
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/39F3DCDABBB711EC8B27B129C4F9AE02.roa
File: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (raw, json)
Hash identifier: CDD/Tcfc9Kjy21BqgGhbMRtGmLglmTTkZnwltnHOeUk=
Subject key identifier: 9A:04:BD:4F:45:12:90:3F:71:35:B8:6E:4C:49:53:C0:DA:CD:F6:47
Certificate issuer: /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823
Certificate serial: 03F6
Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/39F3DCDABBB711EC8B27B129C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:03:03 +0000
ROA not before: Thu 13 Feb 2025 02:44:17 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 14618
IP address blocks: 103.107.56.0/24 maxlen: 24
2001:df3:c300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl
rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:42:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1014 (0x3f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173EFB, serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823
Validity
Not Before: Feb 13 02:44:17 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a40ed7-33ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2f:2b:52:bf:d7:d8:c3:41:9a:49:8b:66:06:
d8:10:d2:69:0f:80:4e:dc:76:61:b6:eb:d4:50:7d:
36:cb:53:db:d4:9b:fb:84:bb:15:11:46:8b:a0:0b:
5d:f1:a0:43:52:a9:1b:48:9a:3f:0f:1c:95:25:bf:
a8:ca:e9:98:95:14:f0:49:48:7e:60:f7:15:f8:13:
25:47:6c:2c:b8:73:81:b1:2e:ca:23:1a:ae:a7:42:
8b:06:2c:55:df:18:cf:5e:6d:70:00:f1:c8:9c:67:
e1:8d:39:2e:d1:43:96:5e:d2:1e:cc:13:ac:b1:8c:
1a:f8:20:21:ae:f5:c4:40:5d:58:ff:b6:5b:f7:34:
51:fb:cd:04:e3:9f:61:8a:99:62:83:ca:ae:cb:33:
88:f9:39:12:af:b7:28:34:8a:7f:28:03:7f:a2:83:
ea:a0:65:10:d2:0c:78:0c:03:07:1a:88:7d:72:4d:
b0:34:77:89:7b:da:90:5a:5a:3d:37:29:ea:b2:1c:
dc:71:8d:34:69:b0:15:28:f9:d2:fa:f5:ba:35:fd:
48:5b:5d:a7:f2:ef:1f:cf:d0:f7:b9:2c:d7:92:1d:
fa:a5:44:91:c9:0d:76:2b:5f:d5:9f:78:9e:4d:3b:
43:a8:b3:29:48:cb:9c:43:f7:8f:d0:58:1c:4d:d5:
fb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:04:BD:4F:45:12:90:3F:71:35:B8:6E:4C:49:53:C0:DA:CD:F6:47
X509v3 Authority Key Identifier:
keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/39F3DCDABBB711EC8B27B129C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.107.56.0/24
IPv6:
2001:df3:c300::/48
Signature Algorithm: sha256WithRSAEncryption
58:6f:a2:05:79:1e:2d:81:50:09:cf:ba:eb:0d:63:f4:6a:df:
60:b5:e2:fc:b3:eb:c8:cf:38:0b:11:d1:e3:20:b6:3f:04:a8:
af:2d:60:ea:f9:36:25:de:7c:05:46:68:38:36:a9:19:63:7f:
5e:db:ea:38:99:55:45:fa:02:dc:5c:f4:7d:7f:86:a0:b0:87:
96:75:d0:f3:ec:52:4e:a6:9d:b5:7e:1a:2e:44:31:1e:d6:65:
2b:9f:44:e8:4c:01:6f:81:f2:c4:5f:93:07:1d:da:1e:11:74:
bf:0c:18:a8:3c:25:cc:0c:e8:bc:f5:9d:b8:1a:e5:5a:6c:da:
b3:26:b4:90:5f:4c:3c:79:af:06:7c:78:a6:29:4b:9e:9c:bd:
b6:b8:5b:35:50:47:98:16:0a:63:7e:ca:96:83:ca:69:d1:c9:
d9:07:2b:4e:75:07:c0:6a:9e:a9:1f:fc:53:86:38:a3:65:78:
49:57:25:fd:d4:e3:6e:5a:6e:ed:42:10:80:f3:50:ea:4d:32:
d7:24:97:aa:cd:25:fe:44:f9:4f:92:55:12:7b:0b:45:ba:c5:
42:7a:15:5e:91:54:a7:1f:0d:b0:f0:d1:6e:fa:41:fe:b5:82:
af:ed:b9:89:09:c5:91:f2:ec:1b:15:f2:a0:72:58:65:e6:73:
19:ce:69:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:30 2026 by rpki-client