
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/9BE6554CB72411EF98F7D577C4F9AE02.roa
File: 9BE6554CB72411EF98F7D577C4F9AE02.roa (raw, json)
Hash identifier: TpOlOMkvGiREuIISjlFyTVVAuVCoOvxydJx/Up02XYA=
Subject key identifier: EF:56:E5:EB:75:4A:24:89:56:51:9B:32:9C:9B:F5:E5:95:89:66:FB
Certificate issuer: /CN=A9173C63/serialNumber=908A180F94949607ADC0113149BE882AEAA8E88F
Certificate serial: 0234
Authority key identifier: 90:8A:18:0F:94:94:96:07:AD:C0:11:31:49:BE:88:2A:EA:A8:E8:8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/9BE6554CB72411EF98F7D577C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:59:15 +0000
ROA not before: Tue 27 May 2025 03:53:11 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 138640
IP address blocks: 103.131.100.0/23 maxlen: 23
103.131.100.0/24 maxlen: 24
103.131.101.0/24 maxlen: 24
2001:df2:4340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.crl
rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173C63, serialNumber=908A180F94949607ADC0113149BE882AEAA8E88F
Validity
Not Before: May 27 03:53:11 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a43823-5afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:8f:22:ee:62:bc:25:90:da:fc:08:33:10:
e5:9c:4e:59:5f:aa:75:a9:ff:90:99:fd:15:d3:7f:
fa:10:45:6e:38:3d:e5:5b:ba:d5:9a:22:79:0e:40:
d9:70:e4:40:ff:f4:94:24:99:dd:61:90:66:ed:b5:
65:97:14:38:17:f6:a2:77:5d:b5:67:7d:78:8b:e7:
94:46:f7:25:7b:87:ec:7f:d0:d0:dd:4c:5b:e3:a3:
eb:de:34:85:35:89:c7:70:dd:3c:33:81:a4:aa:70:
a3:9f:c7:3a:a7:49:2a:a0:11:c4:8e:60:e5:1c:f2:
be:3d:2b:32:f1:9e:35:97:73:04:e2:ed:85:d7:d6:
6b:5e:83:a2:e1:87:60:26:d8:1e:7c:92:02:40:ac:
47:9d:21:74:8c:67:0f:22:6b:39:7c:aa:84:9b:20:
e9:fa:50:88:4b:16:16:97:24:7e:ce:a4:c3:44:7d:
a6:32:38:b0:9f:ee:57:05:24:09:b7:a7:0c:68:26:
a0:0b:61:9b:b1:ff:4c:b8:10:65:b0:cc:ea:24:b6:
dd:06:d9:06:11:79:ff:fd:d8:a9:05:f0:d3:b2:20:
e9:bb:f4:69:41:fa:52:36:2c:38:09:28:54:4e:13:
8d:5d:b2:b1:21:c0:af:5f:52:a1:91:cb:53:70:e5:
8b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:56:E5:EB:75:4A:24:89:56:51:9B:32:9C:9B:F5:E5:95:89:66:FB
X509v3 Authority Key Identifier:
keyid:90:8A:18:0F:94:94:96:07:AD:C0:11:31:49:BE:88:2A:EA:A8:E8:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/9BE6554CB72411EF98F7D577C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.131.100.0/23
IPv6:
2001:df2:4340::/48
Signature Algorithm: sha256WithRSAEncryption
bf:ac:16:04:65:b6:08:eb:aa:7e:23:f3:05:bb:e1:3d:05:82:
4a:d0:02:74:87:ee:3c:7f:46:23:5f:5e:e6:2c:1b:73:cc:2c:
2b:c5:79:87:b7:2c:1a:fb:8c:15:1c:23:c6:d4:02:70:c6:29:
b5:8a:db:6b:74:92:ca:0d:ad:7a:f3:25:6f:e1:da:92:9e:87:
6d:fa:39:6b:89:c8:3b:ab:03:02:b6:e3:0f:5e:1a:39:d3:98:
0d:17:6a:fe:55:38:33:fd:53:0b:1a:62:8b:a0:c0:43:22:52:
6b:be:f6:09:53:90:d9:e1:17:78:45:1c:c8:11:bc:38:2a:18:
d1:ab:86:9a:6b:b8:43:cd:54:c9:3a:31:d4:7b:f2:68:86:5f:
cc:27:cc:85:bd:26:87:68:36:f5:e4:64:36:4f:0e:d4:6f:21:
04:c2:0a:80:c1:87:45:3f:3b:83:e2:ff:95:d1:46:b7:b5:ad:
78:2d:2d:14:35:cc:dc:1b:65:ba:e8:52:c8:3a:82:eb:f2:d2:
c9:5b:ea:61:15:8c:5c:41:26:82:69:e4:f9:59:6a:0c:43:b2:
7b:6f:b1:ed:db:80:e1:78:2c:80:e4:ed:8e:6a:61:31:b8:e0:
be:ef:04:c7:07:51:3d:e5:41:01:5a:3d:de:19:09:37:0b:b3:
e9:04:4c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:15 2026 by rpki-client