
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/CC72753A7CE511E985E29B7BC4F9AE02.roa
File: CC72753A7CE511E985E29B7BC4F9AE02.roa (raw, json)
Hash identifier: 4tcTWtdYNVrFzyHxN1+sODGXpMdP8UrLT8P96A9YCSI=
Subject key identifier: 35:F2:93:B3:06:1F:3E:59:D9:1A:CC:B1:74:53:EB:A0:EE:22:1C:6A
Certificate issuer: /CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Certificate serial: 1015
Authority key identifier: 89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/CC72753A7CE511E985E29B7BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:17:00 +0000
ROA not before: Fri 02 May 2025 17:57:45 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 139002
IP address blocks: 103.138.94.0/24 maxlen: 24
2001:df0:3a80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:07:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4117 (0x1015)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169CEB, serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Validity
Not Before: May 2 17:57:45 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a42e3c-cde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:52:c6:93:4a:63:43:a3:b9:e3:09:cc:cb:39:
ec:64:f8:ae:22:42:56:ca:ec:4a:77:ca:e4:49:f5:
60:52:bf:f8:ca:59:26:46:69:cd:08:71:c6:63:4a:
d0:9d:6c:b0:79:3a:19:bc:ca:bb:93:b7:27:30:0c:
08:a7:50:96:db:df:2e:6c:d0:39:dc:10:64:1b:d2:
a5:b2:9c:2e:b9:b2:76:96:66:10:2d:6c:37:2c:9a:
30:b8:e3:b8:1a:a4:24:09:f0:6e:00:fa:3b:2e:f6:
51:df:b4:dd:bc:05:d6:da:8a:e7:3a:73:c6:98:f1:
5b:55:34:83:48:29:98:13:a3:47:c1:ff:2a:c1:74:
08:47:3a:28:0f:2f:06:16:e3:26:4d:82:2e:a5:62:
75:7a:00:37:ee:b5:49:ad:00:e4:f6:44:47:fc:ac:
20:2d:b9:af:a1:31:10:24:44:0f:0d:39:5b:ec:7b:
7b:35:6e:0e:c5:25:7e:18:a7:7b:8f:ea:5b:cd:8d:
8b:90:bf:bf:4b:63:d8:0d:e3:ec:1a:f3:16:26:0d:
0e:e0:fc:d4:7d:cd:e3:9e:86:09:02:76:b8:f3:2c:
38:08:fd:01:e6:27:a7:47:d4:90:72:7b:2f:05:31:
e5:5c:f3:4f:c7:15:af:06:e6:c8:15:a6:a4:0f:65:
7d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F2:93:B3:06:1F:3E:59:D9:1A:CC:B1:74:53:EB:A0:EE:22:1C:6A
X509v3 Authority Key Identifier:
keyid:89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/CC72753A7CE511E985E29B7BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.94.0/24
IPv6:
2001:df0:3a80::/48
Signature Algorithm: sha256WithRSAEncryption
69:58:53:bd:ac:09:9c:68:50:99:d1:e9:6a:01:e6:ee:bc:0b:
c1:b4:8a:d3:97:f8:16:99:d4:c1:d2:1f:7d:c2:3c:b8:92:cd:
35:15:fe:84:6d:27:0d:0d:4a:d5:42:11:f6:0a:0d:f7:1d:f5:
c7:d6:cc:dc:12:92:c9:e5:c4:39:3f:1c:6d:e1:ec:c3:51:af:
79:b9:41:87:31:b5:0e:82:14:5c:8a:f5:1b:e3:84:7c:3d:52:
55:73:f7:ab:ef:7b:c0:ab:3d:d3:53:a0:de:36:16:cf:43:db:
c3:0d:f2:d3:10:0b:99:d2:fc:58:0f:a8:84:32:cc:3a:1b:a7:
cf:03:6c:b4:cc:5f:86:fc:af:a3:bb:7e:1c:46:c5:da:44:84:
c6:a7:bb:db:d2:58:cc:32:03:1a:81:c9:17:89:5a:1f:0c:ee:
0b:dd:d8:db:32:ba:fd:b0:ff:24:58:f5:06:d3:93:fa:39:a2:
5f:ef:15:41:4f:b9:6c:d3:39:8a:48:05:40:e9:32:0a:04:37:
7b:1a:b9:07:06:90:82:c9:7a:97:61:b5:b6:d0:cf:80:76:01:
08:e7:f7:ad:3c:67:1a:7c:bb:e5:19:9c:1d:4b:43:ba:0d:62:
67:70:19:b9:a9:a3:91:d5:40:45:09:e7:ed:6b:fd:d5:65:b2:
b4:1e:ac:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:26 2026 by rpki-client