
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/431106B2125611ED9FB5292EC4F9AE02.roa
File: 431106B2125611ED9FB5292EC4F9AE02.roa (raw, json)
Hash identifier: HC1HlngI6XYoexa+iP3Lsv/hSItkWBl0CdvwYSY1Yh0=
Subject key identifier: CE:74:C9:10:75:11:99:E5:05:F2:FF:21:63:4D:CF:74:01:96:2C:89
Certificate issuer: /CN=A9179EE2/serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD
Certificate serial: 0878
Authority key identifier: 82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/431106B2125611ED9FB5292EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:11:26 +0000
ROA not before: Sat 10 Jan 2026 20:17:17 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 997
IP address blocks: 103.145.58.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl
rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2168 (0x878)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179EE2, serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD
Validity
Not Before: Jan 10 20:17:17 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a4733e-332b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:72:e1:f1:c0:cf:63:46:c2:06:df:63:dc:22:
b0:4b:68:cd:f5:50:87:f4:9a:e6:b0:3b:47:14:8f:
fa:e0:c4:e5:a6:dd:9c:30:38:0e:93:dc:6d:9c:d7:
17:8b:5a:e8:2a:ae:77:d1:49:f6:db:be:ec:72:04:
48:e7:14:d1:b6:f9:01:4a:94:e6:7e:df:03:0f:ae:
b2:f4:d6:55:cd:cd:cf:4a:60:e4:f9:f1:49:e1:c9:
66:86:de:77:14:59:ae:eb:c5:e1:4c:1a:e3:63:1f:
b0:48:d0:f9:25:cd:80:b2:25:97:3e:5b:93:63:ec:
99:22:82:6b:c6:e3:48:c5:0d:f1:74:86:b1:a6:c4:
53:cb:a6:3d:5d:e6:62:e5:d7:fc:46:5c:6c:f7:a7:
00:89:4f:c8:42:e3:4f:a8:65:e1:54:19:3c:d3:0b:
95:ac:6e:ee:44:b1:42:d8:61:70:a3:d7:83:3d:64:
e0:d2:54:67:53:1b:23:86:ce:4a:ef:d8:b7:92:01:
50:6f:6e:34:d5:eb:03:a5:62:cb:47:91:67:e5:81:
ce:bf:d8:59:68:ed:a8:a7:88:e7:7b:03:67:f6:bc:
a4:7a:ef:60:6c:fb:08:f1:ec:cc:33:c7:57:ea:9e:
56:3b:06:4d:a1:4d:9b:0b:b8:52:8f:6b:51:d8:f3:
bd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:74:C9:10:75:11:99:E5:05:F2:FF:21:63:4D:CF:74:01:96:2C:89
X509v3 Authority Key Identifier:
keyid:82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/431106B2125611ED9FB5292EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.145.58.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:91:c2:d4:e6:b2:11:68:91:fd:f2:c5:5e:95:41:69:95:a1:
62:55:54:95:6f:26:22:c2:e7:4d:a5:0f:d7:87:71:2c:3b:4a:
8f:5f:53:a0:a2:18:86:80:d0:0f:8a:37:5c:ec:5e:28:24:41:
37:65:a7:11:a5:2f:7e:ea:48:d9:08:6b:8b:fb:45:d8:ba:50:
e6:87:8e:0f:2e:b3:b7:43:0e:64:52:3b:39:8e:7c:22:4a:9c:
31:91:26:a7:19:71:cd:b2:b3:c0:e8:af:38:56:18:4d:fe:a5:
5f:4d:ab:6a:ea:f2:c8:1d:c9:a4:26:4d:1e:85:0f:30:02:1f:
6a:c0:b1:d7:42:6f:68:b0:d5:c9:ab:a8:ca:c7:d5:3f:a8:c7:
45:e1:fa:00:cf:d2:72:ff:a6:7e:bf:9b:36:44:bc:f6:39:dc:
00:50:d9:80:07:c5:9f:1a:bb:ec:4c:bd:83:31:28:67:f3:ed:
2d:37:f9:f3:62:d4:97:4b:60:d7:96:7b:9e:9c:50:14:98:1f:
22:cd:bf:29:74:99:be:d8:59:d5:54:8d:7c:02:b4:cc:77:9c:
37:1a:0a:4b:c0:aa:26:dc:4a:e9:c0:ce:43:b0:21:e1:a7:2a:
ad:8c:8a:af:ef:b5:04:1a:6c:e1:bd:27:08:06:a2:9a:1c:bb:
d9:45:6e:f1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlFRTIxMTAvBgNVBAUTKDgyMTg1MjRGN0ExNkI1OEMwRDlCNzM5NDAzMTkzOTdF
RTRGQ0E2RkQwHhcNMjYwMTEwMjAxNzE3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzMzZS0zMzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7XLh8cDPY0bCBt9j3CKwS2jN9VCH9JrmsDtHFI/64MTlpt2cMDgOk9xtnNcX
i1roKq530Un2277scgRI5xTRtvkBSpTmft8DD66y9NZVzc3PSmDk+fFJ4clmht53
FFmu68XhTBrjYx+wSND5Jc2AsiWXPluTY+yZIoJrxuNIxQ3xdIaxpsRTy6Y9XeZi
5df8Rlxs96cAiU/IQuNPqGXhVBk80wuVrG7uRLFC2GFwo9eDPWTg0lRnUxsjhs5K
79i3kgFQb2401esDpWLLR5Fn5YHOv9hZaO2op4jnewNn9rykeu9gbPsI8ezMM8dX
6p5WOwZNoU2bC7hSj2tR2PO9RwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFM50yRB1
EZnlBfL/IWNNz3QBliyJMB8GA1UdIwQYMBaAFIIYUk96FrWMDZtzlAMZOX7k/Kb9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUVFMi8wMkIyNzM4OEY1
NzIxMUVBOUEyNDc5MTdDNEY5QUUwMi9naGhTVDNvV3RZd05tM09VQXhrNWZ1VDhw
djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2doaFNUM29XdFl3Tm0zT1VBeGs1ZnVUOHB2MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzlFRTIvMDJCMjczODhGNTcyMTFFQTlBMjQ3OTE3QzRGOUFFMDIvNDMxMTA2QjIx
MjU2MTFFRDlGQjUyOTJFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5E6MA0GCSqGSIb3DQEBCwUAA4IBAQBtkcLU5rIRaJH98sVelUFp
laFiVVSVbyYiwudNpQ/Xh3EsO0qPX1OgohiGgNAPijdc7F4oJEE3ZacRpS9+6kjZ
CGuL+0XYulDmh44PLrO3Qw5kUjs5jnwiSpwxkSanGXHNsrPA6K84VhhN/qVfTatq
6vLIHcmkJk0ehQ8wAh9qwLHXQm9osNXJq6jKx9U/qMdF4foAz9Jy/6Z+v5s2RLz2
OdwAUNmAB8WfGrvsTL2DMShn8+0tN/nzYtSXS2DXlnuenFAUmB8izb8pdJm+2FnV
VI18ArTMd5w3GgpLwKom3ErpwM5DsCHhpyqtjIqv77UEGmzhvScIBqKaHLvZRW7x
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:58:33 2026 by rpki-client