
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/8D0C1E0E37EF11EE82AF270BC4F9AE02.roa
File: 8D0C1E0E37EF11EE82AF270BC4F9AE02.roa (raw, json)
Hash identifier: txUGRxDyqzvCkcHCojyp0uZqvLDabS3/HKOkSFV3MOY=
Subject key identifier: 91:F1:0A:7B:F1:9E:05:82:40:36:9A:26:46:1B:72:D3:CE:4A:FE:E1
Certificate issuer: /CN=A917ADD1/serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507
Certificate serial: 0225
Authority key identifier: 76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/8D0C1E0E37EF11EE82AF270BC4F9AE02.roa
Signing time: Fri 03 Jul 2026 03:31:17 +0000
ROA not before: Fri 03 Jul 2026 03:31:17 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 151470
IP address blocks: 103.229.234.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl
rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 549 (0x225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ADD1, serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507
Validity
Not Before: Jul 3 03:31:17 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a472d05-0056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:e4:73:e4:d9:bf:f2:37:2d:f1:17:0f:7c:
03:5e:4f:98:37:6a:cd:36:01:f0:7a:7f:e2:88:b5:
96:ed:dc:ac:d7:a5:65:aa:0f:a3:83:95:2e:ec:fb:
59:56:02:3c:e2:57:84:f9:12:5d:95:62:fa:b2:ad:
b5:ea:e0:dd:6f:9a:50:7f:43:13:30:85:1b:71:59:
02:c9:30:26:f1:50:ee:eb:a2:a2:c6:0b:f9:15:e1:
cf:a0:89:e6:48:a9:bc:6f:78:e8:78:3e:15:80:63:
c6:13:f8:71:00:4c:fa:83:f8:4d:c7:4f:a2:cd:f6:
04:da:2d:74:4b:d0:00:c6:ad:76:c3:f1:1c:53:22:
37:ec:11:c5:d3:1e:33:78:2e:87:07:da:2c:fd:ea:
9e:ae:65:ed:b2:32:0e:d5:93:57:49:65:a0:30:10:
ce:fb:f8:1a:16:94:9d:13:6b:28:d5:9b:02:a6:f2:
6e:39:65:75:b5:f4:cc:35:3e:43:a0:14:70:ff:43:
b9:ea:de:66:f7:06:f9:ce:ed:b3:8d:f8:78:6c:1b:
f6:dd:cd:ab:4f:d1:ad:9f:66:f0:43:a3:1d:07:15:
36:c2:55:eb:40:39:63:9a:b5:1d:17:68:7c:d4:9e:
7e:4f:aa:35:cf:36:72:79:3b:f4:30:5d:55:25:fd:
0c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F1:0A:7B:F1:9E:05:82:40:36:9A:26:46:1B:72:D3:CE:4A:FE:E1
X509v3 Authority Key Identifier:
keyid:76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/8D0C1E0E37EF11EE82AF270BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.229.234.0/23
Signature Algorithm: sha256WithRSAEncryption
30:59:94:34:39:32:5a:0e:cc:9e:8a:52:12:c7:e8:95:05:29:
28:47:9c:2d:82:b6:a0:2c:67:6f:a1:7f:19:ed:05:92:38:3d:
24:4a:d2:35:f3:c8:d3:4e:35:b1:3a:65:e8:86:94:45:44:14:
cf:78:8f:6c:ce:35:67:6b:86:2f:1f:a1:d3:f0:63:55:e2:ea:
21:7d:3a:f8:69:c7:fb:6a:81:8f:69:e8:c7:09:a6:1d:52:15:
44:2c:73:32:ed:05:26:b0:19:80:d3:7c:ac:5a:d8:b2:a0:02:
1c:f1:7e:67:1e:0e:bb:ab:10:2d:7b:f9:ad:4f:a3:2f:31:b9:
5e:e3:0d:9b:e5:2d:6b:7e:a7:12:29:a6:a9:6b:d3:3e:03:2f:
fd:39:16:61:c6:5d:02:17:5e:4f:5a:0c:dd:fd:29:76:64:22:
12:52:cd:ea:8f:36:d4:65:11:72:0a:5e:2b:7c:a4:a3:5b:c1:
2c:b1:f4:10:0a:8e:ab:60:95:47:1b:db:75:fb:00:4a:09:c8:
88:22:69:17:6c:34:2c:6e:0c:7b:7f:ff:5e:2a:67:f7:b1:4a:
20:50:9d:7b:97:51:44:2e:c5:a4:72:a5:1d:52:82:05:e5:57:
30:c0:c1:2e:dc:75:0f:3b:29:82:d9:93:0c:41:ca:a1:cb:70:
d2:43:e0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:01:43 2026 by rpki-client