
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/3EED102CC53011F0ADCB012EC4F9AE02.roa
File: 3EED102CC53011F0ADCB012EC4F9AE02.roa (raw, json)
Hash identifier: xhv9klMH7WY9g3J7ol55oSW0zPIjpCPV6bNDdN9bbrM=
Subject key identifier: 71:19:51:B2:B1:9C:D3:20:3C:65:49:03:DD:17:10:8D:3C:1A:81:15
Certificate issuer: /CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2
Certificate serial: 0D35
Authority key identifier: 65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/3EED102CC53011F0ADCB012EC4F9AE02.roa
Signing time: Tue 30 Jun 2026 19:22:24 +0000
ROA not before: Tue 30 Jun 2026 19:22:24 +0000
ROA not after: Fri 30 Oct 2026 00:00:00 +0000
asID: 138640
IP address blocks: 103.114.96.0/24 maxlen: 24
103.114.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl
rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:35:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3381 (0xd35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BBF1, serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2
Validity
Not Before: Jun 30 19:22:24 2026 GMT
Not After : Oct 30 00:00:00 2026 GMT
Subject: CN=6a441770-01ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e6:20:48:1d:ab:c1:23:72:2b:6c:af:d8:4c:
b2:0b:e2:96:42:b0:ce:08:25:1a:4e:fc:b9:35:2c:
5c:f5:a8:da:2d:66:d9:8f:6f:2c:9d:b3:f3:d7:8f:
ab:89:a0:ad:c2:03:f6:3d:b4:ce:51:f1:10:b0:32:
1a:e5:b7:11:4a:12:75:2e:f3:87:28:81:7b:b2:46:
8d:06:83:2f:42:fc:79:d6:2f:e4:13:67:eb:5a:84:
7a:5d:37:09:71:23:e5:00:75:79:8a:5a:19:93:83:
43:1e:44:e0:f7:73:f7:5a:d6:53:88:1b:d9:7c:05:
a0:5b:c2:6c:e7:0a:c7:c5:e9:5e:6e:ee:c0:f4:dd:
76:b8:5a:2b:fe:1d:44:02:40:32:5d:49:d3:a3:23:
d9:f6:68:ef:f6:14:e1:66:32:d6:59:4b:7f:81:88:
00:6b:b3:0d:e7:44:6e:70:a8:24:c7:19:e8:9c:17:
aa:fc:fa:e2:3d:44:5a:1c:59:f0:ba:bc:f9:52:a9:
48:15:10:73:0c:ce:1f:d8:b3:15:ae:0a:32:95:4f:
ad:5d:d3:86:0b:ef:50:08:8a:50:12:c6:e9:d6:93:
52:f5:bc:de:d7:2d:05:bf:47:43:5c:fb:71:2a:bd:
87:25:ac:7d:6e:c0:e5:3e:eb:e1:f5:1c:d7:ea:5a:
d8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:19:51:B2:B1:9C:D3:20:3C:65:49:03:DD:17:10:8D:3C:1A:81:15
X509v3 Authority Key Identifier:
keyid:65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/3EED102CC53011F0ADCB012EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.114.96.0/23
Signature Algorithm: sha256WithRSAEncryption
02:a6:71:54:db:1f:40:37:e5:d5:00:55:d0:aa:bc:17:8c:2f:
22:e3:80:c2:17:fc:c7:77:73:f0:b2:6e:28:68:0b:b4:70:72:
60:3b:41:3a:33:ca:63:78:65:a5:16:18:b9:d8:7e:86:2f:73:
d3:f4:33:bc:ec:53:dc:d3:a6:36:1c:92:1c:03:41:af:79:3e:
1b:60:c2:0a:b0:e3:8b:aa:df:ed:26:17:13:c8:6f:ae:9e:0e:
5e:48:62:06:33:34:21:9f:06:1d:a3:6e:92:d6:11:8c:22:56:
06:a9:fb:3e:05:d2:6a:42:00:fd:85:7a:fa:47:47:0d:da:f5:
42:8a:8b:6e:ec:72:96:6a:85:e1:3a:d1:e4:dc:3a:04:f3:57:
6b:6b:2c:26:7e:af:6a:30:65:f2:ef:0e:60:ce:75:9e:37:d3:
47:44:3c:33:c9:cf:5e:b9:37:20:05:3d:7f:b5:3f:b5:b7:7e:
91:55:e9:2a:4e:df:a4:bd:e5:7c:27:8f:a5:fd:c1:38:14:53:
93:66:33:4c:0d:5e:67:97:81:da:6d:08:b3:71:8e:b1:c1:73:
a3:d8:e5:26:52:88:9e:54:93:d9:c4:60:95:f4:bc:3c:ab:7a:
f0:28:38:62:cc:22:ac:b9:2a:a7:db:5f:7d:86:a2:a2:48:e6:
7e:19:c2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:04 2026 by rpki-client