
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/BE82D1863DAC11EEB6C9226BC4F9AE02.roa
File: BE82D1863DAC11EEB6C9226BC4F9AE02.roa (raw, json)
Hash identifier: zcqW/ZXB+9LNht1rDVWtc7/J4aWwiJffD6rwYXfDvmM=
Subject key identifier: B4:14:7A:07:F4:A9:EA:3C:8B:C1:BC:AF:88:53:B4:BF:2D:A6:53:DB
Certificate issuer: /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F
Certificate serial: 1FE6
Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/BE82D1863DAC11EEB6C9226BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:28:33 +0000
ROA not before: Sat 12 Apr 2025 16:24:09 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 58516
IP address blocks: 103.247.138.0/24 maxlen: 26
2001:df0:295::/48 maxlen: 56
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl
rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8166 (0x1fe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D586, serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F
Validity
Not Before: Apr 12 16:24:09 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a422e1-a975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:89:d5:6a:78:33:ba:ef:64:34:2c:e7:a8:
e4:66:7b:87:ad:b9:19:f4:04:30:4e:65:2d:e9:1f:
f0:ae:a4:01:d3:08:1b:14:56:1a:50:36:0c:a1:77:
3d:21:0f:07:64:13:34:86:53:73:dc:b7:e7:32:68:
34:36:a9:55:9d:da:d5:97:d5:8d:00:1e:5c:11:5b:
43:cb:b9:43:1b:13:6a:81:ef:82:99:13:12:af:36:
50:1f:31:50:80:72:11:50:08:f9:c7:1d:d5:11:a9:
08:fc:2b:55:1a:49:68:76:10:fd:89:6f:10:2a:2f:
dd:12:8e:e7:ea:92:49:c8:f8:b1:bb:85:ef:9e:66:
1c:0d:f3:48:72:8b:7e:a7:b8:fe:5c:28:ab:39:53:
49:6c:ac:53:ed:ae:61:61:a1:48:c4:b0:cc:06:91:
d0:d7:08:8b:6e:c8:25:e6:a3:69:03:e2:82:ab:c2:
f7:32:43:f9:f2:7c:77:84:e0:c4:86:4b:eb:c8:85:
3a:ba:8a:df:bd:e4:8b:c3:ee:36:4e:54:5f:d7:4c:
72:9c:9a:24:73:f2:a3:c6:12:8b:15:5a:84:fc:8b:
cd:e0:41:25:f7:d6:ab:1d:ca:aa:14:a0:2f:79:c5:
45:b3:f7:9f:11:ec:3c:f9:8e:17:18:af:d9:05:3a:
7a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:14:7A:07:F4:A9:EA:3C:8B:C1:BC:AF:88:53:B4:BF:2D:A6:53:DB
X509v3 Authority Key Identifier:
keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/BE82D1863DAC11EEB6C9226BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.247.138.0/24
IPv6:
2001:df0:295::/48
Signature Algorithm: sha256WithRSAEncryption
82:c4:23:18:83:9d:89:f9:29:62:08:91:f2:fa:f9:24:3f:0d:
b9:88:91:f4:c9:24:f8:d2:3f:1e:39:28:0d:71:55:04:b6:e4:
93:7f:50:bb:96:07:44:5a:0b:76:ee:c5:3d:33:fd:d9:44:21:
c5:48:e8:18:6c:01:b9:a9:cb:d9:40:9f:50:3e:8d:e9:fa:cf:
d7:85:5b:5a:c5:46:97:29:03:bf:88:1d:9d:74:21:0f:91:b7:
c3:13:88:55:b3:31:d0:9a:e1:7d:94:45:da:d1:3e:e5:ef:52:
17:ac:c9:20:5c:7d:c6:be:df:9f:ea:af:bf:b5:f6:13:de:ee:
6e:58:6c:09:44:f0:dd:c2:c4:c0:18:a6:dc:85:94:dd:39:73:
93:9a:9e:86:6b:9d:b3:19:64:b6:70:39:4e:f7:ae:32:8b:31:
b5:a5:a1:bd:64:3d:f6:cc:00:84:bc:28:ae:05:a3:f8:be:71:
e0:8b:50:bf:af:0b:4a:7c:75:3e:23:ac:ce:26:43:2b:2c:bd:
97:d0:31:34:41:8c:b3:d4:23:21:59:b6:6f:79:d6:97:67:67:
97:43:81:57:b5:53:17:06:53:69:f6:53:08:da:88:3f:75:f1:
4a:6d:68:ae:c5:8b:59:2c:8c:56:b7:2d:cf:7d:35:f1:82:5c:
a3:6c:99:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:28:31 2026 by rpki-client