
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/5EDCA5AC61BE11F1BC6CC5449047A888.roa
File: 5EDCA5AC61BE11F1BC6CC5449047A888.roa (raw, json)
Hash identifier: RfyGAa3qye+BMhRuql0Q61Dpnspsmt7EFQ2dI7Ec2g0=
Subject key identifier: 88:79:A9:73:39:F3:AB:5B:78:7F:38:BF:2B:D5:30:79:60:B6:C8:80
Certificate issuer: /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Certificate serial: 040E
Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/5EDCA5AC61BE11F1BC6CC5449047A888.roa
Signing time: Sat 06 Jun 2026 15:42:49 +0000
ROA not before: Sat 06 Jun 2026 15:42:49 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 133551
IP address blocks: 103.209.76.0/24 maxlen: 24
103.209.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:45:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1038 (0x40e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Validity
Not Before: Jun 6 15:42:49 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a243ff9-70df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ee:2e:08:c0:eb:19:71:ea:e1:38:e1:38:51:
6e:30:de:f1:88:63:f8:2f:40:f9:60:3b:fe:09:20:
83:3c:97:4a:bf:0e:83:b2:6a:02:a2:bf:8e:6d:37:
b1:48:cb:bb:27:e6:bb:07:fa:0c:73:9e:db:62:da:
61:b5:7e:2e:16:66:9b:2d:f4:2b:55:bb:91:7d:66:
38:d1:c9:75:bb:c3:b3:66:43:65:76:08:c7:c2:b2:
a0:7f:a0:c0:ab:de:2e:82:68:15:46:5f:46:18:95:
35:99:d5:de:e9:60:ca:4b:ea:22:83:72:10:10:4c:
86:4a:9c:50:14:54:12:b5:17:3b:89:6a:2a:36:77:
26:bf:0b:e9:67:5a:e6:f9:09:05:ee:b2:86:92:e2:
76:43:80:15:6e:e4:bb:2a:59:c0:12:67:cd:88:79:
c3:ef:1e:c5:33:c7:b4:06:29:3c:92:f1:7a:3f:d3:
8d:77:f2:69:7d:90:ae:cf:10:69:5c:37:80:d3:ba:
95:05:63:e6:93:67:5d:d7:44:b2:7c:63:ea:93:af:
bf:57:63:87:aa:7b:b6:59:39:a9:ae:fe:83:9c:c2:
2b:aa:fe:6d:08:e2:f6:cb:68:76:ec:12:39:17:fc:
c2:28:6e:fe:d0:29:8b:ce:84:45:03:b3:33:22:64:
e7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:79:A9:73:39:F3:AB:5B:78:7F:38:BF:2B:D5:30:79:60:B6:C8:80
X509v3 Authority Key Identifier:
keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/5EDCA5AC61BE11F1BC6CC5449047A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.209.76.0/24
103.209.79.0/24
Signature Algorithm: sha256WithRSAEncryption
62:40:ab:55:68:da:51:26:73:c3:cd:e1:1e:7a:ea:db:9c:2a:
c4:4f:78:88:bf:14:c5:a3:8b:83:cd:d1:b3:f4:ad:50:ca:15:
a7:b4:5a:2b:89:56:c9:d3:db:95:f6:8d:6a:36:59:b0:be:dc:
7e:72:4f:06:e7:73:bd:fa:91:7f:78:21:9e:bc:ef:4c:2e:cf:
4e:77:8e:41:cd:8a:5b:1d:c2:7a:ef:82:4f:86:c1:18:34:39:
5e:a9:52:72:24:84:48:ed:8f:a9:01:fa:6c:65:c2:ef:0a:dc:
85:d0:fc:a2:fb:7b:d0:5f:52:b5:ac:a3:99:e0:f3:5d:52:cb:
bb:33:a6:08:34:f9:64:24:a3:e5:c0:38:34:5d:10:8f:11:71:
1d:9a:14:9c:f4:71:f1:fb:d7:bb:0e:de:14:d9:5b:ff:20:97:
5b:48:e8:3e:e9:97:8e:e8:43:f8:60:aa:d1:8c:9a:82:2e:2f:
92:7d:b7:ad:a4:a3:76:99:b2:36:0d:ba:1e:34:65:62:f5:82:
f4:8a:70:56:3d:12:29:d8:43:e3:e1:f5:95:86:5f:ed:8b:24:
25:ae:a2:18:89:29:77:31:83:5a:b3:8f:9c:6c:84:4f:dd:7d:
40:a5:07:aa:4d:07:6f:90:6a:0e:11:2f:81:71:af:2b:4e:25:
f2:78:27:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:56:24 2026 by rpki-client