
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/5010A55A8C6411EE9E586967C4F9AE02.roa
File: 5010A55A8C6411EE9E586967C4F9AE02.roa (raw, json)
Hash identifier: cxuAvgnbeaXvF1kr6Yn/KL+lFxTFytqsYSOxgRR+5Ng=
Subject key identifier: 4B:C3:68:46:7B:C6:8A:9F:32:A7:24:96:DD:D3:77:77:41:56:4D:CD
Certificate issuer: /CN=A913B5C2/serialNumber=1EED263F0428D84E3FBE51753D16D4B3D62797C4
Certificate serial: 07F3
Authority key identifier: 1E:ED:26:3F:04:28:D8:4E:3F:BE:51:75:3D:16:D4:B3:D6:27:97:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/5010A55A8C6411EE9E586967C4F9AE02.roa
Signing time: Fri 24 Apr 2026 21:28:05 +0000
ROA not before: Fri 24 Apr 2026 21:28:05 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 136416
IP address blocks: 103.86.200.0/22 maxlen: 24
2400:c740::/32 maxlen: 32
2400:c740::/36 maxlen: 36
2400:c740:1000::/36 maxlen: 36
2400:c740:2000::/36 maxlen: 36
2400:c740:3000::/36 maxlen: 36
2400:c740:4000::/36 maxlen: 36
2400:c740:5000::/36 maxlen: 36
2400:c740:6000::/36 maxlen: 36
2400:c740:7000::/36 maxlen: 36
2400:c740:8000::/36 maxlen: 36
2400:c740:9000::/36 maxlen: 36
2400:c740:a000::/36 maxlen: 36
2400:c740:b000::/36 maxlen: 36
2400:c740:c000::/36 maxlen: 36
2400:c740:d000::/36 maxlen: 36
2400:c740:e000::/36 maxlen: 36
2400:c740:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.crl
rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2035 (0x7f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B5C2, serialNumber=1EED263F0428D84E3FBE51753D16D4B3D62797C4
Validity
Not Before: Apr 24 21:28:05 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69ebe065-5798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b4:15:42:9b:81:b3:d3:c1:9b:34:22:b6:49:
2b:52:7a:b3:33:ab:53:40:4d:2f:19:45:fb:a5:9a:
0f:a3:46:87:25:ad:31:e5:76:60:59:3a:3e:62:c4:
34:f3:52:07:f3:9d:f9:3a:ec:53:83:fb:e3:5e:93:
2d:12:dd:ef:5f:84:4f:74:8d:72:ce:54:96:ef:81:
9f:12:8a:59:4e:34:19:7b:e8:2f:e3:45:55:0b:a0:
84:0f:a5:83:c6:6a:27:df:a7:c6:35:c9:c5:e2:b9:
df:76:fb:45:cf:7c:1b:a5:f0:47:4e:69:7b:a7:f2:
57:20:87:6d:55:35:31:39:8b:a8:60:09:da:bc:e9:
46:ba:30:25:85:33:74:9c:17:09:34:f2:a1:56:ce:
e5:d4:64:80:e2:6e:21:44:44:a5:96:df:81:63:2b:
73:9e:d4:b5:f2:ad:76:8f:37:e8:09:de:f9:74:0a:
84:50:1b:be:eb:50:44:46:fb:d3:08:48:e5:90:31:
16:b1:e5:50:2a:bf:2f:86:09:94:ab:40:2d:5f:4a:
8e:89:ee:b6:e3:f1:15:9f:e4:16:79:6c:00:cf:d6:
c7:1b:99:f0:0d:71:a6:73:f5:5b:ef:ec:63:a0:0f:
be:ec:da:df:b0:3f:7a:65:5d:10:55:ea:d5:5f:6a:
d7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C3:68:46:7B:C6:8A:9F:32:A7:24:96:DD:D3:77:77:41:56:4D:CD
X509v3 Authority Key Identifier:
