
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/93FE3B60220111EE8E5D8D0FC4F9AE02.roa
File: 93FE3B60220111EE8E5D8D0FC4F9AE02.roa (raw, json)
Hash identifier: FzAXOXMg8ypDm7weH1JrGkQxJTnIfLB9Zd0EsKEe/7c=
Subject key identifier: 6E:FB:50:BD:29:3E:6C:07:10:E1:CF:A0:99:89:C1:8A:E7:E1:B4:B0
Certificate issuer: /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Certificate serial: 08B5
Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/93FE3B60220111EE8E5D8D0FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:02:49 +0000
ROA not before: Fri 18 Apr 2025 21:23:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133104
IP address blocks: 103.152.248.0/24 maxlen: 24
103.152.249.0/24 maxlen: 24
119.252.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl
rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:09:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2229 (0x8b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Validity
Not Before: Apr 18 21:23:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a46328-dbf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:7d:e3:10:04:02:2a:7f:59:a7:0d:83:d7:
21:32:40:08:2f:10:a4:12:a1:7a:64:fc:1e:82:6f:
42:c8:f5:ca:e5:bf:ae:d1:7d:b8:fc:14:af:81:eb:
8d:26:c0:1c:7f:e2:1a:49:9f:4e:dc:64:48:45:e8:
88:36:21:78:bf:30:28:20:49:b0:f0:8b:09:b2:3a:
d0:92:e0:9a:66:41:76:5b:07:15:14:5e:b4:54:56:
a6:68:2a:cf:59:cc:3c:8b:25:ef:23:b7:9a:28:5e:
05:56:35:20:77:c3:52:4e:77:67:0f:94:45:7f:53:
ed:ab:a3:8a:cb:ee:1c:03:50:8e:22:d4:a4:d0:7c:
96:a8:38:30:19:86:bb:1c:7f:13:71:e7:00:4b:61:
64:e5:32:c2:7f:89:53:23:43:45:7d:ed:47:b8:b2:
b8:04:2c:fb:12:8b:87:ab:cf:74:23:76:cf:d1:8a:
f9:b2:db:d0:2e:bc:9b:5f:b9:af:53:b8:21:a4:cb:
e0:75:74:c0:d9:34:30:8b:c1:c1:59:fc:97:6e:d3:
2c:e9:97:03:21:b5:f5:99:df:87:c7:b3:ad:76:85:
77:19:5d:cb:9d:3d:82:15:3b:04:a3:b6:87:3e:25:
cb:3c:0b:88:f7:ec:02:51:dc:00:d9:b4:de:86:dd:
cb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FB:50:BD:29:3E:6C:07:10:E1:CF:A0:99:89:C1:8A:E7:E1:B4:B0
X509v3 Authority Key Identifier:
keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/93FE3B60220111EE8E5D8D0FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.152.248.0/23
119.252.177.0/24
Signature Algorithm: sha256WithRSAEncryption
18:a3:f0:9a:70:de:c1:93:74:79:1b:36:eb:d6:9e:72:f7:ba:
45:05:07:36:7d:23:b6:9e:52:65:eb:f2:bf:1e:13:53:b1:a0:
c5:42:61:9c:03:75:41:1c:2f:a4:3e:50:ed:90:46:13:00:f0:
10:3d:c9:17:c2:89:72:3e:2d:fc:0f:bd:f6:d0:79:5b:e3:58:
7e:22:ab:3d:4a:4a:82:22:ff:16:e2:b9:5b:ff:f7:92:7b:58:
6a:18:03:66:d4:57:83:4f:6d:ba:5d:95:4e:e9:93:5b:58:8a:
85:80:c0:bb:2d:68:91:bd:95:4b:74:a3:5b:6a:67:79:83:ae:
26:1f:30:10:3c:e4:40:cf:f9:87:48:11:96:dd:ad:e9:f1:aa:
85:fc:bf:9b:61:54:05:a3:87:9a:f4:56:e8:a5:3c:aa:81:c4:
51:71:7a:cc:23:0f:a8:68:6c:0b:fb:da:c9:e2:92:b4:ec:59:
7b:76:56:14:4d:bf:5d:ea:93:52:37:2c:90:f4:57:56:4c:b7:
7e:8a:d0:7e:1f:71:cc:31:91:ec:86:14:1c:d1:65:fa:b5:e3:
06:6d:e5:9a:1c:ed:d1:cf:71:64:92:6d:aa:21:95:a1:67:87:
e6:8b:79:12:bb:14:59:3e:f6:ed:c8:8a:18:64:f4:a1:17:6c:
a5:1b:2a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:41:20 2026 by rpki-client