
$ rpki-client -vvf rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/D5981734217611EE9EBE2F70C4F9AE02.roa
File: D5981734217611EE9EBE2F70C4F9AE02.roa (raw, json)
Hash identifier: 4D3L2HVQh9/CoYMqSW86iigkVTttSKmbPRkmZFzgEf4=
Subject key identifier: C0:32:8B:E2:14:4A:F8:6E:CB:E8:EB:76:6D:39:24:84:03:DA:68:0D
Certificate issuer: /CN=A917845B/serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822
Certificate serial: 0237
Authority key identifier: CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/D5981734217611EE9EBE2F70C4F9AE02.roa
Signing time: Sat 11 Jul 2026 03:29:09 +0000
ROA not before: Sat 11 Jul 2026 03:29:09 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 151410
IP address blocks: 103.227.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl
rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:46:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 567 (0x237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917845B, serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822
Validity
Not Before: Jul 11 03:29:09 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a51b885-5537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d2:b9:ab:63:30:22:03:c1:81:94:f8:98:02:
e6:c3:98:d2:cc:fe:ad:46:d6:0c:0a:f4:28:f2:50:
d7:ff:b4:3b:11:2d:a7:8c:89:44:eb:3d:81:b6:d9:
56:28:2c:e9:3e:69:a1:94:4f:1c:2c:ff:4e:19:ad:
a4:a7:96:0c:58:98:8e:6c:cc:fb:e3:f4:7f:ea:ee:
9e:83:ab:f1:eb:3f:b4:c5:4e:ae:1d:cc:de:54:90:
5a:c9:3d:e3:f1:0e:11:04:bc:c2:27:e4:e0:29:46:
8e:ce:c6:92:69:34:5f:6f:2a:a2:05:02:ef:15:29:
61:32:e5:56:49:62:a7:5b:82:cb:1f:74:d9:96:cd:
2b:81:75:2b:cc:7a:c1:3c:dc:29:b2:58:d4:31:85:
80:3e:ff:52:0a:e0:23:22:5b:1a:8f:70:aa:17:8e:
ee:a7:79:80:c8:2f:61:b0:89:69:ca:cd:c1:3d:05:
55:fc:64:33:20:35:33:a9:9a:74:d8:de:16:f8:af:
d8:48:8a:34:1a:d0:20:29:c1:c7:6d:1a:b4:b1:2f:
c9:52:ca:85:31:24:e1:1b:53:d5:c7:95:1a:3c:51:
1d:9c:42:fd:9a:b9:69:98:93:d0:08:88:e9:31:2f:
cf:31:99:20:b8:14:c0:92:eb:ea:fa:84:04:5e:21:
83:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:32:8B:E2:14:4A:F8:6E:CB:E8:EB:76:6D:39:24:84:03:DA:68:0D
X509v3 Authority Key Identifier:
keyid:CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/D5981734217611EE9EBE2F70C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.227.6.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d3:09:26:f4:b0:c0:84:11:d4:ab:d0:ef:9f:9f:10:02:e9:
a0:f5:04:2b:e8:00:4f:50:c2:e0:8a:6c:b3:38:a6:80:3f:bb:
8a:19:06:bb:11:5e:ae:a4:04:7a:08:39:26:70:e8:b4:aa:01:
17:af:c4:e2:c2:7b:ef:07:2f:df:fb:5d:b3:b2:15:e6:ff:01:
51:0d:ab:64:1a:0a:82:b5:f2:a2:fe:7f:28:b1:7a:ad:86:b3:
7e:54:5e:66:53:72:11:b5:07:d1:85:15:48:89:e7:2f:14:63:
2d:2a:96:d0:c7:8d:90:34:aa:ea:91:98:2b:b1:d8:81:c7:52:
7f:05:e3:85:19:3a:cb:02:ec:91:d1:bb:a6:5a:e4:da:c2:e2:
ad:70:f2:62:f9:06:a1:bb:15:3b:bf:10:08:a3:07:c3:a2:4c:
e4:bb:52:8a:81:33:a0:b4:b7:de:6b:e3:2f:45:34:8b:1b:b4:
d1:8c:30:db:db:86:bd:15:f4:b9:58:93:b0:fe:d3:0b:3c:17:
9b:09:90:1e:52:f5:eb:0e:03:5a:64:3f:cc:3a:c2:14:47:59:
20:1e:3b:57:5f:ae:ac:12:cf:cf:e7:fa:78:40:f0:ff:a0:0d:
75:81:b6:ee:7f:5d:2f:b0:67:22:76:e1:2a:64:40:07:8f:4c:
8c:a2:71:48
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzg0NUIxMTAvBgNVBAUTKENCNzRENTYxM0Q3MzQyQ0ZCOUI3Rjc5REVGMEM5RkFE
ODg1Qzc4MjIwHhcNMjYwNzExMDMyOTA5WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTUxYjg4NS01NTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzNK5q2MwIgPBgZT4mALmw5jSzP6tRtYMCvQo8lDX/7Q7ES2njIlE6z2BttlW
KCzpPmmhlE8cLP9OGa2kp5YMWJiObMz74/R/6u6eg6vx6z+0xU6uHczeVJBayT3j
8Q4RBLzCJ+TgKUaOzsaSaTRfbyqiBQLvFSlhMuVWSWKnW4LLH3TZls0rgXUrzHrB
PNwpsljUMYWAPv9SCuAjIlsaj3CqF47up3mAyC9hsIlpys3BPQVV/GQzIDUzqZp0
2N4W+K/YSIo0GtAgKcHHbRq0sS/JUsqFMSThG1PVx5UaPFEdnEL9mrlpmJPQCIjp
MS/PMZkguBTAkuvq+oQEXiGDiwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMAyi+IU
Svhuy+jrdm05JIQD2mgNMB8GA1UdIwQYMBaAFMt01WE9c0LPubf3ne8Mn62IXHgi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQ1Qi85NzM2OUI0NjIx
NzYxMUVFQjRGM0FENkZDNEY5QUUwMi95M1RWWVQxelFzLTV0X2VkN3d5ZnJZaGNl
Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3kzVFZZVDF6UXMtNXRfZWQ3d3lmclloY2VDSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Nzg0NUIvOTczNjlCNDYyMTc2MTFFRUI0RjNBRDZGQzRGOUFFMDIvRDU5ODE3MzQy
MTc2MTFFRTlFQkUyRjcwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ+MGMA0GCSqGSIb3DQEBCwUAA4IBAQCH0wkm9LDAhBHUq9Dvn58Q
Aumg9QQr6ABPUMLgimyzOKaAP7uKGQa7EV6upAR6CDkmcOi0qgEXr8TiwnvvBy/f
+12zshXm/wFRDatkGgqCtfKi/n8osXqthrN+VF5mU3IRtQfRhRVIiecvFGMtKpbQ
x42QNKrqkZgrsdiBx1J/BeOFGTrLAuyR0bumWuTawuKtcPJi+QahuxU7vxAIowfD
okzku1KKgTOgtLfea+MvRTSLG7TRjDDb24a9FfS5WJOw/tMLPBebCZAeUvXrDgNa
ZD/MOsIUR1kgHjtXX66sEs/P5/p4QPD/oA11gbbuf10vsGciduEqZEAHj0yMonFI
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:16:09 2026 by rpki-client