
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/824F8AD0187711F1AF6111A7363D8C67.roa
File: 824F8AD0187711F1AF6111A7363D8C67.roa (raw, json)
Hash identifier: /rBFDP4ucRayd+6pogF2vcfXHdX6dh/y/lIPddm4CdM=
Subject key identifier: 53:B7:D1:DC:73:E4:28:30:BF:C7:D1:A1:EF:E6:5A:86:2F:65:52:45
Certificate issuer: /CN=A917E322/serialNumber=FA6B62757BCAD457ACA070A51C4808B4B7C93370
Certificate serial: 04
Authority key identifier: FA:6B:62:75:7B:CA:D4:57:AC:A0:70:A5:1C:48:08:B4:B7:C9:33:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mtidXvK1FesoHClHEgItLfJM3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/824F8AD0187711F1AF6111A7363D8C67.roa
Signing time: Thu 05 Mar 2026 09:45:23 +0000
ROA not before: Thu 05 Mar 2026 09:45:23 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 151662
IP address blocks: 103.252.138.0/24 maxlen: 24
103.252.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.crl
rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mtidXvK1FesoHClHEgItLfJM3A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:18:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E322, serialNumber=FA6B62757BCAD457ACA070A51C4808B4B7C93370
Validity
Not Before: Mar 5 09:45:23 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a950b3-9922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:13:32:54:a2:3e:40:46:14:28:9a:e0:55:74:
e2:ad:db:4a:fe:2c:b3:94:61:41:5d:9c:92:b0:5b:
4e:eb:11:31:7e:53:2a:fd:5f:00:f9:ed:88:77:18:
78:50:6b:57:dd:21:5c:a6:d5:7e:d0:1d:1b:73:f6:
cf:2d:9a:81:98:90:28:b6:3a:3b:4a:1c:60:fe:b4:
f1:24:ab:27:e9:4c:ae:fd:6e:01:f5:e9:b7:d0:90:
a0:d5:54:3a:7f:d3:35:26:a5:2f:b0:e8:db:33:a5:
69:b2:9d:98:68:74:c7:bf:a7:75:b8:49:a2:3e:12:
da:7b:42:be:86:d8:1a:64:02:02:39:e6:ac:c8:53:
d0:01:db:03:f0:93:8c:8c:a6:83:0d:d2:ac:b3:74:
bf:a7:7a:e7:99:9b:33:6a:e7:c9:89:1a:67:7f:28:
12:74:4c:bf:d6:90:44:82:47:90:c8:a3:e8:1c:15:
82:67:5c:a4:c9:16:73:9f:44:bc:19:76:89:14:0c:
2c:46:04:f5:e7:8a:73:de:79:5b:a1:fb:0e:79:78:
ce:fd:70:e3:23:7b:b5:17:3c:f3:24:c7:99:56:9a:
a1:32:eb:0b:b3:ff:d2:3e:d4:d4:7a:c3:c0:08:cd:
f3:8b:15:62:01:98:c1:83:1a:56:f0:1f:4b:0a:17:
7d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B7:D1:DC:73:E4:28:30:BF:C7:D1:A1:EF:E6:5A:86:2F:65:52:45
X509v3 Authority Key Identifier:
keyid:FA:6B:62:75:7B:CA:D4:57:AC:A0:70:A5:1C:48:08:B4:B7:C9:33:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mtidXvK1FesoHClHEgItLfJM3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/824F8AD0187711F1AF6111A7363D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.252.138.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:52:25:0a:48:6a:74:04:80:44:27:99:7a:30:e1:a6:0c:c4:
59:76:ac:79:a3:f8:03:51:d6:7f:23:08:b2:31:0a:0b:1b:e5:
55:af:04:32:15:88:92:7d:3a:f7:e1:5e:6a:c7:9f:ef:94:b6:
05:bb:f5:98:89:c6:13:29:cb:c2:fc:cc:22:be:e0:cb:20:cf:
b2:4e:8e:69:d0:b0:50:e3:13:fa:67:17:65:22:c0:bc:49:9b:
43:22:f3:b5:b9:7a:3e:9f:9b:24:d1:13:13:3d:37:7a:89:22:
f2:2a:59:c9:16:75:cc:09:75:12:56:48:33:5d:10:a9:d8:19:
ea:7e:43:c5:1d:a5:e3:83:13:d6:3b:86:69:1a:97:24:bd:1b:
a7:68:0f:92:b4:28:1b:b6:72:e1:34:0c:07:d5:51:8a:72:7b:
e0:08:33:af:0b:36:ea:ec:42:0d:88:44:60:e7:c0:de:a7:a2:
66:95:2d:b6:46:d3:c6:6e:f7:5f:26:be:f9:74:9c:a7:2c:57:
4d:16:dd:f4:7e:cf:60:59:23:5e:90:2c:13:0b:f5:0a:43:ae:
a5:fa:d3:f7:d9:c9:0e:e3:fa:99:29:05:ee:ef:75:c6:bf:c3:
09:e7:13:64:68:aa:1b:b1:ba:00:f0:ac:2e:0f:4b:3c:5e:d2:
09:8c:2e:5d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:02:23 2026 by rpki-client