
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/D306649C371411F1BC052DCFC6833773.roa
File: D306649C371411F1BC052DCFC6833773.roa (raw, json)
Hash identifier: akYV17GIyT7K6aPSspeggaycABe45r9Md/yo1Yy5eNA=
Subject key identifier: 31:7F:15:C9:9B:C8:56:31:4B:1F:12:9D:04:88:BC:C6:A7:2D:9C:62
Certificate issuer: /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Certificate serial: 03DB
Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/D306649C371411F1BC052DCFC6833773.roa
Signing time: Mon 13 Apr 2026 08:43:21 +0000
ROA not before: Mon 13 Apr 2026 08:43:21 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 208185
IP address blocks: 36.255.96.0/24 maxlen: 24
103.209.76.0/24 maxlen: 24
103.209.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 987 (0x3db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Validity
Not Before: Apr 13 08:43:21 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69dcaca9-f6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:28:59:88:32:0c:06:58:97:be:a1:c4:78:
84:d8:22:b7:84:4f:9d:99:f5:5e:3c:d6:47:1b:97:
14:ae:0f:6a:7a:81:2b:9a:40:3c:08:25:37:73:78:
58:d4:bd:ef:fb:ce:8f:72:7f:86:ff:25:87:23:22:
8c:4f:97:f4:b1:db:42:59:27:b5:99:10:d8:6a:d2:
27:f3:e7:a2:82:74:c6:6e:f9:c7:69:aa:39:a6:af:
2a:0b:9b:b9:cc:4a:97:1c:76:42:bf:e2:41:93:94:
a7:25:df:d3:e3:fd:e6:e0:5c:26:61:e5:dc:43:01:
df:e0:95:ad:1c:4e:13:59:61:a7:80:31:19:07:8c:
c4:67:8d:d7:ed:75:e7:85:74:c9:9d:8f:23:4e:57:
18:57:76:ae:5f:a7:5e:14:40:82:8a:99:f2:c1:73:
36:e3:96:9b:87:5d:7b:df:02:ae:4e:c7:22:88:d5:
de:dd:c8:bf:a9:d3:5b:ce:9c:d0:8d:80:89:62:51:
7e:0c:93:e1:06:ea:dd:31:53:66:4a:fa:69:29:c7:
3e:2d:da:1e:04:f0:4c:18:d3:e4:93:66:9e:87:14:
18:4b:8f:e0:76:53:33:c4:a8:1e:d8:dc:d5:15:f0:
9f:d1:f0:54:d8:7c:f4:5c:e7:7b:8f:1e:34:1f:39:
4f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7F:15:C9:9B:C8:56:31:4B:1F:12:9D:04:88:BC:C6:A7:2D:9C:62
X509v3 Authority Key Identifier:
keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/D306649C371411F1BC052DCFC6833773.roa
sbgp-ipAddrBlock: critical
IPv4:
36.255.96.0/24
103.209.76.0/23
Signature Algorithm: sha256WithRSAEncryption
17:22:33:b8:82:da:5b:39:d1:c8:40:49:09:f5:1b:9c:4c:25:
15:13:37:85:a3:2a:a5:73:29:78:84:7b:66:a9:ac:60:83:05:
05:be:62:9e:0d:52:70:4c:51:ec:7f:ed:1a:0b:8f:4c:c3:25:
92:5c:aa:31:69:ac:7d:44:cc:c1:1c:ae:1d:09:68:bc:89:ef:
f0:7c:f1:60:24:81:21:db:06:e8:61:f7:0c:94:ec:28:90:89:
e4:61:74:0c:3f:6a:d2:11:6c:6a:7c:20:12:d8:1e:ef:83:80:
90:68:ce:e8:87:98:79:ef:b6:6a:89:08:b1:03:c6:f6:ef:41:
66:fd:ee:b2:38:78:23:6c:d5:34:37:19:44:29:3e:a8:bd:80:
3e:ee:f1:7f:e7:64:6e:27:4c:20:0a:99:43:03:56:3b:f4:2d:
72:59:f4:b3:93:77:bb:f7:47:70:a0:58:f3:29:31:a5:56:0a:
83:98:bc:dc:a8:ec:3f:09:4d:0f:41:2c:16:65:ee:8b:19:51:
02:c1:43:80:0c:34:43:7c:a6:2d:4a:68:90:61:8b:53:db:64:
c3:6f:ad:e2:4f:c3:f1:73:45:25:54:82:a8:de:05:4f:82:6b:
97:16:41:d0:18:c3:d4:a3:f9:46:d0:cb:ae:01:52:e4:9d:0a:
d9:f0:f3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:11 2026 by rpki-client