
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/5D2B0616A9C011EABAAB4624C4F9AE02.roa
File: 5D2B0616A9C011EABAAB4624C4F9AE02.roa (raw, json)
Hash identifier: ID5P6rejMOjyD1/9QNZxfu6Edv4l/BB2XuqFSG1EvOM=
Subject key identifier: B4:1D:E5:09:F3:55:4C:02:20:65:C9:D0:D7:0B:3F:BB:72:C3:4D:AE
Certificate issuer: /CN=A9175D4F/serialNumber=6028199030C9942A144AA16BFB3078E741F6EC23
Certificate serial: 0ABC
Authority key identifier: 60:28:19:90:30:C9:94:2A:14:4A:A1:6B:FB:30:78:E7:41:F6:EC:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/5D2B0616A9C011EABAAB4624C4F9AE02.roa
Signing time: Mon 04 May 2026 20:23:59 +0000
ROA not before: Mon 04 May 2026 20:23:59 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 103.150.46.0/24 maxlen: 24
103.150.47.0/24 maxlen: 24
2001:df3:5580::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.crl
rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2748 (0xabc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175D4F, serialNumber=6028199030C9942A144AA16BFB3078E741F6EC23
Validity
Not Before: May 4 20:23:59 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69f9005f-2134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:e4:6b:f9:a4:ef:e0:1d:f2:41:dd:b1:87:
08:5b:e1:2d:6a:ec:73:d2:98:85:81:61:c0:30:b4:
34:1c:9a:58:d1:44:ae:dc:d6:1d:22:60:49:97:6a:
90:45:c2:47:96:cd:71:de:ca:30:be:54:54:ed:ce:
6c:3a:31:f5:02:65:f9:29:ff:44:a1:0f:ff:5a:15:
5f:c0:58:cf:97:49:50:58:c6:5c:bd:3d:e6:25:8e:
ad:ab:67:ca:1c:43:aa:ea:0d:0f:87:b8:4b:da:19:
f0:43:83:14:ec:c1:9e:17:12:a1:f6:55:92:54:53:
76:d2:f2:a4:05:5c:c1:af:96:9d:fa:32:12:6c:72:
2c:2c:a4:ef:eb:d9:1b:ea:58:ce:c8:04:d6:39:db:
b7:1a:db:e2:f4:94:8f:67:24:c8:16:9e:72:d7:46:
56:60:bc:50:25:39:69:d0:6c:f6:9a:4a:4d:de:f5:
28:df:83:11:87:ae:88:f3:13:30:57:e4:23:c6:a3:
af:22:04:73:94:cd:5e:b8:a4:00:70:72:33:08:78:
83:ee:66:80:e0:c0:32:c7:31:89:25:62:65:b6:d0:
0a:10:69:4e:e3:17:f1:76:3c:18:dc:83:b5:93:e8:
8d:e9:d8:73:50:e5:cf:65:0d:fc:78:e2:a9:17:db:
71:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1D:E5:09:F3:55:4C:02:20:65:C9:D0:D7:0B:3F:BB:72:C3:4D:AE
X509v3 Authority Key Identifier:
keyid:60:28:19:90:30:C9:94:2A:14:4A:A1:6B:FB:30:78:E7:41:F6:EC:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/5D2B0616A9C011EABAAB4624C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.150.46.0/23
IPv6:
2001:df3:5580::/48
Signature Algorithm: sha256WithRSAEncryption
1e:22:07:41:18:c1:a0:54:4f:d6:c4:2e:6f:8c:e5:46:3f:10:
0f:d3:57:24:6f:e9:02:b0:33:01:77:8f:26:46:17:b7:76:4b:
ab:b5:f3:08:a1:3d:03:ad:f8:cc:ff:19:1c:a5:d4:5f:1b:9c:
f0:09:73:8f:e6:19:91:cd:f4:45:55:4a:4f:d7:9c:fd:74:14:
eb:dc:2c:6e:a7:ef:94:8e:59:4e:31:5a:07:0a:c7:69:dc:88:
ab:46:36:29:64:6a:81:dd:03:e2:3f:c7:e4:32:34:61:d0:d6:
90:f7:58:cf:b0:1c:66:8e:eb:4b:fc:21:2b:38:cd:48:b9:75:
9b:dd:fc:04:d6:db:ad:cd:a2:38:da:c6:bc:6b:3a:24:96:93:
70:3b:45:7a:dd:e4:ae:7c:ac:f4:de:cb:a5:f2:c4:a5:3f:6e:
03:7b:46:f3:9c:55:ff:93:4c:d7:f4:ac:58:09:34:b7:d7:9c:
1b:c3:48:92:41:13:1d:59:a3:a4:ec:88:7a:0f:51:5d:26:f2:
61:21:5d:81:ca:fe:af:c7:94:bc:a8:5a:5c:80:20:f2:09:97:
2d:bf:4a:23:fe:93:ea:c0:be:f7:c4:02:dc:c3:5a:85:44:fa:
d4:9c:de:ba:42:43:d6:0b:40:f2:80:0d:e1:22:3a:2d:cf:c6:
64:b7:b8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:06:40 2026 by rpki-client