
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/EC7B7E82DFD811F08F00FF64536F56BC.roa
File: EC7B7E82DFD811F08F00FF64536F56BC.roa (raw, json)
Hash identifier: GBcRPAk26rh6dyuaJcennk1M9baT+ZU2RXBW85It44s=
Subject key identifier: 48:6F:6B:C7:C7:5A:3C:9B:C4:BA:7F:8F:23:2B:1F:90:20:23:81:33
Certificate issuer: /CN=A917C81C/serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
Certificate serial: 05D1
Authority key identifier: 3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/EC7B7E82DFD811F08F00FF64536F56BC.roa
Signing time: Mon 30 Mar 2026 23:29:58 +0000
ROA not before: Mon 30 Mar 2026 23:29:58 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 141727
IP address blocks: 103.162.204.0/24 maxlen: 24
2001:df5:fb80::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl
rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1489 (0x5d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C81C, serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
Validity
Not Before: Mar 30 23:29:58 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cb0776-2698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:57:b2:f3:59:99:9b:2e:ea:39:fa:5c:32:9e:
dd:7c:8a:12:e0:ac:ea:f2:01:dd:f0:8c:b2:96:9b:
0b:f7:c4:64:ee:2d:be:b0:e7:62:29:ff:f6:b7:f3:
e3:38:0e:5a:e6:17:7d:8c:66:87:73:e5:d9:ac:3d:
09:7b:96:c1:ba:19:b3:e0:b9:5e:48:9f:06:44:c7:
a6:6d:d0:41:d3:c3:86:34:c2:fc:b5:21:4a:47:93:
c6:13:af:ac:6b:6c:94:da:87:ad:9b:66:8d:74:db:
3b:47:7e:b7:86:22:bb:fb:4e:07:3c:65:4d:21:ed:
ba:5f:10:34:85:0c:12:a4:25:d3:3e:8c:9d:0c:b5:
35:51:30:53:67:b4:9b:cf:ca:ab:01:1c:a1:15:40:
12:d9:e9:44:a3:a7:ff:2a:8a:51:60:81:4c:c9:c0:
e0:a4:3f:f3:4f:88:d8:7d:d3:1e:62:9e:d0:42:df:
14:d0:28:2f:5f:16:64:92:f6:b7:24:34:25:60:7e:
85:f2:34:ab:fd:47:5e:8f:f2:83:ae:cd:a3:c8:82:
14:f8:89:76:5c:f1:f1:e7:7c:2a:41:f0:a6:8d:08:
7e:20:91:fa:b3:fd:d0:66:0d:41:25:80:34:1f:f4:
2a:27:ea:82:ee:65:59:75:e1:d4:0e:75:f4:65:29:
56:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6F:6B:C7:C7:5A:3C:9B:C4:BA:7F:8F:23:2B:1F:90:20:23:81:33
X509v3 Authority Key Identifier:
keyid:3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/EC7B7E82DFD811F08F00FF64536F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.162.204.0/24
IPv6:
2001:df5:fb80::/47
Signature Algorithm: sha256WithRSAEncryption
0e:be:b1:04:99:fc:7f:58:3a:5f:49:b6:2c:45:d9:79:fe:7d:
a4:cc:09:d1:45:de:37:6b:07:ca:33:35:65:57:b0:72:ea:82:
a5:07:22:e6:7e:36:25:ab:4c:31:2e:47:c8:36:9c:1b:51:60:
b1:52:83:5a:40:87:06:64:f7:3b:67:3d:2c:72:36:8e:b5:9d:
53:f2:1d:88:7f:d6:6a:06:c4:aa:fc:95:07:03:10:84:24:82:
51:a4:b8:2a:6d:40:08:12:5e:89:27:14:09:b1:67:d3:78:6d:
ff:74:34:29:0d:68:e6:9f:63:b7:55:be:51:f2:1b:2c:9f:33:
0d:4f:46:4c:69:72:9f:e3:1d:ca:3b:39:cc:ec:89:41:17:bd:
fb:ca:39:ae:5b:0c:1c:76:3d:4a:55:c8:4f:a6:35:14:47:fb:
84:9a:1a:9c:f4:53:60:45:2e:50:4b:bd:d5:3b:eb:cc:a3:73:
98:85:23:65:35:9b:9f:2a:d7:df:78:16:e1:a2:3f:2f:d6:ea:
15:08:65:d3:63:a2:81:96:a1:c1:9f:28:95:cb:d4:2c:2f:6b:
91:d0:76:d7:da:39:96:f8:38:f4:b2:9e:ad:5b:7f:b4:d5:30:
1e:0c:31:2f:f2:4a:e7:e5:43:44:dc:15:a4:7a:35:bf:3e:18:
d0:cb:6a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:45:17 2026 by rpki-client