
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa
File: 73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa (raw, json)
Hash identifier: fZNOUj/iAXxAo54HM0txOio7TDOqa8olAoIhUWuhgT4=
Subject key identifier: FE:2B:5C:CD:40:3A:1C:3C:EE:E0:A1:57:AF:19:9C:A5:AE:AF:97:BD
Certificate issuer: /CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
Certificate serial: 0A27
Authority key identifier: 2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:31:17 +0000
ROA not before: Thu 10 Apr 2025 20:30:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40513
IP address blocks: 103.88.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl
rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:19:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2599 (0xa27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EC46, serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
Validity
Not Before: Apr 10 20:30:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a40765-c47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:2d:15:29:7a:b4:64:04:5a:2f:3d:b2:54:
ad:1a:6c:74:d1:e0:ff:94:5a:a5:35:62:85:40:b3:
03:76:c4:4f:fb:9b:6a:16:e7:41:e6:32:25:eb:1e:
ae:43:76:6e:c4:b1:b6:91:fc:8e:6a:4e:c2:7d:c0:
6c:f1:53:ec:0d:08:e4:bf:d7:ea:54:71:12:4b:33:
8d:42:e5:cb:a8:09:32:cf:89:92:c4:dc:ac:18:3e:
86:ce:24:74:9b:5d:47:81:b0:88:0b:c3:66:af:ec:
03:0b:80:32:34:43:03:23:2a:76:59:82:e5:25:63:
d5:cf:0b:5b:d3:ca:e4:24:2a:c2:67:a3:c6:1a:21:
bd:e0:ab:fa:50:af:9e:cf:37:fe:5b:bc:b2:b6:d3:
b4:c4:a9:ce:34:7b:1e:ac:4c:35:88:83:a8:3e:cc:
af:34:f2:f2:de:6c:00:4a:6f:9d:06:7b:9a:1a:cf:
a4:11:b7:9f:f7:d4:06:9b:ea:ee:1c:6a:31:5d:f8:
d2:ae:9b:69:a0:09:66:97:3d:b9:fb:b9:53:c7:da:
84:d5:60:b5:68:b9:cc:dc:d3:e1:dd:f3:a5:49:a9:
5b:1c:d5:c3:2f:2f:2a:a4:3f:78:e1:38:b0:55:28:
be:e6:d6:74:ad:65:c6:c3:8e:95:28:d0:18:7a:d6:
87:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2B:5C:CD:40:3A:1C:3C:EE:E0:A1:57:AF:19:9C:A5:AE:AF:97:BD
X509v3 Authority Key Identifier:
keyid:2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.88.43.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:85:3f:df:fd:28:fb:ac:d6:0c:d4:26:51:6d:5a:6b:15:fd:
d1:ef:0c:2d:80:f6:b7:7a:ed:2d:a9:0f:75:78:a1:3a:ea:8a:
07:6c:ef:10:01:38:52:f5:04:60:b5:6c:07:3d:ae:93:bd:dc:
46:32:1f:5d:be:4a:14:fd:32:b7:6f:fe:d2:7d:4c:69:4f:af:
6c:b2:5f:02:99:b4:36:12:e2:e5:12:78:18:cc:45:7a:c2:ef:
02:1d:69:84:54:33:b5:8e:0e:48:dd:41:ac:72:65:66:23:32:
b3:4c:e0:1c:d0:21:95:5b:a0:d0:5c:e1:40:56:8c:db:50:63:
5c:f5:6f:9d:91:35:c3:6d:4f:87:5d:02:b8:ba:ea:e5:65:7b:
ac:61:cc:7a:c0:eb:99:2a:27:f2:3c:ec:5f:90:45:c2:5c:56:
f1:c4:62:3f:d4:65:7d:96:d2:67:a9:4e:72:cf:2a:20:86:94:
68:f4:d5:59:95:f7:99:1f:6d:2b:de:67:ea:a8:38:fe:fe:a0:
a1:5b:6e:e2:03:81:ca:db:0d:59:81:76:e6:7d:39:5d:49:16:
84:54:0b:70:bc:90:68:64:c1:f8:da:71:16:a4:f7:37:09:c9:
ce:26:79:03:89:ca:13:90:bb:3c:f2:30:21:f6:4f:00:89:a5:
76:5d:e5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:51 2026 by rpki-client