
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/ABD9CB4630C711ECA2491515C4F9AE02.roa
File: ABD9CB4630C711ECA2491515C4F9AE02.roa (raw, json)
Hash identifier: 8INoOCXFPbcklJdQVYuXZGAHmYI6aNH2061FTcCA0JU=
Subject key identifier: 36:C8:63:45:4F:14:4C:E0:FA:7A:22:CB:1A:F7:36:4D:FE:A4:B5:62
Certificate issuer: /CN=A9171A59/serialNumber=333EC503014D0674AF1674199410F9B091B8FB94
Certificate serial: 0541
Authority key identifier: 33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/ABD9CB4630C711ECA2491515C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:51:36 +0000
ROA not before: Sat 03 May 2025 00:05:52 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 45753
IP address blocks: 103.91.8.0/22 maxlen: 24
123.253.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl
rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1345 (0x541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171A59, serialNumber=333EC503014D0674AF1674199410F9B091B8FB94
Validity
Not Before: May 3 00:05:52 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3fe17-e932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:43:02:c5:99:c5:64:90:80:12:71:cd:85:
6f:3e:54:2b:55:d4:54:32:3b:61:43:67:75:7c:2a:
f9:54:2f:2d:f6:90:64:0d:27:25:67:ce:ec:a4:1f:
9d:00:8b:a0:83:11:56:fb:a6:ef:ec:3b:cb:1b:2e:
49:6d:d7:bd:aa:66:48:3a:ad:97:21:a0:e7:cd:3e:
9f:91:6a:05:a8:db:74:3e:dc:c3:91:90:a4:a8:56:
ff:dc:c7:94:6e:d4:8a:6f:00:c5:27:2a:45:27:7d:
b2:a8:a2:a3:95:19:2a:93:9f:4a:cc:1a:54:b5:60:
af:4e:74:b8:d3:ad:eb:41:6f:dc:d0:b9:b3:a0:43:
d9:c9:96:e7:13:83:10:64:d6:d6:eb:cc:32:e0:58:
67:59:21:ef:d2:a3:70:95:88:67:56:7c:fb:9f:65:
35:87:a4:c6:4e:50:43:38:ed:47:35:19:0c:d0:98:
c6:e8:6a:03:c8:c0:0d:b4:ea:dc:52:8e:2f:3d:13:
5c:d1:08:58:15:5d:41:d9:c3:fb:60:0a:4b:c2:42:
90:0f:6f:2f:18:df:b1:3a:a1:bf:ae:a4:e7:ee:e9:
23:e1:0b:c8:7c:ba:da:18:8f:ec:64:c7:99:f3:38:
63:35:02:92:68:9a:07:41:fa:15:32:9d:6f:58:6f:
b6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C8:63:45:4F:14:4C:E0:FA:7A:22:CB:1A:F7:36:4D:FE:A4:B5:62
X509v3 Authority Key Identifier:
keyid:33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/ABD9CB4630C711ECA2491515C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.91.8.0/22
123.253.24.0/22
Signature Algorithm: sha256WithRSAEncryption
70:2e:c6:9c:b0:50:0e:29:24:49:73:54:42:9a:49:34:54:f0:
f0:7f:c8:74:c6:b5:9f:22:9d:91:66:e2:2f:24:42:83:9e:ba:
aa:97:ce:91:00:08:4f:c4:3c:21:1f:5b:f2:d2:8f:7a:b1:a5:
e5:fd:13:fa:65:85:95:3b:a9:a2:0b:d0:86:58:12:b6:bb:1d:
29:aa:63:91:08:80:18:c7:14:03:c2:b7:ac:4e:6f:a0:f0:28:
fc:f0:f1:f6:16:a5:71:8e:98:67:2e:cf:4e:9d:9a:6e:ad:18:
3c:8c:c4:1c:1c:57:46:01:19:b8:7d:29:5b:d8:de:d2:da:25:
76:f8:fe:e0:92:30:07:00:11:2d:07:0a:f3:00:23:d6:c9:cb:
a6:15:57:32:e4:f6:6e:c1:67:40:53:26:e6:8f:28:3a:b0:ea:
cb:0c:6f:37:aa:fb:40:98:cc:39:a9:68:ab:74:20:57:b2:98:
05:6a:c5:f1:27:5d:7d:d3:ed:13:d4:cd:bb:ca:21:3f:74:99:
54:be:30:5e:9b:2f:05:c9:f3:a5:e5:00:78:42:1d:66:8c:cb:
62:ce:f8:bf:19:8f:95:c9:a1:7f:72:84:6a:b0:2a:c4:2d:e3:
bc:8b:62:a5:34:37:a0:c7:58:ae:58:a4:6e:fe:aa:9f:6b:62:
76:51:70:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:30 2026 by rpki-client