
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/2839F45288C211ECBEA38C0BC4F9AE02.roa
File: 2839F45288C211ECBEA38C0BC4F9AE02.roa (raw, json)
Hash identifier: 1bURknZLphLjjNmWkkCa2kpQ5sTm9WyN//r4fxh3Jx8=
Subject key identifier: E8:CF:DA:73:1F:4E:52:52:20:81:5C:4F:F6:35:89:4D:F4:CE:66:E6
Certificate issuer: /CN=A9170F5D/serialNumber=15ECBEB85B693F1258A903667AF02C627F69ADC9
Certificate serial: 0469
Authority key identifier: 15:EC:BE:B8:5B:69:3F:12:58:A9:03:66:7A:F0:2C:62:7F:69:AD:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/2839F45288C211ECBEA38C0BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 01:21:55 +0000
ROA not before: Sun 01 Mar 2026 01:21:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17557
IP address blocks: 103.178.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.crl
rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:22:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1129 (0x469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170F5D, serialNumber=15ECBEB85B693F1258A903667AF02C627F69ADC9
Validity
Not Before: Mar 1 01:21:55 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a394b3-ed5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0b:fe:8b:6e:0b:e4:17:5c:24:25:02:8d:01:
d1:0a:35:e4:c5:3d:b9:b1:1d:bc:8f:b4:8f:7e:f5:
f3:cd:cf:1d:18:5a:78:30:f9:b7:7b:dd:ea:40:ed:
05:50:a7:eb:86:d4:a8:76:88:27:28:5d:4b:80:34:
4b:69:94:73:8b:a0:b5:48:8f:98:28:07:04:40:75:
b4:79:25:88:24:96:3f:55:58:b9:88:80:27:85:f0:
ab:1e:ef:6c:b8:11:d6:2e:3b:dd:39:e3:c6:c6:cd:
48:b9:4f:7d:32:21:d3:5a:29:ed:78:de:85:87:5b:
e8:7e:ec:39:0a:a8:7e:0c:a1:8b:e7:26:51:f6:43:
95:50:fc:21:19:b9:4c:1f:33:6b:c0:fc:5f:24:87:
79:67:2b:08:0d:4e:bc:b3:40:c5:c2:53:d6:72:5a:
d5:33:d4:09:7a:dc:75:77:9c:bb:2f:fc:5f:91:20:
15:57:07:15:c6:bb:9e:69:d2:38:c8:db:20:27:1d:
51:b3:5c:45:d1:81:75:16:fd:b8:eb:57:9e:33:0a:
ac:ce:bd:1b:9b:8f:1e:2a:0b:cb:bf:9d:94:b1:b1:
1f:27:87:4c:c3:d3:9e:9d:79:26:52:b3:c2:3a:a0:
7a:87:f8:d6:15:8c:42:dc:f6:0d:08:52:0b:d5:7d:
31:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CF:DA:73:1F:4E:52:52:20:81:5C:4F:F6:35:89:4D:F4:CE:66:E6
X509v3 Authority Key Identifier:
keyid:15:EC:BE:B8:5B:69:3F:12:58:A9:03:66:7A:F0:2C:62:7F:69:AD:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/2839F45288C211ECBEA38C0BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.178.120.0/24
Signature Algorithm: sha256WithRSAEncryption
40:bc:5c:ad:ad:cc:0d:a1:91:24:73:31:f4:fc:b9:e4:da:c6:
c9:50:19:a9:36:18:fe:53:46:dc:75:ad:46:b6:d3:49:e7:9b:
a7:36:b0:5e:6e:f3:2c:44:7c:0d:6c:c2:9f:d3:86:f3:e3:81:
48:61:d0:ec:69:8b:e9:f6:2c:a2:ea:9f:72:73:27:7c:fa:f4:
3d:73:a7:76:4c:a1:29:7b:d6:21:c4:04:d8:0f:95:41:fe:8a:
b2:0a:00:c5:58:49:40:2c:b7:ab:6b:6c:8b:43:81:0e:17:00:
19:8a:f8:e9:2c:ba:e9:eb:b5:37:90:63:83:6b:bc:ac:7a:5b:
4f:bb:99:7c:d3:d6:fc:b8:46:b5:db:8e:7f:75:ef:bc:5c:d0:
87:7f:d8:0c:59:aa:63:3a:63:ca:4d:fc:16:3e:0e:55:d4:e4:
58:01:f1:4b:3a:09:1e:c8:c2:19:63:c5:77:f1:3c:4d:13:00:
e8:c4:59:4a:e9:e7:c3:5e:1d:1a:95:a9:5f:09:20:b0:32:e4:
a5:d8:7a:9c:9a:1f:aa:2f:d8:8e:88:71:36:c0:64:ae:f4:5b:
ca:d7:ba:c8:b4:58:0a:78:17:a9:28:14:68:07:3e:aa:99:e8:
6f:f8:fe:a8:6c:74:c8:6c:71:c0:da:a3:d2:12:04:e1:1c:1c:
4a:70:64:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:23 2026 by rpki-client