
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/0DA87EBE304D11ED8FBD3039C4F9AE02.roa
File: 0DA87EBE304D11ED8FBD3039C4F9AE02.roa (raw, json)
Hash identifier: BJY58qZc0i+wZLu/fB4hkcMgswizYyLDZ/lfOjogPPk=
Subject key identifier: 37:43:73:80:95:48:33:C2:1A:6A:2A:3E:89:F3:34:7C:81:BF:3A:56
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 11AA
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/0DA87EBE304D11ED8FBD3039C4F9AE02.roa
Signing time: Fri 22 May 2026 20:28:38 +0000
ROA not before: Fri 22 May 2026 20:28:38 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 979
IP address blocks: 103.150.214.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:38:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4522 (0x11aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:28:38 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bc76-084c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4d:c3:12:15:f9:98:e3:6a:ad:74:ca:02:dd:
cf:0d:10:01:48:08:8f:a6:02:eb:49:af:74:6d:ea:
04:b1:82:94:c6:f3:06:88:53:40:32:62:51:69:1e:
16:79:c8:e5:fe:3e:d4:90:38:15:60:ba:cf:ba:eb:
83:b5:16:7f:d1:b7:63:05:0a:f3:90:36:9c:8c:72:
3d:04:59:bd:65:59:c7:4f:e8:6b:f5:38:30:e3:a6:
69:bf:1e:1a:32:78:54:09:3a:72:6f:02:2c:0e:45:
df:db:b5:ad:44:28:98:7f:eb:4c:8a:05:7d:31:8c:
45:97:a6:08:48:4a:ae:ba:08:2d:d5:78:db:48:fb:
00:ea:41:cf:96:c9:d6:00:a8:70:e7:ce:ce:35:11:
ce:9d:ad:5d:70:bc:ef:8d:b9:cb:b6:87:ac:95:ec:
88:c7:bb:05:cf:de:74:f9:54:15:ed:a3:53:ce:3e:
da:15:7d:e1:cc:de:04:39:06:84:50:bc:07:db:e1:
fb:58:4c:77:4a:4d:85:52:19:0e:10:4b:8d:16:8c:
f0:7b:0f:34:75:38:b8:2f:17:86:4a:ef:06:bc:44:
05:c8:9e:38:97:22:ac:68:24:11:0c:16:ea:82:85:
9d:22:f6:5c:60:e2:0b:d0:5c:2a:14:96:87:52:21:
b7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:43:73:80:95:48:33:C2:1A:6A:2A:3E:89:F3:34:7C:81:BF:3A:56
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/0DA87EBE304D11ED8FBD3039C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.150.214.0/23
Signature Algorithm: sha256WithRSAEncryption
50:b2:21:4a:a4:fa:18:ea:4f:e7:eb:59:86:74:f4:f8:b6:ad:
c9:50:2c:46:21:a7:7b:a0:30:8a:a8:8b:e4:a7:55:d1:fc:89:
7f:91:d5:ac:49:77:7d:95:28:f6:4e:91:33:6a:9a:0b:8f:9f:
1a:32:86:46:79:c8:8f:5f:9e:91:4c:99:55:58:4e:8f:95:55:
31:06:59:e0:40:82:ca:47:b1:95:f8:63:54:4d:9e:3d:fa:61:
6b:e3:ca:4d:16:68:32:39:b1:61:79:1a:c2:ba:56:24:93:79:
53:69:b5:b3:a3:f1:1f:26:cf:11:c4:a1:c8:d8:16:55:ad:09:
a8:31:08:f9:d9:84:6c:5e:4f:bb:4e:b3:3d:c3:9b:05:f4:95:
eb:86:39:ad:86:40:01:de:24:4e:7b:ea:31:0e:64:e2:66:a9:
be:7b:31:ed:5e:59:d9:3e:58:07:03:2f:a5:d6:12:d4:b5:f2:
4e:26:d9:eb:3c:c3:3c:3e:c9:8a:c7:dd:0c:1f:a1:dc:67:46:
2e:34:d8:fd:10:93:80:c3:89:61:12:bb:da:ca:97:c6:78:b9:
08:d4:1d:2e:08:c4:7d:c6:f3:66:4e:89:4f:cc:d0:5f:91:c3:
f5:cc:4b:ed:c0:ce:25:e5:1d:54:e8:f8:46:89:14:2a:fc:cb:
81:f8:7e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:09:24 2026 by rpki-client