
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/8CED36D6ACE711F1BD2B417B7111F970.roa
File: 8CED36D6ACE711F1BD2B417B7111F970.roa (raw, json)
Hash identifier: Fuy55+TRJ4+flCS18gCAMHweuxcS0T4tNj0MKtEeuXc=
Subject key identifier: 6D:43:24:75:3C:59:42:54:2B:86:4B:AF:1E:F6:F3:B7:F5:66:4D:16
Certificate issuer: /CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
Certificate serial: 0306
Authority key identifier: 3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/8CED36D6ACE711F1BD2B417B7111F970.roa
Signing time: Thu 10 Sep 2026 07:16:33 +0000
ROA not before: Thu 10 Sep 2026 07:16:33 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 135075
IP address blocks: 103.20.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl
rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 774 (0x306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176909, serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
Validity
Not Before: Sep 10 07:16:33 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6aa25951-f577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:10:cf:29:8d:8a:63:06:0d:d0:e6:b9:1e:
64:51:dc:af:75:cd:31:d9:22:87:d9:2f:f9:40:77:
74:e5:03:22:47:c5:dd:0a:e4:41:43:0d:17:74:67:
39:56:d3:8c:b2:29:16:e6:19:0d:96:d6:73:23:89:
a3:4d:e9:50:4c:ec:a4:07:54:60:94:e7:cf:80:34:
38:a1:94:45:c6:11:0e:d9:32:61:b9:e5:12:b4:89:
bf:6d:51:20:af:f6:ae:fa:25:96:5b:83:a0:54:25:
e7:08:92:43:75:dc:62:3b:65:00:86:a5:63:e2:7d:
70:ba:ad:df:6f:9d:8a:fc:f1:df:86:21:27:90:75:
66:02:26:89:74:d0:d6:7f:9e:63:f2:43:9a:c9:1b:
f0:a4:46:f4:c2:d9:e0:53:4a:75:23:11:0e:c5:9e:
9d:f5:f8:28:7f:c7:29:b9:1c:fa:94:79:fc:51:72:
41:d7:0c:e2:06:1f:77:bb:f9:f4:0a:36:09:2e:e5:
f6:53:64:69:52:29:8d:fc:44:79:d2:ce:9c:41:c3:
bf:14:4e:85:67:98:fb:7e:c8:cc:49:11:63:df:cb:
2d:d3:bd:6d:e0:e0:29:c2:92:25:70:17:87:77:3c:
08:be:d6:c5:18:3b:48:67:d7:ca:e4:57:ca:a6:0e:
77:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:43:24:75:3C:59:42:54:2B:86:4B:AF:1E:F6:F3:B7:F5:66:4D:16
X509v3 Authority Key Identifier:
keyid:3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/8CED36D6ACE711F1BD2B417B7111F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.20.243.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:63:4f:2b:19:3a:47:d8:d9:bc:1a:4d:66:28:dc:05:f4:44:
aa:e2:cc:df:dc:25:04:03:02:98:cb:c7:3b:a2:5c:f2:2c:27:
44:d7:d6:c6:9e:d9:53:19:8a:08:59:4d:29:c5:85:e5:f5:ec:
3a:37:e0:35:01:a1:0f:64:f7:13:dc:60:3e:09:f1:35:fc:49:
86:34:99:7b:fb:90:36:17:e7:6c:13:a2:35:b4:2c:0c:05:7d:
42:60:c1:57:ac:85:57:47:a7:12:e6:be:14:0f:ec:b9:1d:33:
bf:b6:71:89:b5:fb:c9:86:5f:6e:dd:c1:25:d8:24:ab:7e:be:
fb:c8:7b:88:0a:73:a0:45:b2:c4:a2:9f:c5:45:09:ab:3e:48:
58:b5:da:26:31:00:18:27:7c:90:fd:f3:61:e4:e9:d9:99:3e:
a9:29:56:57:66:a8:85:da:ca:ed:12:bf:4f:db:6a:b7:17:5c:
2b:97:fe:c2:95:7e:1a:83:70:b1:f2:23:87:67:a4:2e:93:6a:
05:a3:94:27:80:c8:75:3a:20:07:05:08:1e:1c:d2:85:97:09:
9c:66:e0:0a:ba:bf:8f:5a:ca:9c:a4:93:10:ef:5e:84:4f:28:
ff:80:54:14:27:92:98:c0:73:a0:79:76:20:fa:ec:7f:ce:79:
7b:2f:20:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:40:47 2026 by rpki-client