
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/AF573166309511EABE9B5934C4F9AE02.roa
File: AF573166309511EABE9B5934C4F9AE02.roa (raw, json)
Hash identifier: NS7wTc9RWVEjhe14UUGO+2LOxEkOLR1MToMGLE7e6ZM=
Subject key identifier: 43:8C:E7:94:D9:A0:11:59:2E:EA:2C:DC:36:1F:CD:D9:D2:9B:57:71
Certificate issuer: /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
Certificate serial: 0EE5
Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/AF573166309511EABE9B5934C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:43:11 +0000
ROA not before: Wed 31 Dec 2025 18:15:07 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 60068
IP address blocks: 45.121.202.0/24 maxlen: 24
103.15.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl
rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:37:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3813 (0xee5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169ADA, serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
Validity
Not Before: Dec 31 18:15:07 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a46c9f-52df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6c:23:ee:cd:64:7f:96:56:af:06:63:24:20:
90:3e:ec:a5:dc:78:02:ba:1a:98:4d:c3:01:c3:bd:
c6:73:c2:91:a9:ab:76:6d:08:7e:41:ef:7c:99:ae:
1e:62:a7:d2:5e:12:78:14:66:e1:f0:97:46:7a:7d:
1e:c5:53:6c:17:33:52:94:4e:83:fd:f6:24:a1:72:
55:1f:0a:b6:84:a3:4c:78:df:96:e0:3a:e8:c0:c4:
a9:f7:fb:50:3a:13:cb:ed:f1:dd:33:35:6c:2a:a9:
69:48:c5:c1:d0:9d:af:a2:d1:0f:d3:bf:2a:2f:ec:
45:b2:c6:a0:bc:14:55:bb:58:9a:8c:79:84:ca:c3:
ff:55:ec:49:af:19:1f:3f:9f:b2:ab:2d:da:82:99:
07:02:4a:57:07:fe:7e:72:f5:c4:04:06:7b:86:bc:
29:99:ee:d0:5f:b9:f9:93:1b:7a:67:38:22:99:18:
89:b8:d9:ea:e4:aa:e8:29:8a:b0:e5:26:cb:26:5a:
89:3c:eb:d5:c9:72:28:96:b8:a0:4f:23:a2:27:ef:
4d:80:5a:8e:9d:60:0a:83:c3:1d:5b:e8:13:09:01:
5c:43:ea:5d:f9:9a:f9:b8:69:31:30:8b:58:2b:c6:
6b:f8:d5:cd:45:b0:0b:75:0a:9a:f3:09:73:ec:76:
b8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8C:E7:94:D9:A0:11:59:2E:EA:2C:DC:36:1F:CD:D9:D2:9B:57:71
X509v3 Authority Key Identifier:
keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/AF573166309511EABE9B5934C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.121.202.0/24
103.15.193.0/24
Signature Algorithm: sha256WithRSAEncryption
06:a0:43:2a:33:97:14:5b:07:53:bb:2b:e8:3b:b7:5a:e7:65:
83:fb:4f:85:04:45:11:e0:13:11:5e:73:4d:36:4c:0a:bf:ca:
80:86:f4:81:ce:c2:8e:ea:ae:d3:14:c3:bb:6b:91:82:88:6a:
4f:74:6d:54:0a:e6:34:9b:6e:96:52:1a:de:23:c9:5d:02:e7:
13:46:a5:2a:0c:09:75:41:09:2a:a4:26:0d:65:67:33:75:0c:
67:bd:a4:a9:f1:91:98:c2:ba:cf:36:4d:cc:05:d4:32:00:b5:
b3:29:37:b0:c6:54:1c:99:1b:da:ca:17:7d:db:4d:6e:87:1a:
df:df:9d:75:e7:44:1d:d9:2c:b3:6d:6a:a7:42:5e:c0:36:36:
0a:8f:49:e8:da:b0:ba:e6:94:e8:6e:1a:c4:a6:9d:8a:d5:00:
93:64:f9:98:aa:7a:83:e5:05:22:95:7d:00:74:20:3d:c0:12:
dd:62:f8:4d:17:37:01:1d:41:01:9a:62:93:3b:3c:50:49:7f:
f7:25:cf:fb:2a:eb:8f:88:10:d9:5c:c5:b4:e0:fa:eb:31:7d:
f3:20:6d:dc:e2:86:4e:d4:24:65:f7:6d:9a:6f:0c:22:e0:29:
42:b1:1a:f9:8d:e7:26:02:86:78:c9:9b:6a:6e:d2:47:ce:3c:
96:ad:63:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:14 2026 by rpki-client