
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/7D16D03C861A11EF99D32B66C4F9AE02.roa
File: 7D16D03C861A11EF99D32B66C4F9AE02.roa (raw, json)
Hash identifier: Kb1A5wBO5M3RznUbKfbavZMFMS9wQvDqw1cJPmcK1LY=
Subject key identifier: 67:99:C3:66:F2:EA:E4:17:D1:51:FC:C4:B8:89:B6:61:AC:C4:16:14
Certificate issuer: /CN=A9173F03/serialNumber=C99D6007CD477D89B359C33C93CAA9B5BB10601A
Certificate serial: 0CBD
Authority key identifier: C9:9D:60:07:CD:47:7D:89:B3:59:C3:3C:93:CA:A9:B5:BB:10:60:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/7D16D03C861A11EF99D32B66C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:41:23 +0000
ROA not before: Thu 20 Mar 2025 18:57:53 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 138004
IP address blocks: 103.135.234.0/24 maxlen: 24
103.135.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.crl
rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:59:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3261 (0xcbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173F03, serialNumber=C99D6007CD477D89B359C33C93CAA9B5BB10601A
Validity
Not Before: Mar 20 18:57:53 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a425e3-685d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e3:e5:3d:ea:e0:56:12:d2:19:e3:64:c4:ea:
d4:a1:f8:7d:a3:a5:1e:9b:4b:22:b6:fd:20:cc:f4:
35:25:5a:80:66:8f:94:59:b5:c3:dc:0c:d6:0b:e8:
13:c6:83:ec:bc:14:47:c7:5a:55:54:e8:8a:ac:d7:
f9:51:76:cf:f7:5b:89:d6:c4:34:50:3b:f3:ab:1a:
c4:2d:9d:d0:46:67:95:21:0c:63:33:e7:b9:35:10:
6a:f1:fe:37:6c:f6:0d:93:da:d9:e2:49:7f:6a:41:
86:d1:95:c9:72:9a:a3:88:c6:aa:1c:2a:4c:45:85:
d0:08:8d:3c:5b:96:8b:06:49:bc:6c:17:c9:c3:4d:
d2:2b:64:3c:ca:20:4a:bc:fe:cd:ea:3a:e4:56:20:
29:b2:d0:76:98:e2:42:c7:ee:b8:e7:ec:70:62:1f:
ce:31:ff:77:9a:a8:ab:f8:14:dd:fd:50:f2:b7:bb:
93:7a:23:ba:a5:3a:07:5b:ef:f7:0c:12:8e:54:90:
60:3a:00:d6:06:f2:ae:c4:77:3f:b6:4f:5a:12:13:
48:8d:c8:60:c7:bf:e1:6f:d6:b9:66:d8:10:0b:84:
3a:9b:6d:63:ef:22:f6:0e:16:f6:bb:a6:02:7e:25:
06:ff:70:0d:cc:91:f2:03:53:07:38:e6:4c:30:ba:
a4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:99:C3:66:F2:EA:E4:17:D1:51:FC:C4:B8:89:B6:61:AC:C4:16:14
X509v3 Authority Key Identifier:
keyid:C9:9D:60:07:CD:47:7D:89:B3:59:C3:3C:93:CA:A9:B5:BB:10:60:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/7D16D03C861A11EF99D32B66C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.135.234.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:3f:91:a5:84:b1:c8:f5:3c:42:ab:bc:18:17:3f:13:fc:ec:
3b:37:f1:fb:be:6f:e8:33:3f:8a:fa:b0:46:44:11:d0:b3:24:
09:07:08:7b:95:5c:6f:bb:05:80:3a:c1:30:0a:cf:df:58:f7:
43:14:67:03:46:6c:ff:8d:e2:91:3e:62:a2:11:9d:d7:c5:69:
54:f1:35:e8:41:ec:b9:be:5a:61:5f:bd:5d:b7:9a:a0:c5:15:
ca:8c:f8:4b:e3:11:37:42:46:68:e1:51:5c:57:4e:eb:60:bb:
9e:bd:1f:76:13:2c:d4:91:06:1e:ee:72:b1:db:b9:99:2a:bc:
6c:18:9f:d7:3c:a4:ab:85:89:5a:5e:90:38:88:aa:1b:73:a8:
0e:2e:52:fe:ca:1e:35:37:8a:3a:e7:3f:83:32:a0:4e:8e:a9:
8f:08:1d:3a:f7:4d:65:b2:25:ad:b6:bd:29:8d:9b:d4:e0:3f:
df:41:b7:d0:6d:56:9a:a2:e2:66:19:ab:72:a9:c5:1f:88:dd:
00:5d:8b:60:d0:4e:5d:a0:ce:71:fe:55:04:2c:6c:c0:99:f4:
7a:64:c2:79:d9:b7:dd:59:56:74:a0:20:33:f8:fb:d9:f9:b9:
d4:2d:14:80:3a:f2:65:46:df:58:67:53:09:79:e3:12:b9:9c:
68:f7:0d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:25 2026 by rpki-client