
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/945375FAF69511EC90A47215C4F9AE02.roa
File: 945375FAF69511EC90A47215C4F9AE02.roa (raw, json)
Hash identifier: zMi/iKJQrGzXvdGe1pLHWvdh1dvtB0WJqrM1vceGtKE=
Subject key identifier: A8:B5:1F:A7:91:33:00:BB:57:45:6E:9E:65:B4:6F:47:CD:D9:00:00
Certificate issuer: /CN=A917C606/serialNumber=B872F34D55251FA770ECC393D26712103D550737
Certificate serial: 045B
Authority key identifier: B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/945375FAF69511EC90A47215C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:50:01 +0000
ROA not before: Thu 04 Dec 2025 23:07:08 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 140619
IP address blocks: 103.176.206.0/24 maxlen: 24
103.176.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl
rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1115 (0x45b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C606, serialNumber=B872F34D55251FA770ECC393D26712103D550737
Validity
Not Before: Dec 4 23:07:08 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a435f9-dc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:e0:18:1a:f6:5b:ba:90:d9:86:45:64:32:
fc:da:ea:91:c1:63:b9:0f:47:ae:41:2f:18:2a:33:
0a:a8:33:a0:4f:6e:0f:a3:a3:29:ca:1e:ed:fc:d0:
3f:7d:03:0e:65:93:ca:18:50:51:9e:67:db:c0:e2:
b4:25:07:1b:ff:cb:29:74:c0:6b:59:21:30:ba:6c:
b3:75:c8:24:78:78:f5:9f:17:ed:54:b5:38:7f:11:
b9:f5:ff:3a:99:29:ef:58:eb:fd:70:42:9c:34:32:
65:5e:61:45:25:de:ac:e6:dc:c7:d6:ff:4a:8b:30:
99:61:05:db:45:8e:c9:c7:6f:42:0a:13:59:49:00:
90:ba:be:2d:66:9e:29:c9:91:ea:1d:94:ca:ac:dc:
b3:d9:c4:be:39:e0:2f:a0:81:13:b9:42:b0:36:c6:
f2:09:03:f2:10:47:48:70:9c:6e:db:ed:5f:7d:94:
03:8a:85:c5:b8:7c:cd:06:c0:59:06:5f:ab:84:c0:
35:ec:69:db:51:de:80:d1:ac:15:21:0d:68:7e:a0:
68:08:b2:81:24:f4:58:00:41:f5:d7:ea:59:26:70:
e5:d8:b2:ac:a5:5a:32:4e:18:54:0c:50:60:ce:0f:
87:63:95:8a:8f:cc:e8:61:6b:0d:72:3e:28:5d:e3:
41:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B5:1F:A7:91:33:00:BB:57:45:6E:9E:65:B4:6F:47:CD:D9:00:00
X509v3 Authority Key Identifier:
keyid:B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/945375FAF69511EC90A47215C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.176.206.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:5e:25:62:5d:a7:f4:7e:74:38:0a:5b:55:16:ce:c3:42:23:
03:e8:07:b9:62:ab:42:ea:43:1d:ef:31:c1:0d:72:48:17:98:
62:4a:62:48:ea:a0:40:1b:f7:5d:69:79:fe:fd:3a:96:75:d3:
68:8f:f3:b9:a5:51:41:61:22:3f:b6:c1:cf:c5:dd:9b:ed:e7:
44:ab:38:4b:ff:df:f2:52:a8:e0:d5:cf:07:18:a1:4a:c8:00:
10:87:00:f0:cb:4b:2b:57:14:a9:23:9f:ba:9e:c7:f1:29:33:
ce:32:d2:83:bb:d8:bf:54:31:2b:a4:a8:01:59:28:c5:78:b2:
fc:cf:b5:6e:0f:4a:41:31:29:0b:6e:bb:49:81:f5:f8:3e:a9:
0d:18:f0:a7:17:45:7a:69:85:36:24:41:cc:5e:b4:a0:76:f5:
13:c1:49:9f:a2:bb:b2:13:84:8e:ab:07:11:07:0a:12:1c:ae:
d6:50:8c:fa:a5:16:e5:07:8f:40:06:4d:db:a7:13:be:11:e2:
aa:3d:95:56:91:42:db:c8:ad:d3:13:67:f9:d7:ee:e7:9e:91:
d4:fe:27:23:da:c4:bb:a4:d9:37:0c:ce:e3:1c:80:8d:3f:d1:
9e:60:ff:32:10:f5:01:22:c7:8d:b6:4b:4b:02:e7:ae:7e:5a:
92:4b:ed:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:14 2026 by rpki-client