
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/E869880C500511EA98307A59C4F9AE02.roa
File: E869880C500511EA98307A59C4F9AE02.roa (raw, json)
Hash identifier: tMXWiHQDEYWjmb1rCm9pm1NKCjaTCYMsTjZBKr+rfEA=
Subject key identifier: A1:3C:3F:17:62:08:7A:AB:23:34:61:5E:81:FC:6F:6B:4C:F4:F9:FE
Certificate issuer: /CN=A917E832/serialNumber=203D1E2DA852BE5B643A99BEF564D774BDDCC7F4
Certificate serial: 0B5C
Authority key identifier: 20:3D:1E:2D:A8:52:BE:5B:64:3A:99:BE:F5:64:D7:74:BD:DC:C7:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/E869880C500511EA98307A59C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:45:56 +0000
ROA not before: Mon 30 Jun 2025 19:54:54 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 136534
IP address blocks: 103.91.232.0/22 maxlen: 24
2401:1540::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.crl
rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:19:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2908 (0xb5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E832, serialNumber=203D1E2DA852BE5B643A99BEF564D774BDDCC7F4
Validity
Not Before: Jun 30 19:54:54 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a426f4-082a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:82:86:35:d5:24:f6:c5:74:99:1d:9a:b4:
8a:82:9b:07:8e:c9:2d:60:2c:fc:72:43:4f:b4:da:
6c:05:12:04:08:aa:d7:50:69:f3:20:9e:f3:5a:83:
06:73:ca:57:f8:08:ce:ca:74:17:41:45:34:b1:cc:
75:05:55:97:16:aa:1b:41:c8:f1:87:34:14:54:46:
05:bd:fb:7b:5a:58:15:76:d8:57:15:1a:82:89:3b:
2d:55:9d:a8:5e:63:25:8e:ad:cc:10:9a:20:ff:53:
f4:69:57:1f:86:de:26:af:70:02:0b:7a:30:e1:ea:
4a:f0:1b:f1:c5:e6:63:f2:f0:c4:48:7e:ea:fd:b4:
8b:a3:1a:a9:a6:4e:be:5e:9a:74:25:34:52:1d:56:
40:57:ff:a3:c7:53:82:9a:74:46:b6:de:5a:de:70:
56:7c:ea:a9:39:71:be:63:56:48:a3:d5:2b:ba:b9:
23:50:de:90:a1:d9:fb:ae:d7:70:0d:65:84:40:57:
e7:73:aa:bd:fd:c5:f5:de:d7:21:22:1c:5b:99:05:
b5:22:9d:8a:87:c1:53:3c:40:3b:16:f9:9b:54:72:
1e:2f:6b:7f:5f:37:3f:07:c3:2f:d1:a1:14:82:3b:
3f:46:07:2a:c2:ea:a9:03:86:fe:f3:92:95:95:59:
a0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3C:3F:17:62:08:7A:AB:23:34:61:5E:81:FC:6F:6B:4C:F4:F9:FE
X509v3 Authority Key Identifier:
keyid:20:3D:1E:2D:A8:52:BE:5B:64:3A:99:BE:F5:64:D7:74:BD:DC:C7:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/E869880C500511EA98307A59C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.91.232.0/22
IPv6:
2401:1540::/32
Signature Algorithm: sha256WithRSAEncryption
07:1d:ec:23:5b:e5:52:15:b1:ea:36:d8:ff:06:8b:19:18:db:
f1:be:20:ab:7c:4f:bd:61:7c:8d:45:60:f3:df:39:b3:0a:42:
64:1a:64:b0:32:19:99:4d:e4:8e:d7:75:51:28:86:4f:62:b5:
a8:ac:cd:d6:c0:c7:d2:55:ca:a7:f4:08:39:3f:e6:1f:cb:b2:
20:e2:81:b6:bc:0d:f4:fc:db:e2:ed:96:dd:b2:5b:d6:63:16:
b4:3b:1b:49:4f:22:27:e4:02:e6:ff:02:31:bb:7a:67:25:e4:
22:7c:2e:f2:82:ef:8a:68:f8:ee:07:94:ca:10:9a:35:17:13:
7a:85:90:44:da:5c:ad:15:f1:2c:51:00:fc:64:58:aa:f9:d6:
7e:de:d4:00:89:6d:ce:d3:7d:ea:08:15:2b:17:0c:f1:8f:20:
01:85:f6:e1:38:af:8d:e8:d5:6c:2b:34:18:ef:f2:4a:8e:46:
e7:3c:3f:92:f4:0f:47:76:1a:45:74:4d:f6:2f:f0:98:eb:7f:
a1:07:bc:f3:38:a9:2d:10:39:e1:42:d2:bc:e5:77:48:9c:07:
90:e4:52:80:28:9d:62:4c:d4:23:fe:d4:eb:f5:06:36:57:09:
f6:6a:6d:1a:e9:1a:c8:cb:ef:c6:09:7a:73:20:02:4c:a6:4d:
d8:7c:9d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:48:35 2026 by rpki-client