
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/6E3B1338F41211E9AAF5924EC4F9AE02.roa
File: 6E3B1338F41211E9AAF5924EC4F9AE02.roa (raw, json)
Hash identifier: X8sSkThLSb4fvyIS1pC23KDUjsj3Bu29OZPUHsBaV1A=
Subject key identifier: D4:7B:C9:24:B6:E2:BA:13:C3:91:3B:07:77:D0:BA:F0:F0:E4:DF:3B
Certificate issuer: /CN=A9171B1A/serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611
Certificate serial: 0D38
Authority key identifier: 91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/6E3B1338F41211E9AAF5924EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:52:04 +0000
ROA not before: Mon 08 Sep 2025 18:28:11 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 63526
IP address blocks: 103.101.197.0/24 maxlen: 24
103.101.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl
rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3384 (0xd38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171B1A, serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611
Validity
Not Before: Sep 8 18:28:11 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a44484-28d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ff:1a:d0:6b:2c:e4:fe:6d:95:ee:12:a2:64:
d3:44:9a:79:e7:96:4f:95:9a:2b:00:5f:85:d0:21:
f6:35:ee:19:bf:68:b7:8e:bb:01:47:cc:03:53:26:
63:a9:c1:bc:d1:1e:f6:f4:3a:1d:e5:6f:96:98:e1:
41:b8:3b:27:58:84:82:ea:9f:10:b3:ce:0b:d2:58:
5d:7d:dd:bd:9a:d4:f1:86:8f:4f:91:1d:21:99:05:
d8:df:eb:06:d6:68:9b:e3:39:ab:80:4e:0b:12:75:
42:20:1c:18:b6:ec:7c:8d:f0:bf:f0:93:ae:44:b3:
f0:45:fd:6f:b4:70:05:ac:ad:0c:8e:dd:0e:f9:43:
ca:da:56:56:61:6d:e7:0f:25:ea:78:6a:0c:b6:ba:
4e:af:56:1e:79:51:eb:f2:2a:d1:bb:31:a7:12:99:
11:50:ea:1c:3c:87:ef:42:fe:0c:6b:85:02:82:1a:
8b:27:3a:d3:68:4d:c7:ff:19:3c:ec:d6:be:06:f9:
70:4e:7c:cc:c0:50:2a:a1:1d:06:1d:d1:e0:3f:8b:
f8:43:26:08:4e:22:37:e3:c2:29:2f:ed:70:0a:29:
c6:12:d9:3d:e1:95:17:6e:1f:ec:6f:a6:41:f4:7d:
af:dc:29:e4:e8:22:87:fe:0d:7e:71:a9:5a:4c:17:
6f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7B:C9:24:B6:E2:BA:13:C3:91:3B:07:77:D0:BA:F0:F0:E4:DF:3B
X509v3 Authority Key Identifier:
keyid:91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/6E3B1338F41211E9AAF5924EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.101.197.0/24
103.101.199.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:4a:c1:74:58:a3:b7:e5:e6:29:73:d0:be:39:8d:5e:1b:92:
54:dd:09:17:bd:d1:d6:83:90:ec:0d:90:69:80:1c:bd:e9:be:
3a:b2:a8:33:f2:b2:dd:b3:3c:f1:d5:a9:48:07:66:ce:eb:67:
96:e6:47:38:38:6f:e4:7e:2f:ff:c8:aa:66:2b:37:9f:31:02:
b1:fb:09:4a:48:e0:23:2d:d1:2b:f0:34:86:f8:b7:ee:a4:75:
13:a7:1b:d4:a1:97:e2:9f:d5:4b:ca:3f:57:31:bb:96:c9:bd:
d6:1d:0e:7a:32:1a:90:77:08:57:20:bc:eb:b0:c0:31:e2:34:
a7:19:96:b9:43:62:89:ee:d4:29:05:40:49:e9:f7:8e:ca:52:
1a:33:13:48:16:29:08:07:79:07:4a:5f:7e:a6:20:2d:e2:6a:
4b:bd:1f:3e:e1:20:8e:29:0d:7c:68:0a:5e:d1:ac:8c:41:eb:
b7:c2:cf:97:cf:5a:05:05:26:16:41:3b:48:4d:9a:67:54:37:
58:10:e1:89:eb:b6:84:68:88:44:bb:2f:32:de:d3:92:c9:56:
aa:8c:2c:78:8a:98:65:82:ef:da:c0:a2:9c:6b:df:c7:ff:ee:
55:a2:cd:d4:17:3f:68:e3:df:be:2d:e4:69:7a:bb:f1:e5:94:
0d:4d:b1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:54:33 2026 by rpki-client