
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/9085F6C0B78911EFB9994180C4F9AE02.roa
File: 9085F6C0B78911EFB9994180C4F9AE02.roa (raw, json)
Hash identifier: u8WkqF58twBf7V4x+gVZYpgUq+L7j/Jz1XNkEqJ+tfM=
Subject key identifier: E2:8F:48:11:B4:4E:79:F2:17:9D:EB:5B:0B:E6:DA:28:A0:F9:78:FC
Certificate issuer: /CN=A9172C8D/serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953
Certificate serial: 0ADF
Authority key identifier: E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/9085F6C0B78911EFB9994180C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:38:59 +0000
ROA not before: Fri 28 Nov 2025 18:52:05 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 58895
IP address blocks: 103.102.156.0/24 maxlen: 24
103.102.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl
rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:39:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2783 (0xadf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172C8D, serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953
Validity
Not Before: Nov 28 18:52:05 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a45d93-3b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:79:57:19:03:be:b5:af:3d:e2:b4:52:93:
19:4e:a6:96:08:15:64:b0:58:df:38:04:bf:88:65:
7a:b1:0a:e1:77:d1:d5:d8:51:02:9a:e8:3f:d5:f2:
cb:d3:d7:32:96:56:83:e1:9d:5f:c9:0a:84:12:ac:
2f:71:30:90:a4:3c:1f:dd:69:46:a9:13:2a:45:23:
74:20:d1:dd:47:21:58:17:70:db:3c:71:90:72:c9:
72:46:84:22:f4:e2:11:5c:64:a3:2d:03:6e:39:6c:
65:f6:c5:e9:32:ec:bc:b6:96:9c:8c:8d:73:62:2e:
20:0c:7b:10:a6:cb:1c:5a:18:54:22:d5:d3:11:9c:
dd:9c:d1:11:88:ca:ed:7d:2e:7d:14:63:0e:b7:80:
61:47:67:9a:0e:c3:ad:77:96:a7:dc:7a:ee:b7:2c:
e8:6f:7c:a2:29:fb:1d:bc:6d:7f:e4:0c:b9:23:fd:
4f:a7:fa:de:81:3f:11:e7:ff:a6:c5:ad:fb:b3:8f:
52:f1:b1:55:7f:1b:53:6a:8d:1e:bf:ef:05:ef:99:
76:4c:66:ba:d0:b6:17:80:2b:85:e5:57:75:93:bb:
ea:c8:19:54:bb:07:9e:e7:29:f6:ed:e8:b8:22:95:
e5:6c:a6:df:e0:81:a8:f5:9c:d5:53:c1:be:a1:d5:
0c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8F:48:11:B4:4E:79:F2:17:9D:EB:5B:0B:E6:DA:28:A0:F9:78:FC
X509v3 Authority Key Identifier:
keyid:E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/9085F6C0B78911EFB9994180C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.102.156.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:96:c6:e3:97:8c:be:b4:45:fc:44:a2:62:3d:29:68:34:92:
21:cf:42:20:69:d6:a9:c7:7a:8a:93:35:53:5e:76:fe:64:f5:
40:02:1f:b0:c8:28:03:59:41:2f:ce:59:14:e7:e2:00:42:26:
b3:02:0a:6b:98:45:e3:73:0f:6e:8c:79:a7:f9:df:87:03:ec:
17:4c:6a:fe:11:56:20:91:66:63:27:ad:4a:56:63:72:63:d0:
a0:56:87:85:16:5b:04:80:04:e6:98:94:d8:65:b5:44:58:fd:
7d:dd:aa:fd:6b:c5:c3:f3:3c:83:36:26:1c:4a:11:6c:b7:a4:
1f:f6:4c:9c:0b:69:2f:14:02:2e:2c:fc:5e:70:da:2f:22:d8:
32:d9:d2:ac:9b:88:8c:fb:9b:10:b1:37:05:2d:2f:6e:33:2c:
b3:55:e0:97:c0:50:13:e1:96:0f:ed:fb:98:82:43:b2:dd:b7:
d6:fc:e7:08:31:38:9d:fd:16:38:f3:c0:76:ae:13:7f:17:b8:
30:64:6e:03:3f:19:fd:74:3a:7d:94:42:d1:dd:62:46:e7:99:
ae:6e:67:a1:61:44:fb:42:e2:59:c1:36:3f:63:de:d0:30:05:
5d:68:cb:8b:67:9e:f4:68:1d:cf:81:e1:e3:21:e5:00:1d:0a:
09:b4:47:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:35 2026 by rpki-client