
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/7FCFB4745E8411EE89DF693EC4F9AE02.roa
File: 7FCFB4745E8411EE89DF693EC4F9AE02.roa (raw, json)
Hash identifier: eopWrcCTKAsMxcnNdOCRso+7nTOlyhMbbG0+6DVN/mA=
Subject key identifier: B5:4E:A3:CF:C5:E6:DC:A0:C2:39:F2:BB:22:21:12:17:9A:85:77:4C
Certificate issuer: /CN=A9169BB4/serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4
Certificate serial: 0603
Authority key identifier: 85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/7FCFB4745E8411EE89DF693EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:38:40 +0000
ROA not before: Wed 09 Jul 2025 00:05:11 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 140880
IP address blocks: 103.152.204.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl
rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:37:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1539 (0x603)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169BB4, serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4
Validity
Not Before: Jul 9 00:05:11 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a43350-7ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:56:94:55:8d:be:7d:89:05:fa:43:40:44:
6a:ba:db:7b:9a:1c:5a:73:10:2e:5a:3a:f4:6f:d3:
39:37:bf:a1:ce:3e:44:19:f9:3f:2f:47:93:46:a2:
a2:69:c6:42:f9:b2:4a:71:84:73:ef:51:d4:cd:38:
20:93:ea:22:a3:96:95:be:5e:1e:e2:5b:e7:40:ed:
bb:76:ae:77:10:a4:3c:98:6a:b5:16:82:99:4e:9d:
79:f0:7c:f3:b4:a8:68:b0:91:9f:23:82:85:7d:88:
37:ab:e2:76:37:65:d7:22:16:94:40:09:55:53:f7:
40:20:06:d8:0f:4e:5b:7e:09:57:d5:2b:63:72:c3:
61:af:dd:b1:30:98:44:fa:8e:d7:fe:ee:05:05:2d:
e5:56:16:d6:4a:64:df:b8:f1:1b:33:84:9c:1b:0b:
ef:5b:1b:b1:e5:f2:3c:a7:70:b8:8f:dd:45:65:93:
30:7d:f0:25:3c:43:37:48:73:78:ba:4f:1d:c9:ff:
93:bb:14:c0:c4:db:41:c9:87:af:83:55:96:25:35:
38:d3:f5:55:53:03:b9:d7:45:62:25:60:ed:ef:06:
66:57:60:ea:f5:79:7e:a4:1e:4d:a1:9c:8d:19:3b:
02:5d:b8:b0:fd:3f:b3:dc:b0:9e:a8:37:5c:2e:39:
11:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4E:A3:CF:C5:E6:DC:A0:C2:39:F2:BB:22:21:12:17:9A:85:77:4C
X509v3 Authority Key Identifier:
keyid:85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/7FCFB4745E8411EE89DF693EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.152.204.0/23
Signature Algorithm: sha256WithRSAEncryption
84:f3:32:7f:b1:b0:60:fb:21:e3:6a:60:6f:11:32:62:21:d8:
88:f7:29:c2:4e:c7:40:bf:bc:dd:32:92:ed:79:09:d0:7f:ae:
58:98:5b:91:81:c5:c1:5c:da:ae:51:d5:ac:e0:25:2e:ca:e5:
5d:b6:ad:b4:de:69:ba:27:46:d5:b8:e2:bb:7c:40:42:a1:96:
e5:b3:33:f1:d9:5b:c0:e8:3c:ab:b0:c0:b9:13:55:3b:c9:fb:
56:7f:28:da:ad:c0:ae:df:24:08:14:e0:de:a5:3e:e2:e7:5a:
d2:ec:75:82:3d:29:9c:a8:94:cf:8a:d6:85:da:e4:2f:4c:20:
f2:7d:b4:b4:1b:24:9f:12:b2:0d:2a:b8:94:74:54:a5:f3:91:
85:8d:9b:ce:ce:7e:c8:18:e6:65:b6:73:b5:30:2d:d9:c1:48:
c2:c0:a5:15:53:f7:cf:b6:cf:b0:0c:9a:37:4e:2b:9f:5b:03:
71:42:36:67:ee:f7:2a:17:74:24:77:75:45:56:52:aa:27:77:
98:b8:6d:d9:98:e6:cd:e2:90:ee:18:42:91:58:af:c3:c9:9f:
27:72:c2:0e:ab:0f:1f:b4:38:4b:bd:d4:61:73:d9:9b:20:d5:
2f:b1:60:46:d1:e5:83:6e:ce:e9:23:c8:80:d0:10:13:95:58:
84:d4:b8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:24:15 2026 by rpki-client