
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/D0A263DCB09A11F0937ACB4DC4F9AE02.roa
File: D0A263DCB09A11F0937ACB4DC4F9AE02.roa (raw, json)
Hash identifier: HLyGdrwWXwCBnZJJVCOhFQ5qmYx93HTxVRxNqG5BuFM=
Subject key identifier: C1:B6:2A:98:DF:AC:37:DC:74:11:D9:EF:F4:F1:A7:DE:A6:7F:4C:26
Certificate issuer: /CN=A9171D3F/serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD
Certificate serial: 0246
Authority key identifier: EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/D0A263DCB09A11F0937ACB4DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:18:10 +0000
ROA not before: Fri 23 Jan 2026 01:22:33 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 24323
IP address blocks: 103.39.196.0/23 maxlen: 23
103.39.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl
rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582 (0x246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171D3F, serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD
Validity
Not Before: Jan 23 01:22:33 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a458b2-f83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7c:58:58:62:6f:9d:da:26:16:f7:83:a4:f8:
ca:24:a4:49:c1:e2:75:4c:a4:f5:ce:90:33:5b:9e:
44:c3:7c:7c:54:23:cc:7b:d5:42:2b:45:19:12:c3:
3f:88:c7:c6:1a:98:0f:04:0d:fa:5e:d8:12:d3:16:
e7:46:12:ea:ae:f4:d3:ed:f3:79:0d:39:31:87:a6:
d3:08:ac:c3:71:1e:e2:94:40:75:a1:54:7a:a5:70:
de:08:92:9d:92:5c:d2:f2:8f:70:80:2a:8e:8e:be:
35:d6:c0:24:3d:7e:66:f1:21:1b:ac:22:3e:9f:3a:
24:f3:f7:04:17:b3:8c:a0:08:df:57:49:b1:18:ec:
b4:8a:b4:45:de:e9:81:46:2c:d6:8c:89:a5:f2:29:
a9:a5:e6:12:ea:88:64:0c:a8:4c:a7:2f:e7:d4:25:
09:c9:1e:60:d4:27:20:b3:4f:8d:f5:c1:e7:54:a3:
76:68:b1:f3:74:b3:f4:72:9f:9e:8b:7c:1d:0c:55:
9c:41:3a:8e:0e:bb:81:f7:8b:10:a4:23:42:17:ec:
63:cf:2f:cf:9e:4b:a3:6e:5c:84:11:41:d0:21:d8:
ef:3f:1c:a3:51:41:60:03:c7:a3:a0:d9:d1:8b:34:
1f:9e:ca:9c:07:76:22:ca:1b:98:3e:89:1e:d6:08:
a4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B6:2A:98:DF:AC:37:DC:74:11:D9:EF:F4:F1:A7:DE:A6:7F:4C:26
X509v3 Authority Key Identifier:
keyid:EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/D0A263DCB09A11F0937ACB4DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.39.196.0/23
Signature Algorithm: sha256WithRSAEncryption
63:8a:78:9b:a5:3e:e2:51:42:88:42:80:68:84:b2:d8:29:a2:
ae:7f:d9:f0:42:1b:f9:71:50:61:ba:6f:6f:76:61:9a:4e:32:
90:61:cf:1c:77:cd:42:b1:f3:15:9e:ed:2a:fb:46:ef:ee:28:
43:42:5e:fb:e3:d9:74:ac:7b:26:19:62:3f:c6:fb:ab:f8:04:
bf:54:9b:e6:aa:4c:89:0d:5e:1a:73:02:9e:0c:c8:d8:da:15:
89:e1:2f:58:e1:e9:df:73:72:4c:3e:87:23:cb:b9:71:ad:e9:
87:22:72:4b:85:dd:ab:48:8e:84:aa:bc:7b:59:b2:a8:41:4b:
b3:40:00:02:9a:5f:75:a1:fc:6f:46:6d:be:67:89:8e:e1:7a:
a3:db:ca:bc:c3:82:c3:9f:8c:d4:97:a2:ff:bf:3d:7f:bb:a2:
23:37:fa:86:c2:a5:6e:cb:d3:11:0f:7d:0f:34:59:e0:55:49:
ad:49:25:17:80:99:82:c2:80:dc:e2:1f:18:36:db:a0:2f:a3:
f4:5e:05:b4:e9:e9:b8:e6:f1:95:ae:ce:b6:b3:b8:59:bf:af:
a9:d4:09:9a:53:1f:9e:c4:dd:db:94:e0:e2:7e:36:76:fe:94:
fb:0d:68:61:43:2e:43:06:25:a8:fd:9c:07:df:13:1e:d2:60:
8d:25:a8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:42 2026 by rpki-client