
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/52201DA252D411F0A7A6D71CC4F9AE02.roa
File: 52201DA252D411F0A7A6D71CC4F9AE02.roa (raw, json)
Hash identifier: 82JdmQP/eMkwg63B4OVRe5Ag1cOjo1M5JaRYCRSJFXo=
Subject key identifier: 4C:06:79:49:52:C3:3F:5D:DD:F6:D6:B0:7C:E6:43:D0:58:56:CE:EC
Certificate issuer: /CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
Certificate serial: 01F1
Authority key identifier: 50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/52201DA252D411F0A7A6D71CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:18:11 +0000
ROA not before: Sun 31 Aug 2025 04:22:11 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 140045
IP address blocks: 103.248.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl
rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497 (0x1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F0FA, serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
Validity
Not Before: Aug 31 04:22:11 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a41263-ba1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e9:1b:9a:71:69:5e:96:aa:ca:6b:24:dc:98:
d5:49:f5:af:6f:30:7f:df:6c:8d:1f:c0:2a:ce:54:
9a:2e:14:d2:08:f5:c8:a6:42:f9:2b:85:10:0f:64:
d1:20:dc:ec:6b:b1:3f:85:3e:eb:68:20:63:c9:b6:
2f:bd:82:d2:ff:16:10:2c:de:ef:f7:4b:1c:e6:ae:
1e:89:5b:e4:5d:9c:82:25:3a:1b:cf:d2:ef:d7:eb:
93:7f:54:db:d2:f1:a0:67:a5:d1:16:35:74:0f:b0:
0e:2b:5f:b3:bb:b2:dc:ac:03:89:66:0f:e1:cb:63:
67:07:c7:d4:cb:85:23:d3:06:83:83:91:d1:51:8e:
66:d4:e5:5f:ad:90:72:a5:02:7c:5a:ff:a8:a1:c4:
7c:4c:d9:90:c5:38:2d:0e:42:17:94:5b:5a:01:e3:
d7:3e:10:fa:8a:e9:d4:93:7b:c4:46:22:08:49:d1:
22:36:9a:44:4c:93:94:8a:24:8f:d8:57:18:38:19:
14:75:d8:67:e3:31:e8:ed:06:eb:b3:04:a3:fa:ee:
fb:da:e7:0f:83:aa:4b:ae:ee:5c:66:b1:f3:9d:43:
d6:4a:a7:25:a7:ed:34:62:e9:e4:6b:71:a6:a0:f9:
5a:59:43:5f:59:34:dc:a8:cc:f0:f8:08:08:26:2c:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:06:79:49:52:C3:3F:5D:DD:F6:D6:B0:7C:E6:43:D0:58:56:CE:EC
X509v3 Authority Key Identifier:
keyid:50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/52201DA252D411F0A7A6D71CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.248.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:36:d3:2c:26:4c:42:a3:16:c0:26:97:97:94:f3:02:e0:93:
52:15:f2:29:ef:08:24:0c:e6:71:d5:84:f8:4f:63:e2:bb:82:
2f:6a:83:4b:8a:91:3e:c7:50:04:b2:01:69:84:6c:cc:1c:cd:
f3:1c:ef:42:d6:0f:fa:88:f4:15:21:73:22:3d:67:85:47:8c:
96:e1:48:fa:63:3a:3f:9c:4a:2f:15:93:31:5e:49:18:70:80:
14:a3:3c:39:c8:cd:6a:fc:7b:ac:1d:83:c8:fe:a1:4b:fe:d5:
34:12:9d:ae:51:a2:d1:f4:d4:dc:4b:e8:58:c6:6f:a0:a7:48:
90:d4:d5:f4:55:e1:8e:84:d0:5a:4c:9e:6e:86:cf:d4:7d:6c:
c9:f1:26:5c:c0:e3:0e:dd:60:94:bb:02:76:fa:38:14:d7:55:
6e:c3:01:6e:5b:da:e1:69:6d:2d:2a:9d:90:99:b8:8a:91:ef:
db:cb:62:f7:06:09:98:2b:78:de:7e:45:a6:62:8e:ae:98:f5:
fe:bd:1a:0b:c5:22:ee:b4:68:34:51:72:58:29:12:8d:7d:11:
2b:6f:b8:ab:d0:0d:eb:3e:24:54:0c:0c:e2:ae:a6:2b:0d:2e:
73:3b:08:43:4c:3a:85:2d:f5:4e:44:fe:de:f0:3d:17:80:da:
c6:9f:70:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:50 2026 by rpki-client