
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/174B2A3441B611F0A03F6C24C4F9AE02.roa
File: 174B2A3441B611F0A03F6C24C4F9AE02.roa (raw, json)
Hash identifier: EeACrS/nZVP/Bx9ck4hFb529qLPOmH7V9D3hekKChMM=
Subject key identifier: FF:22:85:8D:35:76:5D:9C:B2:00:12:66:B2:1F:0E:26:AB:46:EA:EF
Certificate issuer: /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5
Certificate serial: 256D
Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/174B2A3441B611F0A03F6C24C4F9AE02.roa
Signing time: Thu 28 May 2026 16:18:20 +0000
ROA not before: Thu 28 May 2026 16:18:20 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 132730
IP address blocks: 103.24.32.0/22 maxlen: 22
103.24.32.0/22 maxlen: 24
103.24.32.0/24 maxlen: 24
103.24.33.0/24 maxlen: 24
103.24.34.0/24 maxlen: 24
103.24.35.0/24 maxlen: 24
103.224.28.0/22 maxlen: 24
103.231.60.0/22 maxlen: 22
103.231.60.0/24 maxlen: 24
103.231.61.0/24 maxlen: 24
103.231.62.0/24 maxlen: 24
103.231.63.0/24 maxlen: 24
163.53.28.0/22 maxlen: 22
163.53.28.0/22 maxlen: 24
163.53.28.0/24 maxlen: 24
163.53.29.0/24 maxlen: 24
163.53.30.0/24 maxlen: 24
163.53.31.0/24 maxlen: 24
2406:b100::/32 maxlen: 32
2406:b100::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl
rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9581 (0x256d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169CD3, serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5
Validity
Not Before: May 28 16:18:20 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a186acc-636d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1d:99:0a:20:08:74:ba:0b:12:c7:b7:ab:7d:
35:37:7c:81:85:93:2d:4e:97:f0:e5:97:b7:2d:0a:
d2:f9:c8:ea:b4:d3:4d:0c:a3:08:30:99:5e:72:eb:
c3:b8:4d:6e:18:0d:50:4a:ca:d8:6f:d7:11:4f:fa:
7e:cc:bb:a8:ea:1d:13:d1:90:aa:f6:47:e1:4c:63:
1c:e6:d8:c7:f0:b3:6e:1b:6f:38:85:7e:a6:53:23:
53:a8:08:e6:d1:bf:17:66:3b:38:28:56:dd:49:93:
c9:5e:e1:87:94:0e:fc:a2:c7:62:b6:3a:c7:75:39:
9f:96:cc:86:16:ff:89:74:5b:03:2f:71:43:c8:e8:
3f:26:14:e0:97:10:31:30:66:87:cb:ee:c2:b3:0c:
74:92:c3:62:c3:e3:9f:89:95:c0:55:34:18:f6:6f:
b2:75:dd:e8:c3:a7:f6:dc:93:46:4e:62:dd:91:dd:
d8:02:92:e6:57:2d:70:6e:8d:45:60:bb:a9:f3:16:
51:ea:52:78:4c:90:4b:c9:cb:fe:d1:44:48:ef:51:
8c:8b:aa:42:91:15:4b:3d:1c:08:81:52:25:bb:00:
e8:41:87:6c:05:3b:1a:4b:20:13:11:45:a6:d6:3a:
80:99:7c:46:63:b8:a6:a8:36:40:9d:78:52:07:87:
ba:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:22:85:8D:35:76:5D:9C:B2:00:12:66:B2:1F:0E:26:AB:46:EA:EF
X509v3 Authority Key Identifier:
keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/174B2A3441B611F0A03F6C24C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.24.32.0/22
103.224.28.0/22
103.231.60.0/22
163.53.28.0/22
IPv6:
2406:b100::/32
Signature Algorithm: sha256WithRSAEncryption
93:de:87:6d:b7:53:bd:4f:6b:2b:03:cd:49:49:98:b9:13:9c:
fc:f3:35:21:78:16:94:41:8b:2f:10:78:ee:19:79:0d:17:98:
68:ad:39:6c:37:10:f4:06:c6:86:83:f2:70:7e:f9:6d:7f:d4:
7b:ac:be:9c:ec:2b:0c:48:49:fc:94:2c:6c:07:2a:0a:11:85:
6b:df:90:32:cc:46:8d:6a:e8:d4:ba:21:d2:f9:e4:3c:88:70:
4e:6b:6e:13:cc:14:7d:82:04:9e:a0:3f:0e:6f:04:65:67:fe:
74:71:45:39:9f:07:3c:61:38:0c:73:b8:3e:84:8a:02:3b:49:
4b:85:a1:2b:b6:e0:39:9c:6b:8d:bf:7d:f2:fa:73:9a:62:75:
ec:4b:a8:3b:f3:a3:d3:03:14:0d:c6:a1:5b:34:02:ba:b0:97:
50:7b:a6:13:a9:05:fb:08:6c:5f:4b:94:19:16:04:db:63:28:
53:6d:04:94:ea:a9:55:ac:7b:11:78:0a:90:46:22:60:d7:fe:
b2:65:d4:f2:cc:2d:dd:00:7f:ac:99:5c:b7:90:86:1a:ad:fc:
d3:76:3b:ff:a3:47:e2:13:e3:8a:6f:c3:04:5b:69:ad:99:69:
1f:37:1f:d7:e7:e6:d2:5d:09:1a:84:b9:0b:e2:39:a7:b2:cd:
a2:a3:23:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:09:25 2026 by rpki-client