
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/E69DB7E67F7911EC86DE4B56C4F9AE02.roa
File: E69DB7E67F7911EC86DE4B56C4F9AE02.roa (raw, json)
Hash identifier: vnOHnQ2C+bdiudJug3HsvX+p4Ub92UDYLvmrkSZEE2I=
Subject key identifier: 9F:BC:99:96:83:F6:31:79:6C:0B:DD:DD:49:9E:76:20:B2:D5:55:4F
Certificate issuer: /CN=A917BB1B/serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4
Certificate serial: 047B
Authority key identifier: D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/E69DB7E67F7911EC86DE4B56C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:54:00 +0000
ROA not before: Thu 27 Feb 2025 02:25:35 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 149445
IP address blocks: 103.179.150.0/23 maxlen: 24
2001:df0:4f40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl
rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:28:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1147 (0x47b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BB1B, serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4
Validity
Not Before: Feb 27 02:25:35 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a3fea8-8506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:42:b0:bb:59:bd:54:cf:95:23:4d:d5:05:33:
22:ec:eb:78:42:2b:d4:78:55:39:70:6d:d1:6e:c3:
9f:62:68:ff:7c:60:6c:e3:49:43:9e:b2:1a:37:a5:
e4:ec:43:b7:71:05:d9:b0:db:f4:e3:a7:27:1c:65:
8b:0e:35:b5:02:7e:fd:76:e6:1b:bb:0d:9e:8e:6c:
73:f6:ce:b8:ff:6e:3f:f8:a5:44:51:f7:46:84:fc:
15:03:46:0d:5c:42:3a:2f:98:46:3a:83:ba:ba:89:
69:41:0d:0b:82:b0:dc:7a:24:88:24:b4:c6:71:c6:
66:d7:49:1c:45:d7:d2:29:d7:95:e1:31:64:95:be:
76:ca:d9:f8:1f:c9:a8:31:aa:9e:c2:ca:1f:fc:3c:
61:91:ae:b2:43:39:7a:b2:af:58:96:01:e6:19:4d:
83:40:92:79:cc:88:98:30:aa:48:26:0e:90:4c:26:
b0:3f:57:ac:28:23:ba:1d:ed:b6:7b:66:67:d0:b5:
3e:27:b9:88:48:86:58:f4:3a:72:d7:b5:a9:13:b0:
98:a5:ba:1f:a4:9f:95:87:b2:b9:88:6a:b1:4b:d5:
8a:91:43:8e:09:95:21:cd:6b:2c:29:fa:c2:b8:e7:
9e:19:cd:fd:bd:c6:3a:c1:47:9f:7e:a8:24:87:54:
2a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BC:99:96:83:F6:31:79:6C:0B:DD:DD:49:9E:76:20:B2:D5:55:4F
X509v3 Authority Key Identifier:
keyid:D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/E69DB7E67F7911EC86DE4B56C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.179.150.0/23
IPv6:
2001:df0:4f40::/48
Signature Algorithm: sha256WithRSAEncryption
7e:d1:29:a8:c2:76:8c:58:cc:5e:d4:c6:87:26:af:f5:e4:66:
9e:35:b0:65:5b:12:2d:29:34:81:c2:53:89:83:e8:32:32:a0:
06:05:16:a4:a4:a4:b7:95:00:ae:ce:19:0b:f4:28:57:f3:9f:
96:ea:f1:46:b0:56:12:53:ba:33:f9:ac:c9:98:e3:5c:25:76:
44:bd:85:e9:2d:36:e0:57:de:fa:34:64:e2:94:73:1e:a8:04:
d5:f9:58:13:3c:a6:f8:e8:fe:8c:77:be:80:e1:db:3d:42:e4:
28:66:e5:5a:34:99:ea:8e:51:27:64:8f:7e:76:ba:5b:af:b0:
e0:88:f2:7f:c3:c1:a2:39:fc:e0:87:35:1d:0b:99:b0:d7:2d:
2a:c2:9e:16:cc:10:1f:cc:e5:58:f4:ea:7b:d5:30:33:ee:e2:
ec:22:be:6b:8c:77:1a:84:07:9d:c3:07:5d:c8:b7:1d:c4:93:
2d:71:be:de:9b:56:8d:b5:b4:8e:72:41:3a:ba:9a:75:8f:a7:
14:b2:9f:aa:f4:7a:45:9c:82:83:a5:ad:3a:fc:bf:f9:ab:59:
62:28:e9:fd:da:98:5c:a9:cd:27:a3:2d:1f:9a:2b:13:59:8d:
90:5e:23:c3:87:a3:32:ca:49:c3:f8:5b:13:a5:c3:28:24:91:
07:96:be:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:53 2026 by rpki-client