
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/D11C8B12DB7111E981104A54C4F9AE02.roa
File: D11C8B12DB7111E981104A54C4F9AE02.roa (raw, json)
Hash identifier: az5Wu3rdmwem1fp3sJ1LkEbrXCOkEOGTGhmGNaaRozA=
Subject key identifier: 81:2D:E2:F9:71:9D:76:F1:C6:F6:D9:45:33:71:D8:2D:73:1B:1F:D8
Certificate issuer: /CN=A917C0F5/serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572
Certificate serial: 0DD4
Authority key identifier: 83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/D11C8B12DB7111E981104A54C4F9AE02.roa
Signing time: Tue 12 May 2026 18:21:56 +0000
ROA not before: Tue 12 May 2026 18:21:56 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 139011
IP address blocks: 103.138.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl
rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:22:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3540 (0xdd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C0F5, serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572
Validity
Not Before: May 12 18:21:56 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a036fc4-02e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:63:23:0a:dd:e9:16:e0:9d:f0:44:95:74:47:
21:9b:e9:a0:22:71:c2:f2:9e:3d:a8:88:7f:d4:9d:
b4:c0:c4:57:e0:d8:7c:e6:aa:e5:e3:06:26:fc:e4:
ea:34:8d:99:69:c6:29:ac:01:52:ac:31:5f:42:f5:
26:1a:8b:d3:da:ce:9e:26:21:a8:d7:6d:c0:ee:be:
cd:99:f6:05:e4:2c:27:ef:2c:76:0f:17:b5:20:ca:
13:d0:22:7f:7c:c3:ec:34:6a:c1:56:70:e6:b5:f2:
e5:84:04:8b:eb:d8:4f:e6:be:fe:41:f0:e7:3e:06:
cd:5d:c1:37:4e:0b:ec:4d:91:a8:07:07:63:92:35:
53:11:9d:3e:0b:d4:c9:77:67:31:5f:83:c1:4c:9e:
22:9f:32:5f:ef:cb:75:81:f0:67:7f:d6:1e:97:d4:
3f:d3:d1:e7:4c:a6:16:c4:5d:c5:80:6b:25:2e:a0:
82:7e:ca:96:5b:c8:11:e3:d5:79:f8:ed:27:7c:76:
7b:35:1c:bd:2d:1e:20:bf:88:1b:99:de:d7:62:fc:
2b:54:6b:da:7d:6e:97:3b:8a:87:7a:26:25:42:0b:
0e:bc:17:ee:fc:a7:47:cf:59:7e:47:4a:1b:0f:44:
e7:08:52:54:57:59:e2:21:70:92:24:a2:14:2d:23:
50:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2D:E2:F9:71:9D:76:F1:C6:F6:D9:45:33:71:D8:2D:73:1B:1F:D8
X509v3 Authority Key Identifier:
keyid:83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/D11C8B12DB7111E981104A54C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.142.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:d2:68:c2:d9:f3:6b:57:d6:ac:31:72:76:7d:73:d1:41:98:
21:88:fb:d0:1c:24:71:e0:b1:16:54:20:a7:fe:77:de:54:66:
3b:30:f6:8b:ac:00:4b:b4:a7:ec:ce:86:7f:59:76:bc:c9:82:
36:2e:07:89:44:73:ee:07:c5:eb:5d:4f:76:46:3b:24:76:83:
00:d5:d2:f1:9a:d7:f0:38:cc:57:75:63:4a:ca:99:79:bf:1b:
60:1c:48:6a:70:c7:1b:f4:28:b0:43:38:e5:a3:76:39:48:ff:
23:f7:d7:01:70:52:f5:7c:ca:91:eb:36:78:30:74:ea:51:df:
83:d8:50:54:20:cf:5f:e1:d8:39:f9:0e:ad:ef:cf:e1:47:f8:
6a:24:3c:67:25:73:1b:f6:e9:6c:e6:90:69:55:76:2d:58:54:
ca:a3:98:d4:7c:5c:a8:f6:89:c3:0b:b8:26:38:58:2d:1c:dc:
1d:c1:84:60:66:1e:63:c3:93:f3:5d:24:0a:86:1a:d1:28:86:
49:7c:12:73:f5:ee:2c:06:36:a6:a5:9a:b8:ba:48:80:15:8d:
73:54:78:c7:65:5c:9b:90:aa:92:93:9f:72:94:95:9e:02:ab:
3c:35:54:68:d1:a8:90:2b:c3:c8:63:45:97:b9:d4:69:4f:06:
22:38:6e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:24:50 2026 by rpki-client