keyid:1E:ED:26:3F:04:28:D8:4E:3F:BE:51:75:3D:16:D4:B3:D6:27:97:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/5010A55A8C6411EE9E586967C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.86.200.0/22
IPv6:
2400:c740::/32
Signature Algorithm: sha256WithRSAEncryption
9d:06:7d:13:1c:63:c3:65:92:d8:8e:d5:91:51:f9:16:15:dc:
3e:fb:16:55:75:63:8d:a1:2c:6d:6c:10:5b:bd:75:36:4d:33:
a2:0d:91:59:14:fe:fe:64:bf:7c:44:8e:53:2b:82:79:8d:6a:
93:b6:fe:49:5c:c1:f5:cf:14:da:36:40:94:cf:e1:fc:10:50:
0a:67:50:e4:a2:81:2f:2c:64:40:52:30:8b:61:e6:23:d3:22:
85:32:95:c2:de:4f:93:31:c3:f2:97:4f:04:31:81:5e:97:3b:
99:c7:7a:86:3a:d8:3e:da:7d:ce:4d:ba:f9:c3:c0:37:b8:6b:
18:5c:c8:af:04:cf:f3:3a:5f:dc:4c:2f:21:0d:eb:43:1e:c1:
c3:f7:d7:9f:5e:c5:df:8d:d9:ba:23:5d:80:db:79:2b:1d:23:
4e:ca:01:ef:56:e4:5c:c0:5a:b4:aa:7b:b3:3c:d6:de:c6:17:
bb:d1:e9:e3:5a:3c:a6:cf:62:18:1f:e4:4e:3e:9b:28:ba:db:
c1:93:66:e2:e1:40:27:94:ff:17:09:aa:8e:d2:42:d7:8a:50:
0c:58:3d:94:0a:d1:48:21:bf:04:aa:a6:b8:4e:35:be:3b:c8:
32:be:2a:12:2a:cb:de:fd:f0:29:b3:4c:2f:8c:ce:62:8f:c4:
97:4c:96:47
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICB/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I1QzIxMTAvBgNVBAUTKDFFRUQyNjNGMDQyOEQ4NEUzRkJFNTE3NTNEMTZENEIz
RDYyNzk3QzQwHhcNMjYwNDI0MjEyODA1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWViZTA2NS01Nzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp7QVQpuBs9PBmzQitkkrUnqzM6tTQE0vGUX7pZoPo0aHJa0x5XZgWTo+YsQ0
81IH8535OuxTg/vjXpMtEt3vX4RPdI1yzlSW74GfEopZTjQZe+gv40VVC6CED6WD
xmon36fGNcnF4rnfdvtFz3wbpfBHTml7p/JXIIdtVTUxOYuoYAnavOlGujAlhTN0
nBcJNPKhVs7l1GSA4m4hRESllt+BYytzntS18q12jzfoCd75dAqEUBu+61BERvvT
CEjlkDEWseVQKr8vhgmUq0AtX0qOie624/EVn+QWeWwAz9bHG5nwDXGmc/Vb7+xj
oA++7NrfsD96ZV0QVerVX2rXFwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFEvDaEZ7
xoqfMqcklt3Td3dBVk3NMB8GA1UdIwQYMBaAFB7tJj8EKNhOP75RdT0W1LPWJ5fE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjVDMi83NzlEMDRBMDM2
NDExMUVCODQ5OUQyMTlDNEY5QUUwMi9IdTBtUHdRbzJFNF92bEYxUFJiVXM5WW5s
OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h1MG1Qd1FvMkU0X3ZsRjFQUmJVczlZbmw4US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0I1QzIvNzc5RDA0QTAzNjQxMTFFQjg0OTlEMjE5QzRGOUFFMDIvNTAxMEE1NUE4
QzY0MTFFRTlFNTg2OTY3QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ1bIMA0EAgACMAcDBQAkAMdAMA0GCSqGSIb3DQEBCwUAA4IBAQCd
Bn0THGPDZZLYjtWRUfkWFdw++xZVdWONoSxtbBBbvXU2TTOiDZFZFP7+ZL98RI5T
K4J5jWqTtv5JXMH1zxTaNkCUz+H8EFAKZ1DkooEvLGRAUjCLYeYj0yKFMpXC3k+T
McPyl08EMYFelzuZx3qGOtg+2n3OTbr5w8A3uGsYXMivBM/zOl/cTC8hDetDHsHD
99efXsXfjdm6I12A23krHSNOygHvVuRcwFq0qnuzPNbexhe70enjWjymz2IYH+RO
PpsoutvBk2bi4UAnlP8XCaqO0kLXilAMWD2UCtFIIb8Eqqa4TjW+O8gyvioSKsve
/fAps0wvjM5ij8SXTJZH
-----END CERTIFICATE-----
Generated at Wed May 13 10:47:54 2026 by rpki-client