
$ rpki-client -vvf rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/D08FF4F0BB7111EFACA16B1DC4F9AE02.roa
File: D08FF4F0BB7111EFACA16B1DC4F9AE02.roa (raw, json)
Hash identifier: jEbU+UZ6bH7hld9QXt1qM9jJKv0SNsetGnm09iu/Csc=
Subject key identifier: E1:BB:13:5D:70:80:C6:1C:09:91:D9:78:F1:83:5A:C4:76:19:12:F2
Certificate issuer: /CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512
Certificate serial: 035A
Authority key identifier: 7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/D08FF4F0BB7111EFACA16B1DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:04:03 +0000
ROA not before: Tue 26 Aug 2025 07:15:46 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 139029
IP address blocks: 103.191.163.0/24 maxlen: 24
2400:96e0:2000::/36 maxlen: 36
2400:96e0:2000::/40 maxlen: 40
2400:96e0:2001::/48 maxlen: 48
2400:96e0:2002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl
rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 858 (0x35a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917270F, serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512
Validity
Not Before: Aug 26 07:15:46 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a40102-ca00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:3a:fd:af:c3:8c:13:67:39:97:7d:b0:a5:
34:09:ba:d0:9a:6f:b4:61:6d:a3:c1:86:b3:b6:b3:
88:4f:de:73:5b:db:50:0f:75:80:a7:47:cb:18:aa:
59:8f:0f:d0:d6:13:0c:03:26:50:fe:78:c1:d2:07:
e1:d2:da:af:3c:c6:ce:b5:06:dc:80:7e:3b:4d:46:
00:1b:9e:95:91:70:9e:78:21:f0:d3:0d:9c:3b:44:
40:76:a3:cb:30:7b:f1:b1:02:88:fb:d5:ca:8b:48:
cb:53:a4:1a:84:75:99:1c:bd:04:75:74:78:76:e6:
bf:d3:75:36:5b:9a:8d:09:44:37:ac:ad:fe:e8:b0:
98:cb:ab:05:77:b1:37:7d:1b:eb:f1:27:7a:36:61:
ba:14:1b:b8:2b:0c:1b:b5:77:d8:1e:7e:71:34:fa:
14:bd:28:f7:b6:a4:99:ea:22:4c:7b:d6:ab:3e:51:
f0:a3:4d:83:ca:02:a1:f0:ab:c9:d3:19:15:ff:cb:
e8:ac:33:a1:65:3c:c2:c5:9c:71:1e:4f:f8:6d:3f:
8b:ef:0a:8c:b9:67:06:51:99:a1:4a:44:d5:b9:2e:
d9:24:a1:4a:b9:12:1f:2a:0e:24:33:7e:43:47:cb:
2a:bb:3f:a4:3e:5c:51:a8:73:ff:4b:8f:db:c9:1d:
0c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BB:13:5D:70:80:C6:1C:09:91:D9:78:F1:83:5A:C4:76:19:12:F2
X509v3 Authority Key Identifier:
keyid:7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/D08FF4F0BB7111EFACA16B1DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.191.163.0/24
IPv6:
2400:96e0:2000::/36
Signature Algorithm: sha256WithRSAEncryption
c4:bd:8b:81:88:f6:bd:9d:83:0b:88:ac:cc:84:bc:3a:9a:71:
45:f5:9b:73:f6:85:f4:cf:49:b7:c0:a7:f2:9c:01:48:a9:19:
2e:6b:04:91:2b:3e:cc:a0:7e:cc:18:95:04:10:79:0f:cf:e9:
cf:eb:fb:2c:65:fc:5b:7e:64:b1:1d:28:cf:16:98:79:25:69:
be:b1:c8:fa:8b:6a:4d:93:72:02:82:b8:ed:45:c0:a5:53:23:
b7:e5:f0:3c:58:9b:47:05:87:e7:a6:5f:b9:6b:03:0b:78:63:
83:ad:86:c4:e4:8c:d7:50:bb:e0:97:0a:ee:e2:95:29:6e:1e:
5e:ff:7e:b8:64:8d:71:90:86:66:2a:51:ba:f6:77:85:d0:8f:
bb:5a:3e:11:87:a3:28:04:bd:da:6b:d0:6b:fc:d1:92:4a:11:
db:4c:08:20:c7:ac:d4:ee:fd:e8:66:e4:30:93:74:ef:97:4a:
d1:32:7c:3b:21:a2:1c:df:10:b3:38:0e:9d:6a:9c:8a:0e:50:
0a:e6:9f:58:29:83:7c:a8:46:15:bc:53:96:38:94:4b:94:ec:
7c:37:e4:aa:a0:68:2d:55:21:d7:72:cd:61:f7:43:43:ca:dc:
3e:59:37:e9:29:a7:e0:04:ea:5d:6d:0f:a0:8d:cf:58:f7:64:
cd:a2:ed:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:03:47 2026 by rpki-client