
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/9BE3C7087E8311EEBC7E6681C4F9AE02.roa
File: 9BE3C7087E8311EEBC7E6681C4F9AE02.roa (raw, json)
Hash identifier: WYx1m//KJzwNa0S4q543WlbT86cDIRSE3yzbaO/SMbI=
Subject key identifier: 19:A9:D8:07:69:D0:2E:F5:BE:B6:A7:C9:85:6C:01:93:C2:32:21:E1
Certificate issuer: /CN=A917A4F7/serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA
Certificate serial: 01B4
Authority key identifier: 22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/9BE3C7087E8311EEBC7E6681C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:40:26 +0000
ROA not before: Fri 27 Jun 2025 04:22:58 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 149841
IP address blocks: 103.187.240.0/23 maxlen: 23
2400:7fa0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl
rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A4F7, serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA
Validity
Not Before: Jun 27 04:22:58 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a3ed6a-b4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:86:1f:55:6b:b1:c0:21:f9:17:ad:85:0b:46:
4a:c1:6f:16:17:a6:1c:ec:c5:35:fe:84:28:53:36:
8e:72:3d:8b:a8:34:39:cf:17:50:a5:ca:4c:27:1b:
c2:40:b6:fd:dc:87:41:1f:05:87:cb:63:d7:7e:6c:
13:98:c5:86:d7:ed:5f:6e:95:07:1d:c2:f0:8e:16:
41:d6:e9:e4:c5:0c:fe:5f:a6:eb:ac:a4:82:02:ac:
1e:ed:46:93:b4:8b:56:36:66:9a:8f:cd:70:3a:14:
3d:b1:37:03:e2:a1:50:68:a7:9d:c2:05:27:e2:fc:
85:12:1b:b7:aa:be:3e:78:da:16:00:43:61:e0:7c:
f7:52:69:06:a4:e5:04:44:3c:c5:64:0d:21:ee:3e:
18:36:0d:c3:56:4e:97:09:44:19:d9:2f:04:e3:28:
4e:39:ed:b5:4a:fa:34:57:0d:da:92:1b:27:8c:10:
b9:b3:6c:31:22:4b:dd:41:fe:15:69:44:0a:90:6c:
1e:84:3b:7d:12:36:12:ad:e8:e2:c7:cc:66:6d:30:
2a:3a:72:7d:04:7a:22:1e:13:d0:e6:7a:1e:76:a6:
dd:54:87:54:11:78:e5:21:0d:9a:45:81:06:08:f0:
1a:ca:2b:b6:8f:14:1c:e4:ea:8d:57:c6:fc:af:5e:
09:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A9:D8:07:69:D0:2E:F5:BE:B6:A7:C9:85:6C:01:93:C2:32:21:E1
X509v3 Authority Key Identifier:
keyid:22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/9BE3C7087E8311EEBC7E6681C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.187.240.0/23
IPv6:
2400:7fa0::/32
Signature Algorithm: sha256WithRSAEncryption
55:fb:79:5b:31:0d:4b:8d:f8:13:99:e8:4d:07:72:45:98:2e:
36:cf:f5:f0:80:ee:68:29:4a:2f:21:e4:57:ce:9e:83:93:e2:
e3:0c:7e:04:ee:6e:73:92:25:0a:fa:72:87:89:34:ff:3d:a9:
37:95:46:4b:79:cf:5a:36:25:fa:b5:58:77:95:69:32:ac:85:
cd:a7:33:94:d8:d8:93:25:97:a0:06:26:8f:c6:58:68:f0:90:
50:02:b7:41:14:90:c6:cf:19:a0:ad:50:64:a7:4d:9f:5a:91:
44:24:15:75:b4:3f:6a:93:c6:66:1c:af:8a:53:ec:38:62:97:
ff:2f:c0:df:11:dc:c1:af:8f:ba:2d:59:c9:16:b2:38:a9:bd:
98:47:0a:1c:6d:91:49:d9:f1:aa:88:cb:1a:7e:8f:c9:a8:97:
cd:91:32:24:6a:07:12:82:6d:c5:88:31:06:b2:59:2e:16:dc:
7e:f6:4a:5b:27:83:19:a8:73:2a:cf:6f:41:79:cc:15:1e:84:
fc:33:e5:22:85:bb:ff:0b:92:43:69:ea:15:7a:6d:1d:b4:c0:
76:b0:54:2b:27:65:a4:a5:28:c9:b1:31:fb:a5:29:db:92:89:
28:f0:61:a2:fb:27:7a:f5:2b:3d:d1:f4:fd:06:da:6a:4c:14:
a3:d1:71:1b
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E0RjcxMTAvBgNVBAUTKDIyRDNFOTc0NERBRDQ5NzUwMzZDQzQyMkFDMTFDNDA0
NzIwRTY2RUEwHhcNMjUwNjI3MDQyMjU4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZWQ2YS1iNGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx4YfVWuxwCH5F62FC0ZKwW8WF6Yc7MU1/oQoUzaOcj2LqDQ5zxdQpcpMJxvC
QLb93IdBHwWHy2PXfmwTmMWG1+1fbpUHHcLwjhZB1unkxQz+X6brrKSCAqwe7UaT
tItWNmaaj81wOhQ9sTcD4qFQaKedwgUn4vyFEhu3qr4+eNoWAENh4Hz3UmkGpOUE
RDzFZA0h7j4YNg3DVk6XCUQZ2S8E4yhOOe21Svo0Vw3akhsnjBC5s2wxIkvdQf4V
aUQKkGwehDt9EjYSrejix8xmbTAqOnJ9BHoiHhPQ5noedqbdVIdUEXjlIQ2aRYEG
CPAayiu2jxQc5OqNV8b8r14JQQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFBmp2Adp
0C71vranyYVsAZPCMiHhMB8GA1UdIwQYMBaAFCLT6XRNrUl1A2zEIqwRxARyDmbq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTRGNy8yQTQ4OTM4NjdF
ODIxMUVFOTlEQTlCN0FDNEY5QUUwMi9JdFBwZEUydFNYVURiTVFpckJIRUJISU9a
dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0l0UHBkRTJ0U1hVRGJNUWlyQkhFQkhJT1p1by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0E0RjcvMkE0ODkzODY3RTgyMTFFRTk5REE5QjdBQzRGOUFFMDIvOUJFM0M3MDg3
RTgzMTFFRUJDN0U2NjgxQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ7vwMA0EAgACMAcDBQAkAH+gMA0GCSqGSIb3DQEBCwUAA4IBAQBV
+3lbMQ1LjfgTmehNB3JFmC42z/XwgO5oKUovIeRXzp6Dk+LjDH4E7m5zkiUK+nKH
iTT/Pak3lUZLec9aNiX6tVh3lWkyrIXNpzOU2NiTJZegBiaPxlho8JBQArdBFJDG
zxmgrVBkp02fWpFEJBV1tD9qk8ZmHK+KU+w4Ypf/L8DfEdzBr4+6LVnJFrI4qb2Y
RwocbZFJ2fGqiMsafo/JqJfNkTIkagcSgm3FiDEGslkuFtx+9kpbJ4MZqHMqz29B
ecwVHoT8M+Uihbv/C5JDaeoVem0dtMB2sFQrJ2WkpSjJsTH7pSnbkoko8GGi+yd6
9Ss90fT9BtpqTBSj0XEb
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:35 2026 by rpki-client