
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/78CDDAF8BD0811F1AE3F3EDC4411F970.roa
File: 78CDDAF8BD0811F1AE3F3EDC4411F970.roa (raw, json)
Hash identifier: STVtWT6z+FpHpAfO3SFX602xRFgz/cDkZsSG1BE2UG4=
Subject key identifier: 28:29:D1:7E:D3:0E:CC:9F:B2:0E:EB:E5:E1:29:48:5F:0D:97:83:E3
Certificate issuer: /CN=A9170F5D/serialNumber=15ECBEB85B693F1258A903667AF02C627F69ADC9
Certificate serial: 04E2
Authority key identifier: 15:EC:BE:B8:5B:69:3F:12:58:A9:03:66:7A:F0:2C:62:7F:69:AD:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/78CDDAF8BD0811F1AE3F3EDC4411F970.roa
Signing time: Wed 30 Sep 2026 19:52:31 +0000
ROA not before: Wed 30 Sep 2026 19:52:31 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 153641
IP address blocks: 103.178.120.0/24 maxlen: 24
103.178.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.crl
rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 23:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1250 (0x4e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170F5D, serialNumber=15ECBEB85B693F1258A903667AF02C627F69ADC9
Validity
Not Before: Sep 30 19:52:31 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6abd687f-c3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:58:40:68:d0:26:80:a2:cb:72:a3:15:7b:09:
6b:90:39:bb:28:63:60:ea:f8:bb:d3:02:c7:22:1e:
1f:ff:d2:fe:be:ca:f3:d6:97:7d:9f:c4:7a:f5:79:
fc:be:16:a3:7a:93:b5:1a:bf:19:e5:72:50:3a:48:
e2:40:e9:f2:3f:19:1c:c5:83:c3:c9:ac:90:d9:94:
73:e0:d5:a6:e4:42:64:a5:1c:be:f9:1c:d4:ce:8d:
b1:c3:1f:bd:0d:57:b9:4a:be:9c:37:29:3d:37:da:
53:79:85:e1:be:cb:1c:37:48:79:f5:7d:52:3e:8b:
78:b2:66:ee:2b:f5:7f:a1:ec:54:88:ac:15:48:ba:
2c:17:54:12:51:65:16:2d:bf:43:74:ce:93:38:72:
dc:8b:14:f7:10:b6:d8:fd:18:d1:5b:a6:a2:42:8c:
0a:9f:f4:0a:6f:fe:39:e1:96:cf:cf:c8:29:73:16:
1b:d0:36:21:38:d6:49:a8:f9:f7:ad:f4:88:a9:fe:
c0:2c:ea:6e:5e:13:a1:19:22:6d:2b:94:5b:0d:8d:
71:2f:f4:c0:0b:32:8b:4e:08:f0:af:71:ec:8d:92:
e1:bb:5d:53:91:d8:9c:96:01:26:da:06:30:31:b2:
68:8b:f6:b1:ca:09:c1:9f:19:8b:d3:32:2c:35:23:
ed:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:29:D1:7E:D3:0E:CC:9F:B2:0E:EB:E5:E1:29:48:5F:0D:97:83:E3
X509v3 Authority Key Identifier:
keyid:15:EC:BE:B8:5B:69:3F:12:58:A9:03:66:7A:F0:2C:62:7F:69:AD:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/78CDDAF8BD0811F1AE3F3EDC4411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.178.120.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:2c:ea:99:06:a7:c3:74:73:34:b8:3b:97:fe:b8:45:31:60:
