
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/1EDD32B274BE11EA97202132C4F9AE02.roa
File: 1EDD32B274BE11EA97202132C4F9AE02.roa (raw, json)
Hash identifier: SrQx35DtVrxCsWAmfoF73hHpqsoh3DRvVDcP3/ka8L0=
Subject key identifier: E2:FE:70:21:4F:40:6B:A4:67:DD:7F:37:2D:46:25:AC:62:F9:A4:78
Certificate issuer: /CN=A9149063/serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818
Certificate serial: 0ADE
Authority key identifier: 97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/1EDD32B274BE11EA97202132C4F9AE02.roa
Signing time: Tue 30 Jun 2026 20:23:59 +0000
ROA not before: Tue 30 Jun 2026 20:23:59 +0000
ROA not after: Fri 30 Oct 2026 00:00:00 +0000
asID: 140524
IP address blocks: 103.150.20.0/24 maxlen: 24
103.150.21.0/24 maxlen: 24
2001:df3:4e80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl
rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:47:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2782 (0xade)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149063, serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818
Validity
Not Before: Jun 30 20:23:59 2026 GMT
Not After : Oct 30 00:00:00 2026 GMT
Subject: CN=6a4425df-c0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:67:01:10:9d:74:56:1b:ee:6d:5d:8f:b2:
81:1c:7b:33:d4:12:f3:28:42:15:e7:5b:24:ab:ff:
2b:bb:c8:1b:1e:65:99:38:4a:93:0e:bb:df:13:0f:
98:da:e4:0c:da:fc:d1:df:8c:10:c5:fa:94:63:f5:
96:2b:9d:c3:9b:ab:5e:bc:8c:1b:c2:35:6f:51:2e:
77:e0:e0:7c:59:d9:db:27:3e:3e:d6:89:7a:6d:e8:
23:10:d3:d6:1c:ab:9f:32:a1:b9:94:2d:0e:a5:2e:
82:04:36:dd:4f:e0:72:74:3c:36:3b:00:39:d2:93:
a9:b5:05:53:86:20:38:68:51:68:64:1a:29:65:83:
c3:66:cf:27:fd:de:08:ec:86:cf:f7:37:29:fd:04:
80:bb:21:66:34:7f:54:5a:54:1a:4e:11:de:87:b5:
c3:d4:ef:6d:5a:00:93:90:18:1b:c5:db:a5:6b:9d:
08:ff:ea:9b:60:55:08:84:4d:6a:c6:a9:80:75:be:
6f:e7:fd:01:30:44:6f:90:0e:8a:12:0e:af:94:ca:
f1:b3:ef:44:0d:b3:af:db:5b:5b:a4:e4:d3:7a:47:
82:36:79:89:c4:7e:e9:63:d9:c0:73:be:26:d0:9d:
99:3c:fd:03:c9:43:bb:6a:d7:b3:32:b8:24:a6:6c:
3d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FE:70:21:4F:40:6B:A4:67:DD:7F:37:2D:46:25:AC:62:F9:A4:78
X509v3 Authority Key Identifier:
keyid:97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/1EDD32B274BE11EA97202132C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.150.20.0/23
IPv6:
2001:df3:4e80::/48
Signature Algorithm: sha256WithRSAEncryption
bb:df:f2:35:2e:a4:3c:5b:80:df:3c:18:f6:42:69:2e:3d:96:
