
$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/D89FDE783D9611F1B175AB4BC4833773.roa
File: D89FDE783D9611F1B175AB4BC4833773.roa (raw, json)
Hash identifier: I6vEAiKk2iqA5O1Fu2fdZ+iFRdW869TGPWWGjxLAqTY=
Subject key identifier: 8D:77:86:E7:C9:12:9D:0C:49:DB:BA:86:0A:74:AC:77:1A:AC:82:28
Certificate issuer: /CN=A917357E/serialNumber=8352A734E82144F322C50B728A4F765A33D72256
Certificate serial: 0306
Authority key identifier: 83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/D89FDE783D9611F1B175AB4BC4833773.roa
Signing time: Sun 05 Jul 2026 00:25:29 +0000
ROA not before: Sun 05 Jul 2026 00:25:29 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 152605
IP address blocks: 103.151.46.0/24 maxlen: 24
103.151.47.0/24 maxlen: 24
2400:3fa0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl
rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 774 (0x306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917357E, serialNumber=8352A734E82144F322C50B728A4F765A33D72256
Validity
Not Before: Jul 5 00:25:29 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a49a479-9141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a8:d5:b6:32:09:fa:fc:cf:c5:96:40:ae:c5:
9e:cb:b8:ff:83:3c:f2:f4:1d:4b:2b:6c:ed:48:5e:
dd:d5:8a:ca:c6:8c:00:52:81:45:34:5d:17:e2:d2:
94:9b:01:07:2d:29:6f:b4:1f:2e:c4:73:6a:88:5e:
d0:13:8a:6b:d0:69:5b:b8:3a:c8:de:00:43:a6:48:
eb:0b:9b:45:f0:6a:9d:b6:2a:1c:75:56:a9:20:1f:
ea:d3:17:f6:3a:4b:7b:ce:3b:2c:56:5a:39:02:4a:
34:fa:92:18:02:95:9a:82:d3:e0:16:25:58:c4:74:
d1:35:15:d1:80:fc:49:4c:50:f9:09:d1:04:62:4a:
a9:3c:9a:86:c7:ec:6b:77:ef:ab:8b:dd:1a:2e:7c:
e2:21:1f:4b:f4:b3:a3:9f:1e:19:c3:1f:de:a3:fe:
cb:8d:e3:80:92:02:74:ca:d8:96:36:34:85:48:e8:
7a:8c:72:05:a8:3c:3d:17:87:de:d8:c9:20:8b:12:
e8:b3:3d:21:54:bc:51:d4:79:02:7f:d0:02:b0:be:
31:49:71:37:ed:86:f1:9e:a9:2a:63:cb:d8:43:4c:
a7:31:75:10:4d:ee:96:f2:db:3f:76:39:5e:08:e5:
a1:9b:1d:0e:72:03:96:c4:8d:0e:54:31:92:c4:ed:
d5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:77:86:E7:C9:12:9D:0C:49:DB:BA:86:0A:74:AC:77:1A:AC:82:28
X509v3 Authority Key Identifier:
keyid:83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/D89FDE783D9611F1B175AB4BC4833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.151.46.0/23
IPv6:
2400:3fa0::/32
Signature Algorithm: sha256WithRSAEncryption
35:ab:fc:32:4e:50:e1:61:e6:b1:7f:d4:f2:3d:2a:3c:cf:a6:
3b:1f:87:5f:42:b7:fd:1c:51:e2:9b:c6:1f:72:cb:16:30:2d:
0e:f9:7f:fc:6c:2e:3f:79:a5:ad:6f:a6:d9:98:4e:3a:4b:83:
ac:81:09:e0:fd:8c:bc:4c:ce:0e:cb:d7:4c:8c:6f:ae:08:0d:
9c:3f:a2:82:03:c9:24:83:90:c7:96:f1:ef:2f:6b:35:ab:26:
db:56:be:ee:71:14:f0:4a:aa:0e:06:49:bc:53:d8:54:94:a3:
d8:42:c7:d5:21:0d:2d:1e:36:7d:36:29:4a:82:cd:29:91:7a:
8a:fe:25:3e:04:cd:04:d7:09:d3:41:a0:a5:13:16:a6:cb:cb:
e8:75:ae:d9:a4:cc:d9:53:ec:2b:3e:83:c5:ea:9d:6d:1e:5b:
8d:49:80:79:92:23:66:ff:da:de:d3:1f:0a:e8:f0:50:dd:f5:
49:37:11:1d:67:2f:4e:e7:98:ec:f5:bc:54:16:32:d3:6a:73:
10:fc:9f:fe:d2:0a:98:9e:73:4c:3b:e7:ca:3a:49:68:fa:4e:
fc:79:9d:51:4d:09:4e:36:ca:63:01:8f:07:8c:47:37:22:05:
ef:67:87:a2:b0:2f:97:33:0c:2d:38:e2:fc:b2:0c:c3:16:36:
5c:da:f4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:54:34 2026 by rpki-client