
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/E69DB7E67F7911EC86DE4B56C4F9AE02.roa
File: E69DB7E67F7911EC86DE4B56C4F9AE02.roa (raw, json)
Hash identifier: 53xSQQ9Bxh94fQZ470RfHLjvIXQRf/E6MeWzNjwS2HI=
Subject key identifier: 09:79:51:70:54:1C:E0:1A:9A:28:3A:E9:1E:1A:88:AC:AB:87:81:66
Certificate issuer: /CN=A917BB1B/serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4
Certificate serial: 0480
Authority key identifier: D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/E69DB7E67F7911EC86DE4B56C4F9AE02.roa
Signing time: Tue 03 Mar 2026 00:32:15 +0000
ROA not before: Tue 03 Mar 2026 00:32:15 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 149445
IP address blocks: 103.179.150.0/23 maxlen: 24
2001:df0:4f40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl
rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:43:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1152 (0x480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BB1B, serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4
Validity
Not Before: Mar 3 00:32:15 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a62c0f-a40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:b6:e1:92:2c:4b:5b:8e:e8:83:7a:ea:ee:
e7:d8:7a:0a:80:ba:cc:0f:77:8e:17:c2:97:8e:fe:
2b:6a:91:42:61:a4:bf:9e:76:7a:3a:2f:f6:65:c2:
e3:ea:60:cc:b7:ac:56:a3:c4:08:80:64:00:85:47:
d6:92:37:b3:b7:a6:7c:40:cf:cc:4f:28:ed:2c:67:
6f:e4:a4:28:48:67:72:25:69:62:c0:4c:ed:5e:e4:
7c:24:25:0f:c4:10:dc:9f:91:4b:49:bb:00:2f:ad:
2d:29:dc:ae:b7:41:c4:4c:d6:a3:1f:18:fd:70:8e:
f1:52:07:71:0f:8e:6f:1a:a6:82:52:9c:1a:8d:a7:
ec:99:a0:b8:01:56:20:45:a4:be:9a:fd:38:99:ea:
1e:48:94:d5:2d:74:a3:2d:19:f1:b7:b7:46:24:de:
6e:63:a4:f3:62:61:db:53:9a:77:1e:a0:36:c3:8a:
54:e4:c5:bf:5a:01:f6:e5:95:1f:40:3b:0e:0b:c8:
59:b6:b7:a7:a1:7c:0e:77:fb:28:2d:23:92:cc:87:
62:a2:12:29:17:bb:67:cf:83:a6:21:d7:3d:12:9d:
3b:d4:76:ac:04:2f:73:d7:0e:21:57:48:c1:af:f6:
ed:89:54:5b:65:3a:13:d2:a4:6f:4b:f7:6a:ad:1a:
fa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:79:51:70:54:1C:E0:1A:9A:28:3A:E9:1E:1A:88:AC:AB:87:81:66
X509v3 Authority Key Identifier:
keyid:D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/E69DB7E67F7911EC86DE4B56C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.179.150.0/23
IPv6:
2001:df0:4f40::/48
Signature Algorithm: sha256WithRSAEncryption
5e:23:48:8a:2a:66:91:18:d3:e1:4d:de:44:77:8e:2c:3f:60:
fa:6e:a3:88:cb:bf:a6:53:4b:d6:34:10:d8:d8:7a:ef:ae:5a:
5e:18:bd:ab:62:07:02:01:87:0e:9c:ee:bb:9f:c0:d5:2b:f7:
69:1c:09:e2:72:9d:8b:8c:5d:39:49:d1:d9:4d:9c:a0:12:12:
0d:06:23:07:6c:f1:d4:c7:31:80:96:ae:5d:87:b2:fd:77:12:
a1:fa:ff:f2:56:db:72:cd:71:60:49:2c:ff:e8:0d:69:1d:26:
c7:5d:c7:7b:ee:44:2e:4d:df:0c:ac:8e:82:57:c3:2a:b2:8c:
b4:bf:1e:7a:15:f4:5f:f9:67:f3:be:6b:10:05:c8:70:b3:b6:
ab:84:37:2d:89:d0:98:33:ad:d8:69:fb:56:15:01:7c:af:89:
1a:5c:58:a1:b2:56:b7:98:c9:ae:2b:93:97:ba:2a:75:13:c2:
01:10:18:60:d6:01:0e:e6:2b:03:a1:f2:e9:c9:c2:ae:f3:47:
d5:ac:44:ad:eb:b6:51:21:f0:17:88:75:9e:7f:89:72:c4:d6:
ff:7a:20:98:6f:ba:72:f8:e8:69:d5:d6:80:d0:46:4e:63:27:
95:b6:36:1e:b6:2e:fc:a6:87:b1:3b:be:e4:05:93:01:6e:be:
3e:fe:a4:b8
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0JCMUIxMTAvBgNVBAUTKEQ2MzY1MjQ1MEVBNzU1OTEzQ0YzMUFGQ0ZBOUEyOTIx
QTQ4QUUxQTQwHhcNMjYwMzAzMDAzMjE1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MmMwZi1hNDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsWy24ZIsS1uO6IN66u7n2HoKgLrMD3eOF8KXjv4rapFCYaS/nnZ6Oi/2ZcLj
6mDMt6xWo8QIgGQAhUfWkjezt6Z8QM/MTyjtLGdv5KQoSGdyJWliwEztXuR8JCUP
xBDcn5FLSbsAL60tKdyut0HETNajHxj9cI7xUgdxD45vGqaCUpwajafsmaC4AVYg
RaS+mv04meoeSJTVLXSjLRnxt7dGJN5uY6TzYmHbU5p3HqA2w4pU5MW/WgH25ZUf
QDsOC8hZtrenoXwOd/soLSOSzIdiohIpF7tnz4OmIdc9Ep071HasBC9z1w4hV0jB
r/btiVRbZToT0qRvS/dqrRr6iQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFAl5UXBU
HOAamig66R4aiKyrh4FmMB8GA1UdIwQYMBaAFNY2UkUOp1WRPPMa/PqaKSGkiuGk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkIxQi9EOUI5Qzg4QzdG
MzYxMUVDQTkwQkNBM0FDNEY5QUUwMi8xalpTUlE2blZaRTg4eHI4LXBvcElhU0s0
YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFqWlNSUTZuVlpFODh4cjgtcG9wSWFTSzRhUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0JCMUIvRDlCOUM4OEM3RjM2MTFFQ0E5MEJDQTNBQzRGOUFFMDIvRTY5REI3RTY3
Rjc5MTFFQzg2REU0QjU2QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ7OWMA8EAgACMAkDBwAgAQ3wT0AwDQYJKoZIhvcNAQELBQADggEB
AF4jSIoqZpEY0+FN3kR3jiw/YPpuo4jLv6ZTS9Y0ENjYeu+uWl4YvatiBwIBhw6c
7rufwNUr92kcCeJynYuMXTlJ0dlNnKASEg0GIwds8dTHMYCWrl2Hsv13EqH6//JW
23LNcWBJLP/oDWkdJsddx3vuRC5N3wysjoJXwyqyjLS/HnoV9F/5Z/O+axAFyHCz
tquENy2J0Jgzrdhp+1YVAXyviRpcWKGyVreYya4rk5e6KnUTwgEQGGDWAQ7mKwOh
8unJwq7zR9WsRK3rtlEh8BeIdZ5/iXLE1v96IJhvunL46GnV1oDQRk5jJ5W2Nh62
Lvymh7E7vuQFkwFuvj7+pLg=
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:39:39 2026 by rpki-client