
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/50068D0EAB2511F0BE8B7031C4F9AE02.roa
File: 50068D0EAB2511F0BE8B7031C4F9AE02.roa (raw, json)
Hash identifier: 34G2V7HQ4AjjCeFCqFYe7LAf44BZP4fRn5ziZj2XQpo=
Subject key identifier: 8E:C5:B1:CB:86:00:B7:ED:D7:E1:4D:AC:C5:C8:D7:47:F0:0F:FC:B4
Certificate issuer: /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Certificate serial: 03B3
Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/50068D0EAB2511F0BE8B7031C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:40:32 +0000
ROA not before: Thu 05 Feb 2026 08:16:20 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 208185
IP address blocks: 103.209.76.0/24 maxlen: 24
103.209.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:38:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 947 (0x3b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Validity
Not Before: Feb 5 08:16:20 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a4881f-b8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7b:6a:ba:cb:a6:58:0f:2d:1c:d5:c4:a3:bf:
22:ee:49:26:61:76:89:57:b4:e4:2c:32:0d:5e:b6:
15:68:f0:a2:a5:f9:b1:42:f3:b9:c5:1e:42:80:1b:
a5:6b:ff:91:a4:3e:9d:c1:3a:50:ea:c4:3a:c2:ee:
b1:ca:c9:22:94:c7:36:a4:d3:b2:65:d8:61:fd:ab:
0b:70:ef:d2:5a:03:94:ba:2f:31:12:84:d1:10:1a:
cd:dd:58:8f:a7:8d:24:bc:71:9f:b1:45:f9:fb:3b:
5b:fe:41:a7:c3:c0:fd:de:03:22:fd:15:af:75:f5:
df:77:b1:c6:68:55:94:50:44:81:c9:20:74:20:8e:
a8:7d:fd:f2:1e:be:84:f3:14:21:cd:0d:dd:33:8d:
ac:18:5d:84:df:91:56:91:1c:ec:27:a0:d5:2f:cb:
4a:ad:51:84:8f:c3:9b:34:85:4e:67:8e:00:ac:58:
35:c3:0f:cb:44:42:39:1f:5f:e3:30:f0:66:6e:a1:
10:7a:aa:b0:b1:98:1d:8d:31:73:48:95:bf:54:56:
f3:dc:3c:5c:f5:ae:72:7a:74:7b:4f:ba:38:8a:e2:
d5:63:2f:b0:85:1e:ad:af:37:d1:b2:24:b1:39:b3:
f2:8b:f3:ee:8c:8b:b9:84:ec:7c:dc:71:99:83:fc:
39:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C5:B1:CB:86:00:B7:ED:D7:E1:4D:AC:C5:C8:D7:47:F0:0F:FC:B4
X509v3 Authority Key Identifier:
keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/50068D0EAB2511F0BE8B7031C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.209.76.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:da:5c:8c:15:55:6e:fa:2f:0f:2e:96:e7:f2:c6:1b:7d:57:
e7:93:c4:8a:b4:81:30:06:58:b3:c6:f9:17:89:0b:56:5b:45:
77:e5:ed:bf:06:7c:15:5d:b7:6c:75:f6:40:48:32:96:c3:a7:
56:bb:7a:5f:c9:3f:f5:27:64:b6:7d:fd:05:c7:b4:3b:7a:89:
ca:f6:4b:a5:c8:fa:d1:e0:81:50:69:35:6b:be:89:7b:42:0a:
8a:a5:1b:13:81:ca:43:f3:03:76:38:69:4c:dd:cd:00:2d:15:
f6:5e:bb:97:5c:e1:f8:53:d3:4b:2b:44:6b:52:8c:3f:8a:9c:
59:50:04:19:2b:cd:c0:2f:80:04:78:47:9b:46:da:59:74:c2:
0d:e9:c5:b8:6e:b7:ce:b8:19:52:86:9b:7c:29:7d:2e:cc:6d:
b3:de:da:87:f3:fa:e3:e6:2b:8f:d8:86:52:41:8e:ad:4c:0f:
6b:f8:f4:c7:89:0e:ac:c9:50:45:a3:67:4d:e6:75:44:d6:0e:
3d:50:83:01:56:e6:7e:e3:a6:ce:a8:28:13:bb:d8:19:ca:6b:
ea:ea:83:e6:70:7c:2c:90:fc:fb:c8:49:6d:65:36:c4:98:8a:
f1:a9:de:0a:02:ef:f9:16:53:8b:3d:5b:66:6f:b8:cd:d9:bf:
24:5b:38:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:36 2026 by rpki-client