ha7a/1lhEdq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTkwMy9FRTZCNzQxOEM4
MTgxMUVCODNDRUVCNEFDNEY5QUUwMi94RGZWanhJNmF1Qlh4Z2ppRnJ0cl9XV0VS
Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hEZlZqeEk2YXVCWHhnamlGcnRyX1dXRVIyby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njk5MDMvRUU2Qjc0MThDODE4MTFFQjgzQ0VFQjRBQzRGOUFFMDIvRUQzMUQ4NEVD
ODFEMTFFQkE0QzBFMzIxQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ6SiMA0EAgACMAcDBQAkBz1AMA0GCSqGSIb3DQEBCwUAA4IBAQAQ
8VufgfVymZ9y8x7abzsVVZWVcWiw7jP8xsocgDqve+Eo/BOpMyK81Vdo5d/BZ75W
b+Og9pnkAiFga9IAoKcs9xW59x0VsEI6bdQdZIfcGkgItGPPQZclNuBkgKLnFnNH
Fu+IdA1MawV9NxUtdxJXDxZAtFR3xPFjB/eNvRJKsoWuawhrfK5enbn5TU9OD28H
ePp2wOlFsaz1jwQRiFl81foRs6wm0cSSn/WN6s6d5FXoUqKXXxvH8Hp3qOH3JV+z
UC3pKQ+Z5oz55UiWQ3rgHHmdFciqGe5aQRzGVWTYt2aiqfenDvVdblgSCFbokzZD
ubs8GZHIGfSpOtG9aKME
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:23:51 2026 by rpki-client