
$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/69977ED8794A11F1A904CD4C78A30FBC.roa
File: 69977ED8794A11F1A904CD4C78A30FBC.roa (raw, json)
Hash identifier: KZT6Psnmy8n/F8KO/zJ9m4zllIcZy2oBZLC5Bi71PHg=
Subject key identifier: F2:5E:CA:D7:51:63:6D:9D:DE:EC:B5:49:00:CC:AE:08:22:3C:5D:C3
Certificate issuer: /CN=A917748E/serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Certificate serial: 02ED
Authority key identifier: AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/69977ED8794A11F1A904CD4C78A30FBC.roa
Signing time: Fri 24 Jul 2026 13:08:54 +0000
ROA not before: Fri 24 Jul 2026 13:08:54 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 26337
IP address blocks: 43.225.52.0/22 maxlen: 24
103.21.58.0/23 maxlen: 24
103.50.160.0/22 maxlen: 24
103.195.184.0/23 maxlen: 24
103.224.22.0/23 maxlen: 24
137.59.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 749 (0x2ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917748E, serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Validity
Not Before: Jul 24 13:08:54 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a6363e6-cc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:dd:61:a7:0d:f0:14:21:f2:54:70:8f:43:ca:
d3:d6:30:3f:2c:b9:a7:9f:d8:51:1e:4b:18:8f:76:
77:a2:a4:af:2b:7c:ad:08:56:68:37:5b:77:5b:4c:
fe:55:3c:c9:f1:1f:8c:34:fd:7d:49:7f:7b:68:d6:
0c:dc:b6:23:bc:16:82:fa:97:0b:0f:20:fc:72:72:
01:a8:fc:69:a2:10:41:22:5f:88:11:e0:24:9f:2e:
1b:60:3f:cb:28:b8:76:1a:04:02:43:4c:1c:b7:a3:
16:31:5f:07:c8:98:71:f3:24:7a:03:0a:82:43:19:
43:df:b9:f2:24:5f:a1:10:ac:3e:e1:cc:d7:27:9b:
c4:ae:90:fc:6b:b4:d0:1c:33:0f:de:53:c4:1c:81:
0f:ba:c2:f0:63:3c:ac:78:46:73:26:28:39:0d:9f:
d8:c2:3f:e2:03:11:6b:0e:a1:4e:30:14:87:29:b6:
cb:63:a7:cc:12:44:b6:01:8a:57:03:0d:fd:ca:86:
be:8e:c4:84:bb:ab:e8:df:88:61:b1:04:cb:d2:fa:
b1:54:91:c0:d3:06:d8:9e:14:46:9d:27:f8:76:5b:
81:4f:42:bb:4c:52:b5:3b:06:68:15:07:2a:5b:cf:
32:c6:9e:32:58:e3:a5:b8:70:42:14:05:04:16:c9:
1c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5E:CA:D7:51:63:6D:9D:DE:EC:B5:49:00:CC:AE:08:22:3C:5D:C3
X509v3 Authority Key Identifier:
keyid:AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/69977ED8794A11F1A904CD4C78A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
43.225.52.0/22
103.21.58.0/23
103.50.160.0/22
103.195.184.0/23
103.224.22.0/23
137.59.148.0/22
Signature Algorithm: sha256WithRSAEncryption
e7:41:41:2b:0d:ca:f0:a3:3c:3e:a4:aa:7f:0d:41:46:96:bd:
92:d7:3b:44:04:d9:1a:79:00:27:32:55:00:a9:c3:24:70:ad:
