
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/99DA0A4C533C11EF92170913C4F9AE02.roa
File: 99DA0A4C533C11EF92170913C4F9AE02.roa (raw, json)
Hash identifier: 0hf744/8ClGNM1pPRKsYmzGhD2Zto6yat3iUOtKyOcU=
Subject key identifier: CD:D9:C6:BE:2F:DF:1D:4B:8E:98:60:8C:75:84:D3:63:DE:43:E9:2E
Certificate issuer: /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5
Certificate serial: 026F
Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/99DA0A4C533C11EF92170913C4F9AE02.roa
Signing time: Mon 02 Mar 2026 04:43:47 +0000
ROA not before: Sun 31 Aug 2025 04:21:20 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 61112
IP address blocks: 103.158.116.0/24 maxlen: 24
103.158.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl
rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BEA7, serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5
Validity
Not Before: Aug 31 04:21:20 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a51583-5cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:4e:8a:dc:24:a5:3c:50:f7:02:35:a5:69:
9b:fb:ac:c9:21:91:3d:0a:23:81:eb:53:a3:fd:f6:
fd:78:4d:2c:bc:01:27:93:21:04:ec:de:60:03:f8:
e1:da:a1:8d:05:b6:c1:00:fc:5f:9c:b0:15:03:5f:
be:41:f3:2c:4d:f1:d1:5d:b3:62:f9:da:93:d0:9b:
4c:05:50:e3:9e:9c:33:59:a6:d4:21:3c:7b:a0:44:
0e:6a:56:d5:0b:15:c7:cd:40:bc:7b:6a:cc:12:70:
5f:c5:6c:7d:55:2b:63:64:58:11:0a:0a:96:43:f5:
5f:a5:34:95:ba:1f:a3:42:ca:90:87:91:ae:72:e3:
5f:49:1c:59:c0:63:70:72:e3:da:33:8d:a9:25:a9:
a5:34:12:16:f9:67:3c:fe:6f:38:09:12:19:72:89:
e9:95:77:11:40:13:ff:cf:6c:d6:c2:39:2b:a7:91:
b0:57:ff:56:c0:62:1a:77:60:e3:52:cf:0f:1c:f6:
d5:e3:9c:47:ea:b0:f1:81:7b:d0:fd:1c:b4:6f:f5:
0f:98:85:8f:bf:7b:0d:ac:af:d7:81:e7:01:d1:27:
4a:7b:cd:18:d9:34:1b:c9:7e:22:f1:09:22:ab:14:
9e:78:09:c6:f9:6f:fe:02:19:08:f2:32:1f:70:ab:
47:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D9:C6:BE:2F:DF:1D:4B:8E:98:60:8C:75:84:D3:63:DE:43:E9:2E
X509v3 Authority Key Identifier:
keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/99DA0A4C533C11EF92170913C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.158.116.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:4d:45:5e:ef:22:b4:10:03:19:b0:d7:7e:7e:3c:13:fb:9b:
a4:f0:10:8d:af:6b:0a:b6:45:8f:0f:04:bb:a8:62:0c:6f:af:
46:77:64:39:80:bb:0c:7a:be:0a:bb:ce:b8:a2:54:1d:71:11:
b9:65:42:bb:05:74:54:cf:82:fb:bd:3b:26:80:cb:9f:c1:5a:
57:f0:b1:ac:0c:4b:38:7a:15:9f:b9:ed:e4:3b:3b:69:fa:64:
d0:d0:ae:77:d4:a4:d1:f8:fe:52:ef:d7:40:51:d0:ae:5e:e4:
5a:89:45:d8:f0:1a:8e:a9:d2:b9:7e:a6:79:c7:29:ca:f6:55:
4b:80:9e:84:07:ff:c7:79:2a:7b:63:31:ac:b8:97:cf:f7:8d:
4a:17:40:5e:11:26:b1:f1:d8:47:56:eb:02:3c:e3:be:66:1a:
1e:f3:83:b2:1b:0b:d0:5d:4c:9d:d4:74:64:4e:50:3b:bf:e5:
fb:7a:de:29:22:d0:90:5d:80:2c:07:f0:b8:2b:de:a8:1f:f6:
8c:3c:0b:5a:3a:58:fa:d2:b3:5b:5e:a7:15:8c:b5:68:30:32:
ed:15:0e:f2:27:ea:d6:13:8e:28:04:a9:5c:f5:77:e3:63:f2:
c6:ce:ed:56:b7:1f:b9:62:08:47:8b:b5:56:56:b0:ef:30:d6:
02:11:68:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:12:41 2026 by rpki-client