
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/842CE8807AE311EF91F51E42C4F9AE02.roa
File: 842CE8807AE311EF91F51E42C4F9AE02.roa (raw, json)
Hash identifier: xw9T3a2Z489pZsdQ4x8tWBqT2E0wqOqSqnMIFsl4bOU=
Subject key identifier: 18:82:15:24:51:B0:5A:A3:8A:E6:95:E5:87:4C:DA:C1:77:4B:1E:89
Certificate issuer: /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5
Certificate serial: 2537
Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/842CE8807AE311EF91F51E42C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:27:31 +0000
ROA not before: Thu 05 Jun 2025 02:39:00 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 38235
IP address blocks: 103.231.60.0/22 maxlen: 24
163.53.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl
rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9527 (0x2537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169CD3, serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5
Validity
Not Before: Jun 5 02:39:00 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a422a2-43d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:31:20:73:53:31:fa:cf:ad:48:57:8a:8f:
de:8a:d6:a1:89:2f:ed:49:ec:f9:23:58:a7:37:87:
e6:ff:90:4e:4e:4e:59:71:19:c3:a5:f9:a9:b7:42:
b0:27:4b:52:8a:75:40:7b:90:bf:cd:77:e2:f4:e1:
2b:4e:84:23:77:ed:29:bd:e3:c8:6c:49:26:29:cd:
63:27:5b:0f:46:43:4a:89:df:13:dc:23:be:16:2e:
7c:22:5a:d3:be:9a:a4:7a:02:13:b6:b3:5d:6b:de:
14:2e:86:5c:44:9f:57:b9:f3:2b:56:0a:b1:19:34:
c9:fc:b2:2d:66:3c:ff:77:93:7f:46:64:5b:76:70:
91:3c:db:20:01:b9:5c:09:91:bd:95:ec:52:65:0b:
1d:99:77:34:43:73:c0:c5:b0:2b:fd:03:bb:b5:23:
28:76:8b:51:94:f4:97:f5:ff:31:8c:ae:67:22:8b:
b0:0b:10:19:87:fb:18:da:33:82:fe:bd:8a:8d:c0:
bd:d3:3f:e8:1e:ff:70:0e:f0:9b:af:8f:17:5a:a0:
a3:10:99:fb:e5:1e:94:6a:ae:7a:55:27:e4:b3:6f:
7d:a1:29:15:21:cd:5b:ef:e4:b3:ca:23:00:7c:d2:
1e:15:3b:cd:d3:81:d0:e4:f7:b7:e2:22:b8:6c:07:
16:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:82:15:24:51:B0:5A:A3:8A:E6:95:E5:87:4C:DA:C1:77:4B:1E:89
X509v3 Authority Key Identifier:
keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/842CE8807AE311EF91F51E42C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.231.60.0/22
163.53.28.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:e9:e7:49:33:bb:bd:fe:c8:53:40:67:2e:f2:ed:8a:96:b9:
94:17:27:19:5e:a7:b4:7a:ca:ff:d4:8f:7e:72:c4:4f:3b:01:
0b:84:53:cf:2e:0e:a8:ec:3c:d1:05:77:92:80:f7:10:40:17:
4e:63:c2:f4:b0:ba:7a:2d:53:04:8c:b6:4d:f2:0f:1d:50:14:
7c:a0:82:5c:66:41:f2:d9:db:79:ef:8d:e0:21:aa:d6:6a:0f:
cf:09:9d:2c:47:00:9e:71:31:ea:1f:39:95:e4:7d:b4:9f:d6:
a2:9f:32:c2:40:79:0c:47:45:bb:c8:c6:aa:b7:2f:52:52:6b:
83:78:7a:1a:1c:fb:7b:1d:d3:34:89:e2:60:d1:e0:8c:59:d0:
f2:40:d3:67:92:9b:5f:9e:91:00:01:f8:51:c2:77:9d:d6:0b:
a8:b7:37:1c:98:f3:f4:7c:28:29:2f:f2:2d:d5:3e:32:60:a4:
63:17:2b:3b:1b:1e:b2:96:ec:13:ac:68:de:bf:14:62:f7:db:
0c:ab:99:a7:c5:9f:c0:b2:66:56:2c:9a:1b:c9:33:c8:32:a8:
0f:7a:45:d7:93:2b:6a:0f:ea:3b:4d:0c:bb:4d:be:32:6d:e1:
da:be:4c:a2:65:7f:fd:93:88:c0:3f:8b:c1:3d:2a:24:51:4f:
59:fc:ec:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:03 2026 by rpki-client