
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/5E3F0D8886D011F1949EA0087EA30FBC.roa
File: 5E3F0D8886D011F1949EA0087EA30FBC.roa (raw, json)
Hash identifier: CPtHOsZ/fh4xY8qY60ljGxrUG4Zxf0bUbTPekppF3vI=
Subject key identifier: FC:35:49:3E:66:85:8E:F7:D4:F9:9E:E3:2D:B9:5D:DE:37:24:03:BB
Certificate issuer: /CN=A917748E/serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Certificate serial: 030F
Authority key identifier: AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/5E3F0D8886D011F1949EA0087EA30FBC.roa
Signing time: Tue 15 Sep 2026 20:06:40 +0000
ROA not before: Tue 15 Sep 2026 20:06:40 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 31898
IP address blocks: 43.225.52.0/22 maxlen: 24
103.21.58.0/23 maxlen: 24
103.50.160.0/22 maxlen: 24
103.195.184.0/23 maxlen: 24
103.195.186.0/24 maxlen: 24
103.224.22.0/23 maxlen: 24
137.59.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:51:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 783 (0x30f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917748E, serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Validity
Not Before: Sep 15 20:06:40 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6aa9a550-ef2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:52:a1:03:27:98:e5:f5:f4:39:58:44:53:
88:9c:34:56:8c:ff:97:f0:a9:84:0f:2f:8d:8d:2c:
98:f2:af:d1:85:2d:97:4a:67:33:e3:05:c3:11:41:
62:6b:af:ea:2b:8a:74:63:03:55:85:56:c4:78:6d:
72:10:bb:38:bf:17:0d:5f:a1:e6:57:9d:61:8d:ef:
9e:08:2f:43:bc:1d:c5:a3:1f:97:87:15:49:4e:02:
47:1a:29:9d:75:00:a1:13:d4:15:7d:a9:d4:d2:62:
df:8f:3a:55:1c:97:c6:9a:ca:0b:77:e1:2c:48:b1:
06:f9:1d:f8:be:34:93:9d:64:31:f0:6e:bb:51:50:
69:dd:ea:fb:ef:b6:76:62:ce:3b:d0:8d:eb:f1:fb:
d3:f1:3c:47:8f:d9:44:82:16:1b:11:76:d1:d3:cc:
3c:9f:7f:27:6d:98:7f:a4:0c:b6:ec:51:1d:d1:cf:
7e:a9:b3:27:70:c6:0c:5a:fb:e1:89:85:80:0a:99:
d0:84:00:8e:c1:6a:f1:b6:ec:34:ee:2e:36:16:af:
9a:6a:cd:94:68:fc:dd:92:d6:5d:65:56:5f:17:06:
23:03:26:ae:10:25:aa:c0:06:ca:b9:38:18:ff:74:
0d:f4:66:cb:71:0d:75:04:e1:17:e9:c6:83:b6:cc:
f6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:35:49:3E:66:85:8E:F7:D4:F9:9E:E3:2D:B9:5D:DE:37:24:03:BB
X509v3 Authority Key Identifier:
keyid:AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/5E3F0D8886D011F1949EA0087EA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
43.225.52.0/22
103.21.58.0/23
103.50.160.0/22
103.195.184.0-103.195.186.255
103.224.22.0/23
137.59.148.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:a4:a1:a1:ab:7f:40:7e:ec:26:8e:51:bc:d4:b7:90:6a:88:
d1:1c:64:48:70:ce:36:00:c0:03:78:0a:4c:51:2a:34:9d:21:
9b:d1:77:c3:62:78:2c:f1:aa:8c:96:28:90:44:6b:dc:05:1f:
b3:3b:c9:95:61:41:e4:e4:95:87:3f:e8:76:02:a0:f1:e2:1b:
f0:bf:d7:7d:20:9c:5f:eb:51:86:89:6e:bc:ca:1b:1b:6c:18:
c4:42:de:f2:3d:3b:bf:f1:ea:16:37:19:c8:3e:57:bc:c5:8a:
da:5c:db:40:67:98:ee:68:ee:f7:77:d6:7c:7a:24:7d:51:f8:
1a:f0:78:ce:ff:1a:b1:5a:2a:23:35:e4:2b:2b:25:c9:33:f4:
d2:71:a0:c1:21:7b:7f:5e:ac:93:b4:7b:f2:4f:bd:d5:1e:79:
5c:3a:a0:54:2a:e3:16:d0:80:17:58:c2:48:44:d6:71:8e:40:
a1:6c:02:77:cd:f4:d8:33:48:d5:e8:f3:dc:5f:6d:fa:3e:f3:
7f:e1:98:7e:4c:94:71:59:2b:50:fc:2e:5e:5f:73:21:d3:16:
04:0b:8f:53:2b:9a:8b:ef:57:83:eb:db:4f:08:f7:d0:10:3e:
92:8f:fc:6e:e9:59:df:c0:8d:11:ce:82:c0:08:30:05:32:2f:
3d:d7:8c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:49:28 2026 by rpki-client