
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/D9D6FFE098E311F08722B635C4F9AE02.roa
File: D9D6FFE098E311F08722B635C4F9AE02.roa (raw, json)
Hash identifier: hSZFrlrZ/Tvb28EVqAu95ygulwgb3Xyk1zuj+IQ/6mE=
Subject key identifier: 24:90:BC:75:BB:E1:49:44:0F:BA:24:8F:25:C5:9B:6B:A5:3F:88:F2
Certificate issuer: /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial: 074A
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/D9D6FFE098E311F08722B635C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:48:12 +0000
ROA not before: Fri 21 Nov 2025 04:25:19 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 133510
IP address blocks: 103.105.139.0/24 maxlen: 24
203.8.10.0/24 maxlen: 24
203.31.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1866 (0x74a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Validity
Not Before: Nov 21 04:25:19 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a47bdc-d5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:26:f8:c6:58:ba:cd:a8:14:00:c9:61:4b:
28:33:5e:94:1e:9a:4a:26:a1:2a:1f:de:f1:cc:39:
48:e7:39:f8:62:d0:b2:3a:79:9d:62:56:e3:c3:c5:
d1:da:cc:c6:d9:2b:91:95:d6:79:5e:38:b3:e5:aa:
0e:6c:9d:d9:90:b3:ff:e0:6c:3b:c4:4c:36:ee:5c:
5b:f7:1b:9d:e3:5c:30:4e:66:ae:1f:7e:64:98:02:
b6:03:f9:49:ee:29:31:2a:52:c1:e3:01:a0:c1:f5:
03:c4:c8:44:c9:8b:07:c8:f2:bb:1d:60:40:11:a4:
57:9c:70:42:a7:ef:6a:aa:95:8d:79:28:43:62:41:
5d:0a:49:c1:98:1f:46:7e:5d:e5:77:51:07:0b:d0:
45:dc:1f:84:f5:27:fe:47:dd:a2:4c:42:5b:4e:52:
ad:d2:15:16:c2:95:cc:53:32:0b:f2:e5:0c:fd:82:
9e:5f:d7:d2:54:e1:b3:ed:d0:9a:83:5d:3d:c0:ff:
93:d8:a4:0a:00:23:36:83:eb:ae:5f:d3:a4:df:32:
cf:e4:97:94:1a:51:9f:d3:a0:51:41:bc:08:bc:04:
8f:c4:70:23:37:e4:67:9b:4f:eb:7c:48:25:7e:a8:
15:d7:53:96:9e:4c:d8:88:2c:2b:52:25:b1:56:36:
7c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:90:BC:75:BB:E1:49:44:0F:BA:24:8F:25:C5:9B:6B:A5:3F:88:F2
X509v3 Authority Key Identifier:
keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/D9D6FFE098E311F08722B635C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.105.139.0/24
203.8.10.0/24
203.31.118.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:41:11:47:11:8c:a9:0a:c1:3f:73:6b:6a:69:6a:6b:1c:11:
89:41:8c:d1:76:f0:b3:e6:24:b8:81:e3:79:8d:3a:50:da:22:
17:2a:f6:c7:a0:d7:be:1f:e2:ba:5d:71:d3:2f:dd:69:30:51:
a1:c2:c8:7c:02:bb:80:60:9b:68:44:3a:6a:82:c6:ab:c3:8c:
c7:7e:f3:b3:ad:a1:06:54:c8:41:85:5e:96:1f:cb:06:14:83:
6e:e0:f2:79:03:ca:69:35:1f:33:98:8a:df:f2:49:75:25:7c:
24:0f:b9:0b:b8:53:e1:2c:0d:ce:8f:2e:ff:5b:c8:58:1b:dc:
bf:0a:1f:6b:c0:d6:38:8c:e2:77:dd:21:17:90:21:15:69:00:
80:b0:d3:a8:8f:f2:2b:db:4c:54:66:39:18:e3:4b:b5:c2:c3:
96:f9:65:08:75:88:27:83:92:74:e4:6d:ed:80:80:83:4a:75:
b3:70:d5:0d:72:a0:bd:a1:a5:c1:ce:e7:ce:68:65:82:b9:b7:
6c:34:ff:e1:20:d5:bd:d8:61:f2:9a:e5:fc:a1:38:d9:27:0e:
62:82:52:f9:3d:18:4b:fb:35:2d:68:58:38:ac:79:f9:e8:b7:
17:af:f9:9e:e1:e5:7f:4f:85:71:30:2e:95:a4:df:49:db:37:
ce:60:bc:48
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICB0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNDRTYxMTAvBgNVBAUTKDMzMTk1Rjk2QzQ2RDREMjg1RDVCREU0QjBCMDMwRTM4
MzE0RThGQ0IwHhcNMjUxMTIxMDQyNTE5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2JkYy1kNWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArbom+MZYus2oFADJYUsoM16UHppKJqEqH97xzDlI5zn4YtCyOnmdYlbjw8XR
2szG2SuRldZ5Xjiz5aoObJ3ZkLP/4Gw7xEw27lxb9xud41wwTmauH35kmAK2A/lJ
7ikxKlLB4wGgwfUDxMhEyYsHyPK7HWBAEaRXnHBCp+9qqpWNeShDYkFdCknBmB9G
fl3ld1EHC9BF3B+E9Sf+R92iTEJbTlKt0hUWwpXMUzIL8uUM/YKeX9fSVOGz7dCa
g109wP+T2KQKACM2g+uuX9Ok3zLP5JeUGlGf06BRQbwIvASPxHAjN+Rnm0/rfEgl
fqgV11OWnkzYiCwrUiWxVjZ8uQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFCSQvHW7
4UlED7okjyXFm2ulP4jyMB8GA1UdIwQYMBaAFDMZX5bEbU0oXVveSwsDDjgxTo/L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NFNi8wRThFMjc4MDdC
RDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRTaGRXOTVMQ3dNT09ERk9q
OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL014bGZsc1J0VFNoZFc5NUxDd01PT0RGT2o4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzNDRTYvMEU4RTI3ODA3QkQwMTFFQjg1QTY2OTgwQzRGOUFFMDIvRDlENkZGRTA5
OEUzMTFGMDg3MjJCNjM1QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQAZ2mLAwQAywgKAwQByx92MA0GCSqGSIb3DQEBCwUAA4IBAQAaQRFH
EYypCsE/c2tqaWprHBGJQYzRdvCz5iS4geN5jTpQ2iIXKvbHoNe+H+K6XXHTL91p
MFGhwsh8AruAYJtoRDpqgsarw4zHfvOzraEGVMhBhV6WH8sGFINu4PJ5A8ppNR8z
mIrf8kl1JXwkD7kLuFPhLA3Ojy7/W8hYG9y/Ch9rwNY4jOJ33SEXkCEVaQCAsNOo
j/Ir20xUZjkY40u1wsOW+WUIdYgng5J05G3tgICDSnWzcNUNcqC9oaXBzufOaGWC
ubdsNP/hINW92GHymuX8oTjZJw5iglL5PRhL+zUtaFg4rHn56LcXr/me4eV/T4Vx
MC6VpN9J2zfOYLxI
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:22:25 2026 by rpki-client