
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/5B096332BFDF11EC89ECF37BC4F9AE02.roa
File: 5B096332BFDF11EC89ECF37BC4F9AE02.roa (raw, json)
Hash identifier: zqKn2CF5cs80h6UsXGG1XwhyhWq5JYg89i+pZh8R9/o=
Subject key identifier: 98:FB:31:29:0E:0B:F8:12:BE:50:BF:D4:B3:73:D8:1E:5D:BB:1F:89
Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Certificate serial: 07B5
Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/5B096332BFDF11EC89ECF37BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:55:23 +0000
ROA not before: Fri 20 Jun 2025 22:11:22 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 133082
IP address blocks: 103.255.80.0/22 maxlen: 22
103.255.80.0/24 maxlen: 24
103.255.81.0/24 maxlen: 24
103.255.82.0/24 maxlen: 24
103.255.83.0/24 maxlen: 24
2400:8180::/32 maxlen: 32
2400:8180:1::/48 maxlen: 56
2400:8180:2::/48 maxlen: 56
2400:8180:3::/48 maxlen: 56
2400:8180:4::/48 maxlen: 56
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl
rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:59:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1973 (0x7b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1FE, serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Validity
Not Before: Jun 20 22:11:22 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a47d8b-4898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:26:0a:7b:48:5f:9b:ab:3d:60:64:25:ec:be:
97:95:e9:0b:c3:03:85:eb:ed:8d:bc:28:db:cf:cc:
83:4b:ba:d5:87:6a:1f:af:63:72:01:1f:69:46:a5:
62:87:ab:41:77:79:fa:8a:b9:27:9c:fd:be:69:1e:
af:33:b4:9b:ae:ab:02:a8:3b:00:45:d7:e7:e6:30:
77:90:9b:d2:28:14:dd:08:95:36:e8:b3:a8:88:6f:
99:ad:c3:68:85:5e:38:65:3a:d0:59:4e:3c:90:74:
c3:7c:ec:06:49:aa:9b:c2:42:41:7e:72:04:1c:01:
39:e4:37:21:77:47:41:8e:e9:9a:23:37:ba:10:3f:
8a:56:ae:3f:97:3f:5d:a6:f8:b4:2c:24:f3:48:89:
1d:97:9c:48:6e:1b:a8:de:4a:98:7b:bc:72:ea:5c:
6b:03:23:06:31:b9:90:9c:fe:c4:11:18:3d:8a:be:
d7:a1:25:37:b2:7d:df:6f:44:76:99:92:cd:ef:ad:
da:fd:61:ef:c1:8d:28:2a:75:3a:fa:86:81:c7:7b:
f7:ab:03:d4:d7:d9:97:4c:fc:94:9d:52:af:9f:e8:
97:95:a8:3b:6f:68:f6:df:eb:e9:62:3a:b2:55:cd:
01:47:b3:4e:b4:b4:56:a7:6d:65:48:74:f7:21:50:
f6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FB:31:29:0E:0B:F8:12:BE:50:BF:D4:B3:73:D8:1E:5D:BB:1F:89
X509v3 Authority Key Identifier:
keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/5B096332BFDF11EC89ECF37BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.255.80.0/22
IPv6:
2400:8180::/32
Signature Algorithm: sha256WithRSAEncryption
80:47:ed:a3:c7:7c:ea:64:08:92:80:5d:43:23:c0:e3:83:6c:
d5:55:c0:36:d9:c6:c2:42:12:23:4f:93:61:fd:1e:09:7e:30:
ec:67:b0:f9:5d:1a:5b:39:fa:3f:3c:2c:92:dd:58:93:2f:70:
12:96:c0:7b:6c:d4:72:d0:ec:cd:58:ce:b7:42:fe:46:e9:7e:
a6:51:50:f3:62:61:73:52:a0:c5:b1:06:55:12:d5:17:30:df:
68:a8:80:4d:0a:b8:fb:34:5d:66:74:45:fd:db:8e:af:fb:71:
4c:76:21:c1:32:a0:99:27:66:b2:a6:a3:31:19:59:81:8a:63:
29:74:8d:af:d2:15:3a:77:29:44:b3:54:96:41:a3:cb:b3:f3:
86:c9:08:45:df:9c:b5:61:0b:5d:d7:c5:12:0f:ec:f2:c7:d5:
20:06:c5:07:50:a5:e4:0a:be:07:e3:1c:e8:32:cf:dd:40:4e:
e9:e9:5e:48:23:e1:69:83:f9:6b:65:71:51:c2:be:6c:10:c6:
52:70:fe:dd:f9:df:e9:85:6d:4d:58:43:a0:c2:eb:4f:1a:95:
02:a1:e9:ae:55:21:67:7d:e2:53:ed:51:c7:b0:65:0b:35:32:
d5:35:2e:8b:cf:2e:12:ae:3b:96:54:46:2b:e0:2c:a5:73:df:
cb:7f:17:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:48:44 2026 by rpki-client