
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/E869880C500511EA98307A59C4F9AE02.roa
File: E869880C500511EA98307A59C4F9AE02.roa (raw, json)
Hash identifier: eDmxH/4SMnVpNQqwIMaBf1pbV6bCEaBXN55W5wLAprg=
Subject key identifier: 76:91:BA:EB:C7:39:4D:0F:37:3C:34:D2:8C:21:57:09:2C:A5:85:54
Certificate issuer: /CN=A917E832/serialNumber=203D1E2DA852BE5B643A99BEF564D774BDDCC7F4
Certificate serial: 0B9D
Authority key identifier: 20:3D:1E:2D:A8:52:BE:5B:64:3A:99:BE:F5:64:D7:74:BD:DC:C7:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/E869880C500511EA98307A59C4F9AE02.roa
Signing time: Sun 28 Jun 2026 19:23:16 +0000
ROA not before: Sun 28 Jun 2026 19:23:16 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 136534
IP address blocks: 103.91.232.0/22 maxlen: 24
2401:1540::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.crl
rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:25:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2973 (0xb9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E832, serialNumber=203D1E2DA852BE5B643A99BEF564D774BDDCC7F4
Validity
Not Before: Jun 28 19:23:16 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a4174a4-84b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:87:03:92:7c:9f:e8:56:36:f8:1f:4a:e1:08:
6e:7f:f8:1b:ef:61:52:21:e3:0a:ed:90:4c:00:a6:
2f:ac:16:10:95:d4:a0:0f:90:56:00:a3:a6:cc:00:
c1:81:a0:73:3b:59:ab:2d:32:21:1d:5a:13:39:45:
72:64:b4:2e:a0:0b:56:05:fb:80:c3:ef:4f:7e:cf:
63:26:78:10:bd:9a:a2:c1:56:63:87:cf:0c:98:2c:
02:8b:d6:ed:2a:30:df:8d:da:7f:66:4a:da:81:7f:
c9:3b:9e:d9:fe:ad:38:91:a8:be:5f:19:29:e0:68:
29:42:00:89:3b:26:bf:8f:c7:f2:82:e0:55:4c:06:
b1:56:59:54:a9:a8:6a:18:7c:2c:a4:b9:fa:f0:98:
18:2d:81:dd:5c:98:95:47:70:3f:05:98:03:fe:7e:
85:f6:f6:52:c9:62:dd:32:60:46:48:16:8e:02:5a:
b1:db:61:93:e7:40:62:cf:9b:c3:85:b9:d7:36:fe:
53:26:52:4f:25:19:8d:2f:a5:da:00:35:37:b9:42:
26:a1:19:f4:72:df:96:58:6c:04:a4:9a:74:d7:53:
a5:e0:25:5d:83:6e:66:77:00:62:8b:46:eb:35:94:
13:cf:ab:ba:13:5f:66:a4:fe:59:cd:b8:b2:d2:0c:
8d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:91:BA:EB:C7:39:4D:0F:37:3C:34:D2:8C:21:57:09:2C:A5:85:54
X509v3 Authority Key Identifier:
keyid:20:3D:1E:2D:A8:52:BE:5B:64:3A:99:BE:F5:64:D7:74:BD:DC:C7:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/E869880C500511EA98307A59C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.91.232.0/22
IPv6:
2401:1540::/32
Signature Algorithm: sha256WithRSAEncryption
79:f3:5b:ed:38:8a:ac:4f:ea:1c:c2:3e:9c:61:4a:e8:72:65:
a9:b0:ce:90:8b:5a:56:f0:a7:38:9c:a3:58:18:96:6f:fc:70:
f6:56:52:19:6c:5e:de:39:8b:61:cf:f4:cb:c3:b4:89:c4:2f:
f5:81:1b:5a:51:d3:46:74:10:0f:63:e7:50:62:cc:d5:3a:16:
81:a9:4e:58:a8:3c:ac:79:e3:b2:52:bd:97:60:2a:36:f4:6e:
b8:bb:65:16:bb:16:ab:32:3f:ee:7b:df:65:48:42:51:03:a3:
f7:50:f7:1b:37:83:90:3d:39:cc:a3:f3:1b:5b:4b:ee:63:f3:
06:4c:ca:8b:69:98:5c:41:40:5e:b0:e2:9d:40:a6:0a:67:2e:
db:d0:6c:44:8e:da:a0:9a:68:bb:af:1e:09:f3:e1:25:fc:9b:
4c:e1:b0:0d:3a:c3:7a:5f:35:7b:68:7b:01:e5:13:0f:fa:41:
1d:76:78:e2:1d:e9:ae:f7:75:a2:ff:f8:87:67:58:1f:ed:cf:
af:10:63:57:cc:e1:69:1f:f0:f3:0a:27:b6:14:e6:0b:a6:15:
fc:07:19:09:f4:a6:85:f7:de:d2:06:c7:d3:0c:22:df:aa:0d:
7f:44:cc:62:1e:44:0a:8b:a4:ff:bb:c3:e5:34:1b:a0:93:c8:
4b:ed:8f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:04:43 2026 by rpki-client