7e:85:98:83:7d:f5:ce:67:0a:9d:08:49:b5:63:8a:e7:90:ce:
aa:72:9f:f3:25:94:80:7b:70:71:fd:94:bb:a6:5f:0d:bf:88:
eb:cf:7a:28:44:e6:ea:e1:71:fb:0c:a5:bb:13:c4:3b:aa:bf:
47:e8:29:42:66:15:03:a8:70:96:53:7e:9b:f8:ed:1b:bb:ab:
e7:79:36:ef:d1:08:22:08:fa:5e:b3:52:30:a9:c4:74:e4:91:
4f:05:5c:9a:cb:6c:ae:91:f2:bf:62:80:41:42:4a:fc:2c:e4:
6e:de:42:fe:d1:15:4b:10:c0:c1:87:3b:30:15:df:4d:56:8b:
b4:61:85:ca:97:49:1b:ea:f3:27:fb:c3:fc:b2:89:93:48:7f:
e2:2b:ce:76:97:c9:5a:0a:44:de:ca:23:68:cd:6f:c7:87:1c:
54:80:ee:91:11:5e:4c:1a:b0:3c:b1:1f:0a:8e:23:a1:c1:e9:
cf:0d:2b:0b:60:a8:0b:d0:0f:cb:22:96:2a:d4:35:65:2e:bb:
68:4b:39:df:8b:a2:48:61:60:99:8c:b2:ab:86:3d:dd:da:74:
27:cc:8b:79
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgICAu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc0OEUxMTAvBgNVBAUTKEFFOTM4M0E5M0I2QzVBMTM1RDI2MTNBOTdDNURFQzk2
MDk2MjMzRjEwHhcNMjYwNzI0MTMwODU0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTYzNjNlNi1jYzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7N1hpw3wFCHyVHCPQ8rT1jA/LLmnn9hRHksYj3Z3oqSvK3ytCFZoN1t3W0z+
VTzJ8R+MNP19SX97aNYM3LYjvBaC+pcLDyD8cnIBqPxpohBBIl+IEeAkny4bYD/L
KLh2GgQCQ0wct6MWMV8HyJhx8yR6AwqCQxlD37nyJF+hEKw+4czXJ5vErpD8a7TQ
HDMP3lPEHIEPusLwYzyseEZzJig5DZ/Ywj/iAxFrDqFOMBSHKbbLY6fMEkS2AYpX
Aw39yoa+jsSEu6vo34hhsQTL0vqxVJHA0wbYnhRGnSf4dluBT0K7TFK1OwZoFQcq
W88yxp4yWOOluHBCFAUEFskcPQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFPJeytdR
Y22d3uy1SQDMrggiPF3DMB8GA1UdIwQYMBaAFK6Tg6k7bFoTXSYTqXxd7JYJYjPx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS81NzExNTlFMjRG
QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9ycE9EcVR0c1doTmRKaE9wZkYzc2xnbGlN
X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JwT0RxVHRzV2hOZEpoT3BmRjNzbGdsaU1fRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Nzc0OEUvNTcxMTU5RTI0RkE5MTFFREFERTUxNTdDQzRGOUFFMDIvNjk5NzdFRDg3
OTRBMTFGMUE5MDRDRDRDNzhBMzBGQkMucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq
BAIAATAkAwQCK+E0AwQBZxU6AwQCZzKgAwQBZ8O4AwQBZ+AWAwQCiTuUMA0GCSqG
SIb3DQEBCwUAA4IBAQDnQUErDcrwozw+pKp/DUFGlr2S1ztEBNkaeQAnMlUAqcMk
cK1+hZiDffXOZwqdCEm1Y4rnkM6qcp/zJZSAe3Bx/ZS7pl8Nv4jrz3ooRObq4XH7
DKW7E8Q7qr9H6ClCZhUDqHCWU36b+O0bu6vneTbv0QgiCPpes1IwqcR05JFPBVya
y2yukfK/YoBBQkr8LORu3kL+0RVLEMDBhzswFd9NVou0YYXKl0kb6vMn+8P8somT
SH/iK852l8laCkTeyiNozW/HhxxUgO6REV5MGrA8sR8KjiOhwenPDSsLYKgL0A/L
IpYq1DVlLrtoSznfi6JIYWCZjLKrhj3d2nQnzIt5
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:22:53 2026 by rpki-client