f2:51:21:dc:c6:e2:bf:3a:ae:d1:88:86:a2:9e:2c:fd:91:62:
a1:d1:f5:3c:cc:6f:9f:5a:67:63:3a:eb:48:3e:f5:7f:72:34:
7b:b3:7b:00:37:0d:1b:49:ae:b9:d4:f4:05:8b:7b:9e:a0:c6:
05:54:5e:f0:93:2d:14:0f:b0:d3:7e:7b:95:67:da:b1:db:0e:
9d:80:3e:88:c8:83:c4:76:82:f6:ca:89:c4:21:f0:fa:1f:2b:
50:f8:b7:67:69:05:59:68:37:79:ea:ce:00:14:02:3b:1d:4d:
d1:26:da:15:2f:4b:20:e2:18:55:cd:c0:c9:0f:81:d6:84:54:
6a:e9:10:d6:dc:a2:ad:e9:1d:93:65:80:a6:6d:61:43:51:fe:
6c:36:0e:88:e4:cc:97:0c:97:58:d9:ec:97:95:e2:63:60:3d:
63:1c:11:02:04:a1:b0:d7:c4:29:91:c7:94:5d:5a:82:4d:ca:
5c:f8:a1:d3:61:20:71:e9:bd:bd:f0:93:95:1a:1d:20:5b:fd:
26:69:b6:4c:1b:63:a3:88:55:b4:73:e6:29:8b:22:b8:d6:2d:
75:aa:3b:5f:03:49:41:fa:61:ef:59:dc:c5:87:c5:41:97:80:
57:0c:d5:59
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICCt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDkwNjMxMTAvBgNVBAUTKDk3OTdGNzg1MjcwNkVFMUM0MkM2OEE1RTQ1MEI1NzJG
OEVFNTA4MTgwHhcNMjYwNjMwMjAyMzU5WhcNMjYxMDMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQ0MjVkZi1jMGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwBVnARCddFYb7m1dj7KBHHsz1BLzKEIV51skq/8ru8gbHmWZOEqTDrvfEw+Y
2uQM2vzR34wQxfqUY/WWK53Dm6tevIwbwjVvUS534OB8WdnbJz4+1ol6begjENPW
HKufMqG5lC0OpS6CBDbdT+BydDw2OwA50pOptQVThiA4aFFoZBopZYPDZs8n/d4I
7IbP9zcp/QSAuyFmNH9UWlQaThHeh7XD1O9tWgCTkBgbxdula50I/+qbYFUIhE1q
xqmAdb5v5/0BMERvkA6KEg6vlMrxs+9EDbOv21tbpOTTekeCNnmJxH7pY9nAc74m
0J2ZPP0DyUO7atezMrgkpmw9GQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFOL+cCFP
QGukZ91/Ny1GJaxi+aR4MB8GA1UdIwQYMBaAFJeX94UnBu4cQsaKXkULVy+O5QgY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTA2My82ODg5QURGMjc0
QkMxMUVBOTUwOTlEMkJDNEY5QUUwMi9sNWYzaFNjRzdoeEN4b3BlUlF0WEw0N2xD
QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2w1ZjNoU2NHN2h4Q3hvcGVSUXRYTDQ3bENCZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDkwNjMvNjg4OUFERjI3NEJDMTFFQTk1MDk5RDJCQzRGOUFFMDIvMUVERDMyQjI3
NEJFMTFFQTk3MjAyMTMyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ5YUMA8EAgACMAkDBwAgAQ3zToAwDQYJKoZIhvcNAQELBQADggEB
ALvf8jUupDxbgN88GPZCaS49lvJRIdzG4r86rtGIhqKeLP2RYqHR9TzMb59aZ2M6
60g+9X9yNHuzewA3DRtJrrnU9AWLe56gxgVUXvCTLRQPsNN+e5Vn2rHbDp2APojI
g8R2gvbKicQh8PofK1D4t2dpBVloN3nqzgAUAjsdTdEm2hUvSyDiGFXNwMkPgdaE
VGrpENbcoq3pHZNlgKZtYUNR/mw2DojkzJcMl1jZ7JeV4mNgPWMcEQIEobDXxCmR
x5RdWoJNylz4odNhIHHpvb3wk5UaHSBb/SZptkwbY6OIVbRz5imLIrjWLXWqO18D
SUH6Ye9Z3MWHxUGXgFcM1Vk=
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:54:08 2026 by rpki-client