
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/27178D9E7FBC11EEAF80B825C4F9AE02.roa
File: 27178D9E7FBC11EEAF80B825C4F9AE02.roa (raw, json)
Hash identifier: sVfM9UcBSAxUn8++eCgurkk9Zg1ANJCcYtd5vbh1oJM=
Subject key identifier: 29:4A:2F:47:AA:F8:DC:D8:A9:36:90:C1:BD:F6:44:B7:EA:21:02:CD
Certificate issuer: /CN=A916B02F/serialNumber=87F31B201BDD187581540C5B8B864438C29990B9
Certificate serial: 01B7
Authority key identifier: 87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/27178D9E7FBC11EEAF80B825C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:40:31 +0000
ROA not before: Fri 27 Jun 2025 04:23:08 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 134484
IP address blocks: 103.197.156.0/23 maxlen: 23
103.197.156.0/24 maxlen: 24
103.197.157.0/24 maxlen: 24
2001:df2:6f40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl
rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 439 (0x1b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B02F, serialNumber=87F31B201BDD187581540C5B8B864438C29990B9
Validity
Not Before: Jun 27 04:23:08 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a3ed6f-dcd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:91:f2:5d:7d:92:bf:db:0e:8b:51:c7:df:
b7:9d:0b:01:df:f8:e4:56:cd:1d:4e:c0:72:13:00:
59:fe:a3:a9:40:8c:4c:c9:dd:4b:a9:7f:f6:b1:ef:
ca:d9:6c:f5:47:f5:a1:18:d0:ea:b4:20:fd:f3:95:
1b:1c:cd:d1:3e:1e:15:f3:57:fb:94:dd:a1:8c:5a:
cf:32:d1:b1:2d:ad:f1:9a:e0:2d:c2:57:3b:7c:cc:
4b:df:a8:fb:cb:57:2b:42:e1:d9:14:fd:29:95:78:
60:fd:4e:ca:02:29:44:60:c6:68:06:53:52:21:b3:
01:62:b3:f0:8b:c4:9b:cd:44:9f:46:77:08:bc:6a:
78:ca:d6:92:eb:1f:70:67:37:3a:1a:7c:ed:8a:8d:
72:be:53:e9:b9:dc:da:31:b7:b8:54:ed:a9:8b:1e:
c6:5b:fe:f6:7b:b4:9a:52:a9:10:93:e7:7b:9b:68:
0f:d5:5f:cd:d7:43:f3:6c:e6:38:94:08:88:08:71:
7e:a2:33:95:70:d3:15:2d:a2:d1:f4:0f:ac:a6:e0:
ac:25:69:8c:88:45:31:de:e0:97:97:a1:c6:8a:a5:
d8:a5:35:59:9c:eb:b5:9a:f8:a5:02:d0:37:be:e8:
5b:09:2f:7b:ae:22:71:e2:39:db:43:05:4a:84:ee:
57:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4A:2F:47:AA:F8:DC:D8:A9:36:90:C1:BD:F6:44:B7:EA:21:02:CD
X509v3 Authority Key Identifier:
keyid:87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/27178D9E7FBC11EEAF80B825C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.197.156.0/23
IPv6:
2001:df2:6f40::/48
Signature Algorithm: sha256WithRSAEncryption
bc:95:e2:95:9c:49:61:1e:38:3a:29:9f:50:59:b8:05:a7:36:
b8:2d:47:b3:fd:75:7e:b3:bf:d1:75:a1:34:a3:1f:33:58:42:
5f:77:cb:68:c1:10:7a:0f:01:95:65:99:21:18:c9:c6:2c:12:
b1:e2:d5:e2:6a:71:a5:5d:14:81:0d:e4:ed:b8:b3:8d:92:b5:
dc:63:dc:2d:a8:ee:b6:29:b4:de:bc:71:be:c2:d2:a2:da:22:
48:fa:d2:6e:2f:f2:3a:d5:7b:1a:f3:1f:05:bf:39:01:b8:e2:
ac:40:03:39:88:e4:e0:61:27:36:18:59:53:c5:a9:be:be:c6:
08:24:f4:28:bd:07:07:a4:69:66:74:b0:de:37:d7:7a:2a:42:
ee:fb:33:dd:5f:17:76:a2:93:1c:0f:d3:f9:d4:aa:5e:b0:bb:
4a:d8:52:4d:81:6a:5e:10:c7:58:3e:1c:52:e3:3b:0e:50:45:
1e:e9:a0:8a:c6:ea:e7:e7:68:f9:e9:20:8f:45:04:7b:51:4e:
31:9b:f6:a8:7a:3f:6f:75:2a:fb:80:79:40:8f:9c:11:09:00:
b6:a2:68:f4:f3:82:ad:6e:df:a8:a8:76:b4:c2:81:09:dc:e6:
04:8e:23:c4:a5:fd:4a:71:a4:61:ea:fa:09:8a:f7:8d:fb:51:
61:3a:ac:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:52 2026 by rpki-client