
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/F8769F9AA4B111EF8F61B261C4F9AE02.roa
File: F8769F9AA4B111EF8F61B261C4F9AE02.roa (raw, json)
Hash identifier: OdsS68bGJK6PAAofoTV++dkBU6U8yZnUeKjp/Knr/pY=
Subject key identifier: FD:BF:40:C0:06:41:41:00:FA:8A:E0:4C:6B:BC:10:B7:21:5A:4D:08
Certificate issuer: /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial: 06C3
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/F8769F9AA4B111EF8F61B261C4F9AE02.roa
Signing time: Tue 22 Sep 2026 22:45:02 +0000
ROA not before: Tue 22 Sep 2026 22:45:02 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 396073
IP address blocks: 103.172.134.0/24 maxlen: 24
103.172.135.0/24 maxlen: 24
2407:d340::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:45:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1731 (0x6c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917419E, serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Validity
Not Before: Sep 22 22:45:02 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ab304ee-19bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:6f:e3:e5:a2:40:b8:bd:ef:0a:08:17:45:
9a:d2:2c:cf:42:de:2d:59:ee:62:5b:60:80:15:be:
87:d9:89:db:e6:33:18:6f:e7:7e:a0:4d:b1:4d:9a:
49:c3:01:be:7e:33:35:a6:e5:67:21:d6:e7:6e:48:
f9:b5:ce:16:f3:76:90:62:7d:b2:39:43:99:39:56:
b1:64:ac:d2:8b:f3:e7:fe:6b:91:af:f9:1e:27:ce:
ef:da:18:48:40:37:f9:0a:fa:5f:a0:10:17:bf:41:
fe:f2:5d:cb:82:f0:fd:06:94:af:73:3b:2d:c8:55:
72:b6:97:9d:8a:df:ae:5c:0d:4a:5e:24:15:ff:18:
02:2f:4b:41:1b:d6:4f:b6:28:88:2e:1f:a9:5c:d6:
52:f9:c9:b8:87:79:be:86:8f:88:69:27:b9:a0:78:
1d:61:33:57:d9:d5:29:0f:ed:e7:aa:30:54:5f:82:
45:fe:0b:b9:4d:3a:c9:b1:2e:4e:c7:e1:fb:88:95:
e2:0b:68:21:f5:eb:03:8a:bb:14:5d:2a:e5:da:2e:
fe:0d:d6:90:b3:b7:24:29:27:96:77:dc:8d:d3:33:
f2:b2:48:35:63:61:63:9c:e2:3f:de:38:18:29:be:
b5:24:5c:a5:21:1d:8f:04:c0:39:80:fe:e2:30:db:
a9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BF:40:C0:06:41:41:00:FA:8A:E0:4C:6B:BC:10:B7:21:5A:4D:08
X509v3 Authority Key Identifier:
keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/F8769F9AA4B111EF8F61B261C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.172.134.0/23
IPv6:
2407:d340::/32
Signature Algorithm: sha256WithRSAEncryption
b0:24:8f:21:9f:c3:a8:b4:71:bb:a3:0e:32:8f:79:2e:87:07:
0e:0c:bf:3a:ad:c5:a0:b3:b9:c1:e7:e7:3f:30:6b:2c:bd:54:
b8:72:7b:32:5d:7f:2f:36:e7:75:ee:02:45:6b:97:13:7d:4a:
61:04:c3:5f:09:25:ab:4b:18:47:5f:a1:8e:22:e0:69:9c:da:
f7:c7:c3:38:21:9c:02:b7:cd:0e:fd:41:10:0c:1b:42:09:64:
30:c3:cf:e0:82:e1:37:b6:01:0f:15:0d:99:61:b1:77:e6:64:
ff:e6:d6:be:4c:48:1e:15:50:cb:a1:a3:15:9d:7b:ce:dd:85:
38:10:72:f2:71:ed:c4:08:8e:d7:71:73:27:96:2c:98:73:32:
68:86:1d:08:ba:d1:19:0f:a2:d4:40:3e:ba:4d:d9:1a:1b:96:
70:71:ce:1d:e5:36:cb:44:42:6f:d0:e4:0b:c3:12:2c:ef:2a:
90:78:71:7a:97:2e:35:ae:8d:67:95:50:4f:6b:88:0d:3c:de:
6b:a9:ed:30:a3:78:e0:ac:ee:e8:18:7f:cc:8c:8f:42:45:bd:
a8:e8:85:c3:ea:6c:ab:3d:8f:9d:7a:f5:39:4f:b7:7d:db:e2:
46:b4:3e:bb:b7:ce:d2:04:c8:c9:8f:c1:c0:e0:d6:58:b7:23:
fa:c9:20:66
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICBsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQxOUUxMTAvBgNVBAUTKDE0NDU0ODlGREQ1MEFBNDRBQzFEMkEzQzNBMTY2RTA2
QzY2MkFGRDUwHhcNMjYwOTIyMjI0NTAyWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWIzMDRlZS0xOWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwldv4+WiQLi97woIF0Wa0izPQt4tWe5iW2CAFb6H2Ynb5jMYb+d+oE2xTZpJ
wwG+fjM1puVnIdbnbkj5tc4W83aQYn2yOUOZOVaxZKzSi/Pn/muRr/keJ87v2hhI
QDf5CvpfoBAXv0H+8l3LgvD9BpSvczstyFVytpedit+uXA1KXiQV/xgCL0tBG9ZP
tiiILh+pXNZS+cm4h3m+ho+IaSe5oHgdYTNX2dUpD+3nqjBUX4JF/gu5TTrJsS5O
x+H7iJXiC2gh9esDirsUXSrl2i7+DdaQs7ckKSeWd9yN0zPyskg1Y2FjnOI/3jgY
Kb61JFylIR2PBMA5gP7iMNupOQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFP2/QMAG
QUEA+orgTGu8ELchWk0IMB8GA1UdIwQYMBaAFBRFSJ/dUKpErB0qPDoWbgbGYq/V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDE5RS85ODFFRTk4NjBC
MjExMUVDODQyMTQ5NERDNEY5QUUwMi9GRVZJbjkxUXFrU3NIU284T2hadUJzWmly
OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZFVkluOTFRcWtTc0hTbzhPaFp1QnNaaXI5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzQxOUUvOTgxRUU5ODYwQjIxMTFFQzg0MjE0OTREQzRGOUFFMDIvRjg3NjlGOUFB
NEIxMTFFRjhGNjFCMjYxQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ6yGMA0EAgACMAcDBQAkB9NAMA0GCSqGSIb3DQEBCwUAA4IBAQCw
JI8hn8OotHG7ow4yj3kuhwcODL86rcWgs7nB5+c/MGssvVS4cnsyXX8vNud17gJF
a5cTfUphBMNfCSWrSxhHX6GOIuBpnNr3x8M4IZwCt80O/UEQDBtCCWQww8/gguE3
tgEPFQ2ZYbF35mT/5ta+TEgeFVDLoaMVnXvO3YU4EHLyce3ECI7XcXMnliyYczJo
hh0IutEZD6LUQD66TdkaG5Zwcc4d5TbLREJv0OQLwxIs7yqQeHF6ly41ro1nlVBP
a4gNPN5rqe0wo3jgrO7oGH/MjI9CRb2o6IXD6myrPY+devU5T7d92+JGtD67t87S
BMjJj8HA4NZYtyP6ySBm
-----END CERTIFICATE-----
Generated at Wed Sep 23 08:32:09 2026 by rpki-client