
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/5B5592F07B0711ED9D595969C4F9AE02.roa
File: 5B5592F07B0711ED9D595969C4F9AE02.roa (raw, json)
Hash identifier: 71wvUZohybkMpQ5pQ3qkNpzHhHvkpv7S66m77LouPv4=
Subject key identifier: 84:A3:CF:48:11:5E:6A:95:DF:EB:E3:3F:17:38:D6:B9:22:CA:E9:79
Certificate issuer: /CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77
Certificate serial: 099B
Authority key identifier: B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/5B5592F07B0711ED9D595969C4F9AE02.roa
Signing time: Mon 06 Jul 2026 21:21:08 +0000
ROA not before: Mon 06 Jul 2026 21:21:08 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 136429
IP address blocks: 103.152.106.0/24 maxlen: 24
103.152.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl
rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2459 (0x99b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EDAC, serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77
Validity
Not Before: Jul 6 21:21:08 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4c1c44-30c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:6e:46:4e:ad:d3:82:dd:80:76:7d:03:51:
85:f6:f9:69:26:5a:52:31:df:33:46:40:21:d8:87:
f0:b1:2e:3e:a4:8e:bf:46:11:5b:11:99:92:d7:43:
c8:11:77:b5:de:10:36:35:f7:fc:ac:cf:97:11:bd:
71:90:07:6e:0f:36:b4:2f:65:50:92:c6:78:d7:7a:
97:06:83:76:95:62:2a:70:10:c6:80:56:17:db:0b:
2f:6a:47:81:c9:c1:4a:e7:02:cc:a0:43:50:48:41:
e9:3e:a9:82:a1:b4:9b:0f:2f:cb:74:87:20:12:e0:
b2:47:4f:34:b7:d5:3c:10:06:09:22:ec:08:e9:d2:
24:95:bc:31:92:1b:ab:45:6f:e8:45:8b:c9:46:9d:
e5:0f:b6:74:f8:a4:2a:43:33:b0:e4:d1:d6:3c:ed:
ff:08:f3:16:91:48:a5:75:03:14:0f:60:d5:16:a0:
4b:66:c7:00:44:57:9e:75:55:a9:50:03:81:6a:f5:
ed:6f:bb:62:88:f2:68:30:1a:4f:fb:56:60:59:1c:
51:00:c1:2b:23:b4:91:a6:c2:15:22:fc:8f:35:01:
c4:37:c7:23:3e:aa:4f:3b:b5:5c:61:72:30:3a:a3:
af:7b:c8:38:92:3b:fe:b3:60:0b:28:20:0b:d8:ff:
34:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A3:CF:48:11:5E:6A:95:DF:EB:E3:3F:17:38:D6:B9:22:CA:E9:79
X509v3 Authority Key Identifier:
keyid:B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/5B5592F07B0711ED9D595969C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.152.106.0/23
Signature Algorithm: sha256WithRSAEncryption
48:93:15:2b:c6:c7:62:75:5c:7b:a9:57:53:57:d1:b6:ec:be:
4f:5d:24:ed:3a:ce:d4:31:79:2d:d8:eb:f7:01:ff:6e:8a:b7:
a6:d7:ea:9c:95:8c:ac:62:14:ce:90:ee:07:3e:0a:56:8e:9d:
34:f3:45:5d:8f:c3:7c:bc:c2:be:87:1f:df:a6:37:ee:04:dd:
58:43:be:6e:64:01:d1:d7:3f:2b:33:92:72:75:60:10:db:32:
4f:2b:1a:3e:0a:c5:91:95:85:dc:dc:d7:4a:fb:25:56:46:98:
71:65:7e:cf:64:fe:17:fd:96:a8:99:64:75:c4:e7:b7:1b:fb:
f5:58:71:ed:9f:7c:05:c7:44:e4:1e:85:7b:a9:f6:70:16:d1:
74:1d:38:60:a0:72:fb:37:8b:47:45:51:17:91:76:72:36:13:
ac:30:a3:9c:46:d5:32:a4:3e:b5:ae:b1:d6:9a:5e:d1:c8:fe:
4a:d6:80:84:63:b9:da:f1:a0:2b:d3:48:7f:62:40:aa:3d:a0:
91:4f:00:38:3e:4b:f5:16:5d:ce:81:2b:49:69:c7:6a:15:76:
df:e2:72:e5:a9:2e:92:34:22:66:e3:c6:0c:76:b0:50:5e:a1:
b0:77:51:2b:4b:3d:d1:4c:1c:7b:af:c4:1d:20:d7:29:e9:0e:
39:0a:fa:ee
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VEQUMxMTAvBgNVBAUTKEI2MzhCOUE5QkY3RTMwOEYxRkJBQ0YzQjRDM0E0NDU3
MUYyOURGNzcwHhcNMjYwNzA2MjEyMTA4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRjMWM0NC0zMGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxVZuRk6t04LdgHZ9A1GF9vlpJlpSMd8zRkAh2IfwsS4+pI6/RhFbEZmS10PI
EXe13hA2Nff8rM+XEb1xkAduDza0L2VQksZ413qXBoN2lWIqcBDGgFYX2wsvakeB
ycFK5wLMoENQSEHpPqmCobSbDy/LdIcgEuCyR080t9U8EAYJIuwI6dIklbwxkhur
RW/oRYvJRp3lD7Z0+KQqQzOw5NHWPO3/CPMWkUildQMUD2DVFqBLZscARFeedVWp
UAOBavXtb7tiiPJoMBpP+1ZgWRxRAMErI7SRpsIVIvyPNQHEN8cjPqpPO7VcYXIw
OqOve8g4kjv+s2ALKCAL2P80CwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFISjz0gR
XmqV3+vjPxc41rkiyul5MB8GA1UdIwQYMBaAFLY4uam/fjCPH7rPO0w6RFcfKd93
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RURBQy81ODNBRjIwNEI1
MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1JOGZ1czg3VERwRVZ4OHAz
M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RqaTVxYjktTUk4ZnVzODdURHBFVng4cDMzYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VEQUMvNTgzQUYyMDRCNTA3MTFFQUJDQzg5NDBEQzRGOUFFMDIvNUI1NTkyRjA3
QjA3MTFFRDlENTk1OTY5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5hqMA0GCSqGSIb3DQEBCwUAA4IBAQBIkxUrxsdidVx7qVdTV9G2
7L5PXSTtOs7UMXkt2Ov3Af9uirem1+qclYysYhTOkO4HPgpWjp0080Vdj8N8vMK+
hx/fpjfuBN1YQ75uZAHR1z8rM5JydWAQ2zJPKxo+CsWRlYXc3NdK+yVWRphxZX7P
ZP4X/ZaomWR1xOe3G/v1WHHtn3wFx0TkHoV7qfZwFtF0HThgoHL7N4tHRVEXkXZy
NhOsMKOcRtUypD61rrHWml7RyP5K1oCEY7na8aAr00h/YkCqPaCRTwA4Pkv1Fl3O
gStJacdqFXbf4nLlqS6SNCJm48YMdrBQXqGwd1ErSz3RTBx7r8QdINcp6Q45Cvru
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:33:06 2026 by rpki-client