
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/5E0AA532B55911F082D2971FC4F9AE02.roa
File: 5E0AA532B55911F082D2971FC4F9AE02.roa (raw, json)
Hash identifier: aPEZKsWstiqxwiHejFAqoUVMW0U3pGBKVVLgUOD9JAw=
Subject key identifier: 61:B6:BD:40:47:3F:38:B1:05:19:D7:50:A6:0A:95:27:AA:1A:05:AE
Certificate issuer: /CN=A919EFEE/serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423
Certificate serial: 62
Authority key identifier: 31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/5E0AA532B55911F082D2971FC4F9AE02.roa
Signing time: Mon 23 Mar 2026 03:36:27 +0000
ROA not before: Mon 23 Mar 2026 03:36:27 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 55720
IP address blocks: 103.253.12.0/24 maxlen: 24
103.253.13.0/24 maxlen: 24
103.253.14.0/24 maxlen: 24
103.253.15.0/24 maxlen: 24
202.176.4.0/24 maxlen: 24
202.176.5.0/24 maxlen: 24
202.176.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl
rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:25:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EFEE, serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423
Validity
Not Before: Mar 23 03:36:27 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69c0b53b-824d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:aa:cb:f4:70:29:ce:27:64:aa:06:53:61:22:
b4:a1:b5:40:90:0c:83:79:ab:63:47:77:07:27:80:
28:37:29:cb:1b:7d:b1:48:f6:f4:db:4d:40:f6:1b:
44:32:71:a5:84:40:28:c8:79:e0:f9:ae:3d:c0:eb:
df:f7:fa:74:f5:29:73:01:6c:d2:64:dd:93:71:33:
bc:4e:5c:f7:c3:81:53:62:d4:57:09:66:74:51:a8:
d2:0f:5c:9d:92:e0:71:79:48:df:8b:7c:06:bc:b4:
55:86:7a:f6:c4:7f:64:fd:fe:27:2b:60:f4:fd:f1:
eb:72:1d:db:c0:18:bd:f3:ae:80:05:88:b1:4d:14:
8c:ac:e0:b9:d1:f0:2f:d5:f2:cf:10:b4:46:3c:b3:
7a:46:30:c5:5d:1b:a6:33:a4:df:b7:14:aa:34:62:
26:50:c8:03:72:01:11:39:d4:a5:3e:8f:a4:a5:9f:
9c:9f:a0:ee:05:47:e0:89:79:d7:85:f8:7d:18:51:
67:d3:e1:08:f8:ae:6a:ac:0b:68:9c:fb:5e:bc:ae:
a0:37:d4:e3:53:c0:2c:85:07:c1:c8:8b:ce:aa:f4:
c8:da:b8:04:1d:7e:cb:e7:61:be:c8:62:ac:cf:f1:
30:2a:46:20:53:ba:4e:77:34:19:37:b8:c9:61:d8:
80:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B6:BD:40:47:3F:38:B1:05:19:D7:50:A6:0A:95:27:AA:1A:05:AE
X509v3 Authority Key Identifier:
keyid:31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/5E0AA532B55911F082D2971FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.253.12.0/22
202.176.4.0-202.176.6.255
Signature Algorithm: sha256WithRSAEncryption
9d:23:2f:b9:83:de:d5:16:86:83:5b:92:11:13:e3:41:1d:3a:
98:07:fe:9f:8e:17:8e:8b:95:82:0e:d2:d8:af:de:db:c7:d1:
da:a8:60:00:62:08:99:bc:75:0f:8f:51:57:ad:b6:d5:b8:1b:
d3:de:5e:e3:03:cb:31:f4:7a:6a:27:7c:58:3e:19:d5:ea:4e:
05:77:45:fb:75:f5:c7:f3:02:9c:05:55:8b:b0:2a:b5:7d:f1:
23:93:cb:b4:82:01:a9:60:b9:56:f9:01:b1:58:96:71:a5:1c:
02:65:50:06:be:8c:b1:6b:f0:65:a8:27:33:3d:a9:e2:89:96:
2e:30:25:a8:2d:88:ee:39:c6:44:da:47:00:50:7c:33:3d:16:
7b:75:d7:74:89:d5:86:fd:e2:da:53:43:cf:31:9d:6a:c1:3c:
64:a6:c6:37:65:e1:18:25:39:35:8d:38:6d:c6:ca:b9:da:c8:
27:1a:5e:bc:d8:6b:9d:a1:4f:fa:bb:27:b2:7e:d1:15:15:e7:
56:d4:a3:60:49:12:1d:c9:a4:84:cf:b2:7e:55:6e:c9:43:1e:
91:3a:80:46:e7:ff:3c:8d:be:2f:bc:6a:6c:f3:45:28:f3:bf:
f6:ab:68:33:41:5e:44:52:60:71:e5:7f:79:63:71:5e:23:83:
e7:22:9d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:11 2026 by rpki-client