
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/5C7731E64B7111EC8E9FCB48C4F9AE02.roa
File: 5C7731E64B7111EC8E9FCB48C4F9AE02.roa (raw, json)
Hash identifier: qt4s9HBAeJcBPk0Llq0F/Y+xml+HCsgruEcd0L0uDYo=
Subject key identifier: 0F:C0:58:D6:30:51:A2:3F:7E:5E:1C:BD:E7:97:14:3F:80:7E:C0:61
Certificate issuer: /CN=A9172B41/serialNumber=32E0F700E3872451A1A832CD7DDE4175BFBA8369
Certificate serial: 0507
Authority key identifier: 32:E0:F7:00:E3:87:24:51:A1:A8:32:CD:7D:DE:41:75:BF:BA:83:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/5C7731E64B7111EC8E9FCB48C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:18:53 +0000
ROA not before: Sat 20 Dec 2025 23:20:33 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 140883
IP address blocks: 103.145.114.0/24 maxlen: 24
103.145.115.0/24 maxlen: 24
2405:d1c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl
rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:08:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1287 (0x507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B41, serialNumber=32E0F700E3872451A1A832CD7DDE4175BFBA8369
Validity
Not Before: Dec 20 23:20:33 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a44acd-616b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:45:cc:7a:be:47:c9:f0:f0:02:78:89:af:fe:
28:bc:3e:e4:f0:c4:9a:43:85:0a:76:21:0b:69:be:
44:9f:5e:20:90:30:12:91:2d:cb:dd:e0:76:64:2c:
0c:91:57:41:77:c2:1b:89:ab:f7:7e:0f:aa:43:76:
21:0b:6b:53:fc:7b:8f:10:eb:af:b3:70:1f:a2:c4:
02:7c:5f:1d:04:f9:0b:ff:93:48:97:93:54:31:a5:
7d:82:f1:24:f7:8b:27:3b:78:c0:95:04:f3:15:cf:
f3:65:57:4d:83:fe:e6:dd:7f:11:03:2a:95:31:e1:
f5:da:b7:1b:4c:30:01:cd:66:59:3c:66:f6:f8:5a:
5d:c4:0d:78:62:59:76:fa:71:15:85:c7:5d:e4:2c:
64:a8:d3:83:06:21:4d:41:d5:0e:fc:1a:5f:70:35:
3a:fb:3a:62:82:91:39:78:d7:9e:60:8f:53:f7:3f:
2b:8b:ac:d3:1a:5f:d6:74:63:14:4a:89:60:ca:18:
27:4a:c6:ff:06:17:37:8c:20:5f:50:21:9d:7b:a1:
62:0a:07:46:2c:08:6e:8e:5a:c1:2d:fb:77:92:1b:
21:fe:e2:d9:78:d2:1c:9d:a8:f2:94:ba:3f:fb:f9:
b1:27:14:ed:71:34:db:55:6c:14:b9:e2:3c:24:44:
62:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C0:58:D6:30:51:A2:3F:7E:5E:1C:BD:E7:97:14:3F:80:7E:C0:61
X509v3 Authority Key Identifier:
keyid:32:E0:F7:00:E3:87:24:51:A1:A8:32:CD:7D:DE:41:75:BF:BA:83:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/5C7731E64B7111EC8E9FCB48C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.145.114.0/23
IPv6:
2405:d1c0::/32
Signature Algorithm: sha256WithRSAEncryption
b1:ca:b5:af:7e:ba:9c:4e:43:da:3a:d1:74:57:cf:7b:3c:d5:
3b:95:94:71:62:7b:0d:3f:33:34:6d:a4:52:f2:e2:0f:de:64:
34:f4:d7:c1:45:9b:37:18:ac:de:ef:46:a1:52:5d:f1:e7:8d:
0d:40:eb:82:7c:9f:01:20:b0:a6:15:dc:f3:05:0a:b0:ed:6e:
40:c8:1a:c9:07:ca:90:25:37:32:ee:be:0c:b6:c9:65:bc:34:
f6:0f:54:ab:24:2b:fb:9e:d2:38:46:04:b4:0c:68:02:bc:2b:
24:98:dd:1b:50:40:d3:5a:80:93:a1:2f:47:23:c0:01:d9:22:
c3:7d:06:49:ee:76:e9:05:9f:4b:6a:4b:68:89:3e:71:ac:d3:
6d:85:bd:99:ab:b4:6e:b9:f0:ca:c1:33:43:6a:f5:dd:34:d8:
84:99:17:a6:50:f2:c5:46:91:07:6f:40:73:76:a0:f3:6a:8d:
8f:17:b8:11:fc:71:69:80:2e:22:12:27:8a:57:c8:aa:5c:93:
bf:11:39:15:3f:dc:0b:63:49:5f:5c:b4:d9:95:62:6f:64:e8:
17:3a:bc:7a:e4:18:43:36:1a:20:08:cf:e9:b2:e2:7a:fc:5f:
6a:ad:b0:49:49:37:06:9e:5c:f0:3d:4f:1f:d5:76:53:5d:75:
dc:9f:0b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:47 2026 by rpki-client