
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/7CC19FBCDCAA11EBB87DAD44C4F9AE02.roa
File: 7CC19FBCDCAA11EBB87DAD44C4F9AE02.roa (raw, json)
Hash identifier: dwOLIo85i88QUri8z75BNhlFRQpVGfhtzz7VRCqd+oc=
Subject key identifier: FC:BB:5A:2E:F2:F2:98:55:52:23:26:BF:0D:0A:5E:5E:6B:99:6B:61
Certificate issuer: /CN=A9171C23/serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112
Certificate serial: 0664
Authority key identifier: 82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/7CC19FBCDCAA11EBB87DAD44C4F9AE02.roa
Signing time: Fri 24 Jul 2026 23:44:22 +0000
ROA not before: Fri 24 Jul 2026 23:44:22 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 142557
IP address blocks: 103.169.94.0/24 maxlen: 24
103.169.95.0/24 maxlen: 24
2001:df6:f380::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl
rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1636 (0x664)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171C23, serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112
Validity
Not Before: Jul 24 23:44:22 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a63f8d5-b16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:03:2b:0b:0b:7b:5c:bd:dd:6a:3b:cc:07:36:
d7:75:c2:d8:6c:9c:f5:76:67:45:0a:57:9f:91:dc:
45:bb:63:75:10:13:78:e8:dc:37:07:28:8e:75:48:
dd:69:b5:4c:ca:b6:65:e4:88:21:7f:11:59:6b:50:
59:b1:fb:81:e1:c5:c4:03:aa:30:70:48:9e:c4:21:
ee:48:34:33:22:fb:15:1a:a9:d9:eb:15:7f:1d:f2:
0e:af:54:bf:b2:35:91:a4:33:b0:01:64:11:b2:a3:
6f:e0:30:9c:bc:77:9b:49:f8:83:bd:e0:22:3e:42:
74:83:25:51:f5:c8:85:bd:d5:ea:dd:34:27:d3:fa:
cc:2f:b5:29:78:1d:36:b6:53:dc:4a:d9:b1:d4:d6:
ec:bb:00:06:a3:58:6d:4c:2f:5b:d0:36:7b:48:5b:
ef:05:3b:12:f6:49:21:d8:43:ca:02:7e:de:42:3c:
58:f2:d0:98:7e:34:b8:5c:15:c8:1c:b0:37:a4:97:
8b:5b:bc:2d:59:b2:23:35:f4:0d:34:70:c0:9c:1d:
42:71:9b:97:8d:47:69:c8:d9:e4:a8:e8:14:8f:f4:
af:83:14:39:ea:48:70:44:63:c3:6f:47:4d:7e:e3:
a4:c0:a4:f5:54:e4:68:08:b9:41:65:9e:19:1c:20:
70:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BB:5A:2E:F2:F2:98:55:52:23:26:BF:0D:0A:5E:5E:6B:99:6B:61
X509v3 Authority Key Identifier:
keyid:82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/7CC19FBCDCAA11EBB87DAD44C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.169.94.0/23
IPv6:
2001:df6:f380::/48
Signature Algorithm: sha256WithRSAEncryption
b0:f1:e2:b9:f8:b0:eb:d9:68:c9:06:6c:dd:37:aa:0a:cf:41:
31:05:b0:24:f7:c7:6f:8a:ff:ff:14:ce:3c:79:49:bf:95:a7:
b5:11:a4:84:fd:6b:7f:6c:56:5c:55:9b:bb:26:d5:3f:ca:e0:
71:dc:e0:52:e4:ab:b3:b1:6f:11:55:30:6c:77:83:be:96:93:
53:51:1b:6f:03:ee:bc:56:12:d0:35:50:4b:60:f4:e5:4f:40:
51:ff:ad:f0:03:af:cb:3d:4f:e5:98:71:86:2f:ac:36:be:13:
13:d0:c2:5c:14:1d:39:49:42:7f:d3:f5:2e:05:7e:56:ac:db:
11:b1:9d:86:c8:a1:ca:53:25:1e:df:10:b2:98:e0:11:e6:e7:
e2:e5:f4:d3:ac:54:fe:dd:20:9b:a6:d2:71:03:f0:da:25:45:
19:18:70:9f:8f:35:1e:40:06:aa:77:87:a6:43:3c:e4:a3:b6:
bb:21:19:3e:4d:80:71:3d:21:1f:58:9f:34:dd:77:1f:eb:fe:
97:01:65:f4:03:1f:9b:dc:66:4f:42:cd:2c:20:ee:68:e3:39:
da:22:cb:5f:10:99:a5:2f:a6:8b:70:7e:63:93:1d:b8:6c:70:
75:3a:5d:d3:ab:ef:26:45:a2:bf:0d:d0:ef:82:53:8c:62:b6:
3d:f7:83:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:54:42 2026 by rpki-client