
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/1190361AAF1B11E7B89F3883C4F9AE02.roa
File: 1190361AAF1B11E7B89F3883C4F9AE02.roa (raw, json)
Hash identifier: zl0jrIeJxII+atMy5dCdCnVAXxI5uX70xqsr3BS1v78=
Subject key identifier: 7C:BE:26:2C:7B:B8:55:7E:5A:C6:FE:26:E6:7C:04:26:E3:07:C8:F9
Certificate issuer: /CN=A917CB63/serialNumber=66EA0F83BDD3632BFF19400B3A1BA6FEDFFC5587
Certificate serial: 352D
Authority key identifier: 66:EA:0F:83:BD:D3:63:2B:FF:19:40:0B:3A:1B:A6:FE:DF:FC:55:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/1190361AAF1B11E7B89F3883C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:12:05 +0000
ROA not before: Wed 02 Apr 2025 15:40:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56172
IP address blocks: 103.1.5.0/24 maxlen: 24
103.98.134.0/24 maxlen: 24
103.136.52.0/23 maxlen: 23
103.136.52.0/24 maxlen: 24
103.136.53.0/24 maxlen: 24
2001:df0:400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.crl
rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:52:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13613 (0x352d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CB63, serialNumber=66EA0F83BDD3632BFF19400B3A1BA6FEDFFC5587
Validity
Not Before: Apr 2 15:40:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a402e5-ee88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:e2:99:db:aa:ac:dd:c6:4e:c1:a8:03:89:
63:61:77:12:37:a4:43:7f:b3:8a:fb:23:ca:18:95:
09:25:10:03:1f:af:26:04:71:05:54:19:ae:4e:5c:
3c:60:5c:12:5c:2e:c8:37:dd:86:87:8c:59:10:7a:
9a:b3:16:00:79:06:2e:ac:e0:22:0f:b7:3b:ec:ca:
20:3d:f6:4a:55:24:8e:30:d9:29:7d:6b:0b:3a:32:
a8:d9:49:67:88:65:d1:4a:44:07:25:ea:01:d6:a7:
18:7e:60:6c:39:1c:54:45:df:09:a0:9d:56:6e:50:
20:af:b3:97:34:0f:b9:08:ca:b9:59:1b:fd:b3:8e:
22:fe:bd:c9:91:81:57:85:95:29:81:5e:75:a8:a6:
65:0d:0d:2d:57:8f:78:3c:ea:c6:06:05:9b:f5:9c:
65:93:d6:33:ba:69:d2:33:78:d0:8f:33:61:c9:62:
3d:ec:17:79:d2:74:88:a3:92:62:87:b3:ed:57:72:
03:9c:73:2f:73:03:a6:ef:6a:cf:56:e7:4b:d7:d4:
96:8d:b9:7a:58:e7:23:37:5c:81:fb:48:ee:bd:96:
a4:ed:06:4b:99:9c:8b:86:e5:b1:0d:7b:5e:36:1f:
82:e4:ae:85:f9:22:0c:f4:5b:fd:c5:43:0c:29:39:
0a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BE:26:2C:7B:B8:55:7E:5A:C6:FE:26:E6:7C:04:26:E3:07:C8:F9
X509v3 Authority Key Identifier:
keyid:66:EA:0F:83:BD:D3:63:2B:FF:19:40:0B:3A:1B:A6:FE:DF:FC:55:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/1190361AAF1B11E7B89F3883C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.1.5.0/24
103.98.134.0/24
103.136.52.0/23
IPv6:
2001:df0:400::/48
