
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/E43CFABEB67611ECACB17C42C4F9AE02.roa
File: E43CFABEB67611ECACB17C42C4F9AE02.roa (raw, json)
Hash identifier: Q70ySqmVrWqXbqywsKojSz1uzuNP5lCm6hnb7zn8qM8=
Subject key identifier: D2:7A:1B:07:B0:46:2A:74:F3:D6:60:A9:E6:F5:BB:F9:62:24:AC:81
Certificate issuer: /CN=A9113683/serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8
Certificate serial: 09C8
Authority key identifier: CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/E43CFABEB67611ECACB17C42C4F9AE02.roa
Signing time: Tue 12 May 2026 12:05:46 +0000
ROA not before: Tue 12 May 2026 12:05:46 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 139009
IP address blocks: 103.152.147.0/24 maxlen: 24
103.153.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl
rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2504 (0x9c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113683, serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8
Validity
Not Before: May 12 12:05:46 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6a03179a-4d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7a:42:7a:5d:3a:75:31:6f:a2:0d:f5:f2:9f:
d1:d9:a5:c3:40:65:85:fb:99:3b:90:12:f4:ba:fb:
6d:bc:81:f1:cd:d3:4b:ad:2e:4b:6e:f6:2e:8c:90:
f4:3d:6e:3f:d6:f3:c6:48:70:4a:f2:1d:85:7d:b1:
2f:2b:b5:a1:95:b5:f2:d5:04:f3:d9:22:05:8b:f7:
ed:7b:02:72:4e:77:33:ab:23:e3:a9:d9:14:93:9f:
6b:13:a5:3c:df:ff:24:2c:71:96:e7:a5:54:85:76:
c3:cc:76:b8:d7:3b:00:e4:8c:83:62:c7:b7:8f:60:
af:4d:11:7b:bf:35:39:81:06:1c:1e:36:1c:ea:a9:
9b:d9:37:1b:bb:14:90:76:82:a7:4c:02:ad:4f:6f:
11:c0:b0:90:8c:3a:20:96:cf:ef:75:6c:30:f4:c5:
ce:57:a5:9a:60:61:15:c2:ea:15:63:30:7b:2e:98:
db:62:c1:1f:18:00:a8:ca:32:cb:a0:9e:d1:82:a3:
3a:10:38:ed:90:d5:49:0a:ec:23:70:26:3a:30:76:
a7:38:06:4e:6d:b1:c0:a5:f4:e3:0f:c4:3c:82:4c:
75:09:62:38:bb:6d:ac:89:08:0f:e3:dd:b9:df:4f:
ac:2b:3b:0b:d8:5a:58:9b:0d:75:40:32:d2:66:df:
50:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7A:1B:07:B0:46:2A:74:F3:D6:60:A9:E6:F5:BB:F9:62:24:AC:81
X509v3 Authority Key Identifier:
keyid:CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/E43CFABEB67611ECACB17C42C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.152.147.0/24
103.153.66.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:95:11:97:67:99:61:80:d5:97:07:6b:9a:e9:d0:9d:7c:cc:
15:fb:f4:e8:ef:72:7e:81:08:14:a4:75:65:32:8a:37:1f:e0:
44:32:54:a3:56:31:90:fc:e4:7e:2c:71:57:fe:a8:d7:25:76:
c3:07:96:66:06:7a:fa:14:78:97:58:6f:03:4d:cf:24:1d:2d:
9f:3c:88:c1:e4:20:d0:9a:00:b6:e0:17:e7:f0:b6:43:01:97:
70:73:3c:92:83:4d:28:d8:12:6c:1b:01:ab:49:f0:bd:dc:cc:
52:df:42:2c:d0:a3:68:5d:cf:13:12:8b:8f:98:9e:27:c6:77:
88:79:3c:8a:46:e9:02:88:7f:32:3f:1b:12:ee:06:20:26:e3:
83:cb:91:05:9c:e8:f0:88:e1:9a:ad:d6:a6:be:da:ff:3c:0e:
7b:80:45:fd:68:f3:76:a1:03:e1:0a:92:7c:2f:f2:62:75:8b:
1c:22:cc:51:52:0b:8e:79:75:ab:5f:31:f4:c8:de:6a:8f:ad:
08:7f:a2:b3:b3:7e:78:31:04:3b:14:99:e9:12:6a:8f:02:97:
4c:70:ee:5e:04:1f:60:53:ac:f3:4d:5d:7c:93:f9:f1:57:f7:
3b:a4:f2:e0:cb:02:bf:7e:ec:5a:d1:ec:a9:c4:97:35:54:e5:
a9:3d:06:d0
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTM2ODMxMTAvBgNVBAUTKENBN0M4NkJFMDBEQjQxNDUwM0VENUVFNkMwQUY5MjhG
MzRDNUM3RDgwHhcNMjYwNTEyMTIwNTQ2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTAzMTc5YS00ZDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5HpCel06dTFvog318p/R2aXDQGWF+5k7kBL0uvttvIHxzdNLrS5LbvYujJD0
PW4/1vPGSHBK8h2FfbEvK7WhlbXy1QTz2SIFi/ftewJyTnczqyPjqdkUk59rE6U8
3/8kLHGW56VUhXbDzHa41zsA5IyDYse3j2CvTRF7vzU5gQYcHjYc6qmb2TcbuxSQ
doKnTAKtT28RwLCQjDogls/vdWww9MXOV6WaYGEVwuoVYzB7LpjbYsEfGACoyjLL
oJ7RgqM6EDjtkNVJCuwjcCY6MHanOAZObbHApfTjD8Q8gkx1CWI4u22siQgP4925
30+sKzsL2FpYmw11QDLSZt9QMwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFNJ6Gwew
Rip089Zgqeb1u/liJKyBMB8GA1UdIwQYMBaAFMp8hr4A20FFA+1e5sCvko80xcfY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzY4My8zRjBCMzU2MkI3
OTMxMUVBQTRDNTRCMTRDNEY5QUUwMi95bnlHdmdEYlFVVUQ3Vjdtd0stU2p6VEZ4
OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lueUd2Z0RiUVVVRDdWN213Sy1TanpURng5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTM2ODMvM0YwQjM1NjJCNzkzMTFFQUE0QzU0QjE0QzRGOUFFMDIvRTQzQ0ZBQkVC
Njc2MTFFQ0FDQjE3QzQyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ5iTAwQAZ5lCMA0GCSqGSIb3DQEBCwUAA4IBAQCglRGXZ5lhgNWX
B2ua6dCdfMwV+/To73J+gQgUpHVlMoo3H+BEMlSjVjGQ/OR+LHFX/qjXJXbDB5Zm
Bnr6FHiXWG8DTc8kHS2fPIjB5CDQmgC24Bfn8LZDAZdwczySg00o2BJsGwGrSfC9
3MxS30Is0KNoXc8TEouPmJ4nxneIeTyKRukCiH8yPxsS7gYgJuODy5EFnOjwiOGa
rdamvtr/PA57gEX9aPN2oQPhCpJ8L/JidYscIsxRUguOeXWrXzH0yN5qj60If6Kz
s354MQQ7FJnpEmqPApdMcO5eBB9gU6zzTV18k/nxV/c7pPLgywK/fuxa0eypxJc1
VOWpPQbQ
-----END CERTIFICATE-----
Generated at Wed May 13 07:18:22 2026 by rpki-client