90:35:92:d0:1f:ad:d7:3c:06:d7:40:2f:2a:33:dc:4c:cc:ec:
aa:7a:ec:db:99:3d:fb:37:09:f7:bb:18:9b:4b:21:94:c7:62:
90:82:8b:23:48:8e:a1:b8:ed:c1:9f:7c:b6:8c:4b:b2:4d:98:
2d:68:ec:a1:68:52:45:f9:ce:7d:79:6a:ae:f3:f9:88:2f:a6:
35:18:7b:0f:b0:e9:84:ba:54:a3:aa:3a:49:ac:dc:4b:79:26:
c3:c3:b2:44:f0:7c:07:cd:80:ee:b6:4f:18:b4:32:84:d0:21:
37:4e:fc:1f:55:79:15:97:d2:6c:22:37:2e:2b:8a:54:6a:2d:
75:e5:78:2e:20:5d:01:62:de:d0:57:e5:0f:0a:d9:ed:1d:4b:
a9:83:ed:2d:6c:81:67:ca:0d:a9:f9:4b:47:e6:f3:d0:54:99:
f1:76:fe:64:da:b5:c0:14:b9:a1:86:43:34:e5:5e:fa:ac:ae:
b3:de:fd:4e:3e:06:6b:8d:73:19:5d:bd:5a:08:8e:73:24:fd:
39:56:2f:29:61:3a:35:c5:21:f2:c6:84:eb:ad:50:0c:f4:6a:
57:08:ef:46:bd:73:1f:e7:e2:e7:f9:3d:f6:0c:ac:06:59:27:
84:73:3c:ea
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzBGNUQxMTAvBgNVBAUTKDE1RUNCRUI4NUI2OTNGMTI1OEE5MDM2NjdBRjAyQzYy
N0Y2OUFEQzkwHhcNMjYwOTMwMTk1MjMxWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJkNjg3Zi1jM2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAylhAaNAmgKLLcqMVewlrkDm7KGNg6vi70wLHIh4f/9L+vsrz1pd9n8R69Xn8
vhajepO1Gr8Z5XJQOkjiQOnyPxkcxYPDyayQ2ZRz4NWm5EJkpRy++RzUzo2xwx+9
DVe5Sr6cNyk9N9pTeYXhvsscN0h59X1SPot4smbuK/V/oexUiKwVSLosF1QSUWUW
Lb9DdM6TOHLcixT3ELbY/RjRW6aiQowKn/QKb/454ZbPz8gpcxYb0DYhONZJqPn3
rfSIqf7ALOpuXhOhGSJtK5RbDY1xL/TACzKLTgjwr3HsjZLhu11TkdiclgEm2gYw
MbJoi/axygnBnxmL0zIsNSPt6QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCgp0X7T
Dsyfsg7r5eEpSF8Nl4PjMB8GA1UdIwQYMBaAFBXsvrhbaT8SWKkDZnrwLGJ/aa3J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEY1RC85RDU0QzE3Qzg4
QkQxMUVDOTFCODY5NDlDNEY5QUUwMi9GZXktdUZ0cFB4SllxUU5tZXZBc1luOXBy
Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZleS11RnRwUHhKWXFRTm1ldkFzWW45cHJjay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzBGNUQvOUQ1NEMxN0M4OEJEMTFFQzkxQjg2OTQ5QzRGOUFFMDIvNzhDRERBRjhC
RDA4MTFGMUFFM0YzRURDNDQxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ7J4MA0GCSqGSIb3DQEBCwUAA4IBAQAvLOqZBqfDdHM0uDuX/rhF
MWCQNZLQH63XPAbXQC8qM9xMzOyqeuzbmT37Nwn3uxibSyGUx2KQgosjSI6huO3B
n3y2jEuyTZgtaOyhaFJF+c59eWqu8/mIL6Y1GHsPsOmEulSjqjpJrNxLeSbDw7JE
8HwHzYDutk8YtDKE0CE3TvwfVXkVl9JsIjcuK4pUai115XguIF0BYt7QV+UPCtnt
HUupg+0tbIFnyg2p+UtH5vPQVJnxdv5k2rXAFLmhhkM05V76rK6z3v1OPgZrjXMZ
Xb1aCI5zJP05Vi8pYTo1xSHyxoTrrVAM9GpXCO9GvXMf5+Ln+T32DKwGWSeEczzq
-----END CERTIFICATE-----
Generated at Fri Oct 9 10:36:49 2026 by rpki-client