Signature Algorithm: sha256WithRSAEncryption
03:44:07:45:f9:b7:e1:c2:b0:23:ee:eb:c9:fb:8b:db:34:7e:
02:bc:d7:1d:a1:5a:87:9a:32:cf:51:88:c6:e7:92:e6:54:94:
a0:75:2e:03:11:b8:43:09:20:45:4b:5c:99:b0:10:0d:d6:d3:
70:da:b9:25:fc:5f:6f:22:1a:bf:26:a9:51:7c:70:13:ee:41:
e2:9e:c2:dd:5d:49:fd:6c:02:27:d9:dc:97:bf:d1:b9:1f:d5:
fd:8e:e1:5e:f9:8d:be:40:ed:a9:12:c4:5b:56:ce:5b:fb:eb:
2c:fb:9d:47:f7:09:c4:dd:04:d0:e5:43:3a:c9:3e:ab:ea:ca:
d8:1c:3d:9d:73:a7:a9:88:6e:5d:c0:7e:4a:4f:97:78:8a:ee:
39:76:f8:e6:2d:1e:24:cf:58:d5:e5:b6:19:9c:6c:75:a9:48:
61:2b:93:c5:db:9f:b1:85:d8:f4:e1:91:b5:f8:9d:2b:65:22:
06:8a:79:f6:3f:16:f6:4a:8e:17:4f:1f:1a:a6:d0:e1:88:12:
f4:cf:c4:6d:2c:f5:3c:16:05:aa:52:ec:22:c4:f2:4d:63:23:
80:4a:bc:aa:40:d7:7e:72:b3:0c:c3:69:46:ce:96:38:26:0b:
cb:ef:1b:5d:19:23:38:c3:22:40:06:62:a6:8f:ce:4e:e3:c1:
8f:40:61:10
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgICNS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0NCNjMxMTAvBgNVBAUTKDY2RUEwRjgzQkREMzYzMkJGRjE5NDAwQjNBMUJBNkZF
REZGQzU1ODcwHhcNMjUwNDAyMTU0MDU5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDJlNS1lZTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuMbimduqrN3GTsGoA4ljYXcSN6RDf7OK+yPKGJUJJRADH68mBHEFVBmuTlw8
YFwSXC7IN92Gh4xZEHqasxYAeQYurOAiD7c77MogPfZKVSSOMNkpfWsLOjKo2Uln
iGXRSkQHJeoB1qcYfmBsORxURd8JoJ1WblAgr7OXNA+5CMq5WRv9s44i/r3JkYFX
hZUpgV51qKZlDQ0tV494POrGBgWb9Zxlk9YzumnSM3jQjzNhyWI97Bd50nSIo5Ji
h7PtV3IDnHMvcwOm72rPVudL19SWjbl6WOcjN1yB+0juvZak7QZLmZyLhuWxDXte
Nh+C5K6F+SIM9Fv9xUMMKTkK5QIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFHy+Jix7
uFV+Wsb+JuZ8BCbjB8j5MB8GA1UdIwQYMBaAFGbqD4O902Mr/xlACzobpv7f/FWH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0I2My9FMUIwNTRGQzFE
QTcxMUUyQjY4OEVCQTEwOEIwMkNEMi9adW9QZzczVFl5dl9HVUFMT2h1bV90XzhW
WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p1b1BnNzNUWXl2X0dVQUxPaHVtX3RfOFZZYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0NCNjMvRTFCMDU0RkMxREE3MTFFMkI2ODhFQkExMDhCMDJDRDIvMTE5MDM2MUFB
RjFCMTFFN0I4OUYzODgzQzRGOUFFMDIucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAY
BAIAATASAwQAZwEFAwQAZ2KGAwQBZ4g0MA8EAgACMAkDBwAgAQ3wBAAwDQYJKoZI
hvcNAQELBQADggEBAANEB0X5t+HCsCPu68n7i9s0fgK81x2hWoeaMs9RiMbnkuZU
lKB1LgMRuEMJIEVLXJmwEA3W03DauSX8X28iGr8mqVF8cBPuQeKewt1dSf1sAifZ
3Je/0bkf1f2O4V75jb5A7akSxFtWzlv76yz7nUf3CcTdBNDlQzrJPqvqytgcPZ1z
p6mIbl3AfkpPl3iK7jl2+OYtHiTPWNXlthmcbHWpSGErk8Xbn7GF2PThkbX4nStl
IgaKefY/FvZKjhdPHxqm0OGIEvTPxG0s9TwWBapS7CLE8k1jI4BKvKpA135yswzD
aUbOljgmC8vvG10ZIzjDIkAGYqaPzk7jwY9AYRA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:12 2026 by rpki-client