
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/C664689AE0F511EABB96D531C4F9AE02.roa
File: C664689AE0F511EABB96D531C4F9AE02.roa (raw, json)
Hash identifier: e7xh0EsycLj4xWIjRzWHI3/y4rIpItug3rbcYHWwZyg=
Subject key identifier: 7A:7D:B0:DC:E3:2F:68:3A:23:E9:61:C1:4B:DD:97:23:21:DC:1C:FB
Certificate issuer: /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Certificate serial: 08DE
Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/C664689AE0F511EABB96D531C4F9AE02.roa
Signing time: Sat 02 May 2026 21:25:44 +0000
ROA not before: Sat 02 May 2026 21:25:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 103.152.248.0/24 maxlen: 24
103.152.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl
rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2270 (0x8de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Validity
Not Before: May 2 21:25:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f66bd8-8d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:51:44:0a:aa:0b:b3:e6:2f:b2:3d:3e:dc:81:
2e:d3:03:a8:36:38:01:34:1a:38:30:6f:a2:e8:25:
8e:d5:6c:4b:2e:fb:00:e7:60:8d:de:8a:8c:6a:ba:
9a:27:28:9a:5f:25:e7:25:7d:9c:aa:bc:ae:47:df:
f6:a0:b8:ef:0b:ef:45:05:e7:f4:8c:04:28:30:bf:
2a:28:20:00:b3:ad:84:d0:e7:0b:61:6d:b8:3e:7a:
19:f8:a1:63:e3:29:47:95:9f:29:b7:65:ba:36:23:
dd:98:e1:6c:4b:7c:aa:c3:78:43:e0:ed:8f:30:e6:
e7:80:6b:be:34:35:34:2b:c1:99:4c:da:79:57:41:
87:99:dc:eb:19:ab:ef:d8:64:5d:6d:2e:1f:5e:0a:
0e:98:1a:52:fb:7c:9c:08:9a:d0:1f:05:5b:bd:5b:
ca:bc:48:74:c6:bd:90:a4:91:20:3b:37:dd:26:b6:
c2:01:d0:eb:bd:00:3c:67:67:59:04:34:87:f7:aa:
87:76:2d:42:26:4f:c8:ac:f7:fd:ec:20:b4:ef:f2:
99:da:13:c9:c2:ed:37:01:d6:80:62:f4:c3:d5:f6:
08:c6:58:b4:12:e9:35:5f:e2:8d:3d:0d:71:b2:2d:
d9:a0:17:ba:71:fe:79:53:02:30:e5:69:dc:c5:3e:
e6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7D:B0:DC:E3:2F:68:3A:23:E9:61:C1:4B:DD:97:23:21:DC:1C:FB
X509v3 Authority Key Identifier:
keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/C664689AE0F511EABB96D531C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.152.248.0/23
Signature Algorithm: sha256WithRSAEncryption
23:dd:3e:9e:c1:a7:3f:4f:b6:76:e3:6e:24:1a:3d:39:45:45:
3b:d8:15:a5:3c:55:72:0e:81:5d:73:53:d0:ed:50:7d:02:75:
e5:72:d6:c6:73:69:01:a9:70:1d:ca:ae:b9:83:15:4d:02:f4:
9a:9f:14:e4:e9:73:78:01:72:7a:7c:46:ac:30:f7:ab:10:02:
f2:1f:04:6a:70:26:a1:38:5e:a0:31:23:e4:5d:81:cb:d3:24:
82:c6:1f:6b:f5:c2:4b:5b:b3:e6:3f:0d:63:f6:56:78:53:ed:
b7:87:bc:87:a9:d8:79:98:e9:8b:10:a9:81:b9:8f:b8:cb:02:
91:d5:cb:73:c6:65:d7:98:ba:6d:13:ac:8f:93:d0:9e:e2:4d:
48:39:13:33:a8:38:fc:1a:d7:4c:49:8b:f9:f8:cf:51:87:8a:
50:08:bf:36:41:d0:4e:dc:6c:46:24:77:cb:be:b3:9e:72:8d:
7d:bb:1f:2c:57:b0:d2:7b:90:25:29:2d:00:6f:17:19:2c:02:
29:3a:74:5d:90:fe:ad:a0:d2:a6:55:4b:4f:9f:16:7f:62:e5:
60:e1:b8:cb:42:f2:9a:e2:91:3f:34:46:f2:eb:29:75:f3:03:
3f:9c:7f:0c:61:25:43:9f:78:29:db:69:3a:18:dc:02:33:ec:
c3:12:09:10
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEJGRTUxMTAvBgNVBAUTKDc4QTk5NzdGRkI0N0FGM0VDMUU5NDZCQzEwRjgxMzc2
OTQ5RUJFQzIwHhcNMjYwNTAyMjEyNTQ0WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY2NmJkOC04ZDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzVFECqoLs+Yvsj0+3IEu0wOoNjgBNBo4MG+i6CWO1WxLLvsA52CN3oqMarqa
JyiaXyXnJX2cqryuR9/2oLjvC+9FBef0jAQoML8qKCAAs62E0OcLYW24PnoZ+KFj
4ylHlZ8pt2W6NiPdmOFsS3yqw3hD4O2PMObngGu+NDU0K8GZTNp5V0GHmdzrGavv
2GRdbS4fXgoOmBpS+3ycCJrQHwVbvVvKvEh0xr2QpJEgOzfdJrbCAdDrvQA8Z2dZ
BDSH96qHdi1CJk/IrPf97CC07/KZ2hPJwu03AdaAYvTD1fYIxli0Euk1X+KNPQ1x
si3ZoBe6cf55UwIw5WncxT7mBwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHp9sNzj
L2g6I+lhwUvdlyMh3Bz7MB8GA1UdIwQYMBaAFHipl3/7R68+welGvBD4E3aUnr7C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkZFNS85REFGNDg2RURE
RUIxMUVBQjMwRUQ5MjFDNEY5QUUwMi9lS21YZl90SHJ6N0I2VWE4RVBnVGRwU2V2
c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VLbVhmX3RIcno3QjZVYThFUGdUZHBTZXZzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEJGRTUvOURBRjQ4NkVEREVCMTFFQUIzMEVEOTIxQzRGOUFFMDIvQzY2NDY4OUFF
MEY1MTFFQUJCOTZENTMxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5j4MA0GCSqGSIb3DQEBCwUAA4IBAQAj3T6ewac/T7Z2424kGj05
RUU72BWlPFVyDoFdc1PQ7VB9AnXlctbGc2kBqXAdyq65gxVNAvSanxTk6XN4AXJ6
fEasMPerEALyHwRqcCahOF6gMSPkXYHL0ySCxh9r9cJLW7PmPw1j9lZ4U+23h7yH
qdh5mOmLEKmBuY+4ywKR1ctzxmXXmLptE6yPk9Ce4k1IORMzqDj8GtdMSYv5+M9R
h4pQCL82QdBO3GxGJHfLvrOeco19ux8sV7DSe5AlKS0AbxcZLAIpOnRdkP6toNKm
VUtPnxZ/YuVg4bjLQvKa4pE/NEby6yl18wM/nH8MYSVDn3gp22k6GNwCM+zDEgkQ
-----END CERTIFICATE-----
Generated at Wed May 13 03:40:40 2026 by rpki-client