
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/5B5592F07B0711ED9D595969C4F9AE02.roa
File: 5B5592F07B0711ED9D595969C4F9AE02.roa (raw, json)
Hash identifier: Bv7FCEy1DuhQYtEp2itDznv/9h0ww6ROsc4RqG1d0DM=
Subject key identifier: DC:6F:BF:0E:30:83:5B:D6:4D:6D:1D:DB:1C:D3:FF:3C:49:FE:FE:F6
Certificate issuer: /CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77
Certificate serial: 0956
Authority key identifier: B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/5B5592F07B0711ED9D595969C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:51:54 +0000
ROA not before: Wed 30 Jul 2025 21:01:31 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 136429
IP address blocks: 103.152.106.0/24 maxlen: 24
103.152.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl
rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2390 (0x956)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EDAC, serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77
Validity
Not Before: Jul 30 21:01:31 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4285a-b6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c0:58:a8:c8:8a:16:05:a1:b3:52:d7:50:c1:
40:d3:54:45:7e:1b:db:42:86:75:15:a4:e9:5c:52:
8d:38:5c:18:0c:12:88:90:56:2f:08:a5:55:c5:f8:
51:87:7a:7a:7c:76:8a:12:af:e8:04:15:66:07:bf:
93:ab:0c:d0:72:a3:92:15:3c:2f:4b:81:25:ae:b8:
a6:80:9e:15:26:5c:d6:49:b2:ae:bf:3e:70:53:f4:
a1:be:5b:90:73:58:af:52:4c:7f:79:21:ee:ba:34:
26:6f:2d:a9:8f:33:c4:8b:e1:7f:db:b8:a9:e4:87:
94:be:89:39:04:4e:9a:7e:78:b1:04:af:6e:57:a0:
74:d3:c4:fc:80:66:fc:e2:ea:6f:64:48:37:5b:bb:
5f:3e:d3:d9:3f:f7:a2:63:70:9b:a1:1f:b3:0f:37:
fe:11:5f:01:2c:87:69:cf:7f:21:f4:32:b9:77:15:
fd:ed:d1:d7:73:c4:99:4c:0e:a3:16:da:ee:ed:4e:
90:1e:1c:b0:8e:fe:81:5a:82:78:e2:ec:44:3b:60:
bf:37:e6:f7:eb:77:b6:aa:d9:ac:ee:a6:eb:c6:14:
70:50:f6:62:e6:85:38:d7:37:3b:72:fc:9c:d5:d8:
d2:60:bd:f4:21:f5:be:d2:e1:ca:49:87:19:b0:fb:
74:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6F:BF:0E:30:83:5B:D6:4D:6D:1D:DB:1C:D3:FF:3C:49:FE:FE:F6
X509v3 Authority Key Identifier:
keyid:B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/5B5592F07B0711ED9D595969C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.152.106.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:ac:da:c1:2a:8e:60:a3:3e:fd:ac:7d:19:bb:d2:86:2b:97:
13:da:09:0f:bd:db:fd:82:ae:e8:b9:2a:b8:dc:cb:13:8f:9e:
78:08:5b:5a:f7:1e:20:e7:fa:01:22:ab:aa:21:ff:90:07:ca:
a8:39:8e:0b:53:6b:9c:68:d5:74:cd:f4:29:2a:41:4f:77:14:
b4:3c:8c:9a:9a:ae:bb:6a:83:54:70:cf:65:31:2c:ff:46:6b:
79:1d:e9:29:cb:a6:56:76:37:7c:ba:ae:be:30:4a:71:40:9c:
89:9f:f5:48:18:c0:3e:c5:9d:85:17:fc:90:e5:18:8f:7b:6a:
d5:d2:59:10:bb:69:5b:32:e1:6d:b3:85:48:67:fa:f1:dc:79:
3e:81:0a:20:41:56:24:a1:cc:04:19:56:75:3e:84:a0:98:33:
a0:55:5e:f0:5b:3a:69:2f:31:f8:62:9f:fd:a7:8e:72:fd:b3:
4e:6f:7b:63:6d:9d:ca:84:d9:d2:07:f0:4c:26:a4:fc:75:80:
20:a2:e3:38:d5:9c:39:72:2f:e5:56:07:6a:cd:95:0f:79:30:
65:be:b4:5d:4c:ef:37:0d:e2:1f:fc:f6:d5:01:a0:e0:79:cd:
5f:b9:d0:1c:3d:90:69:1a:d5:42:69:ad:8a:8e:45:12:b1:6b:
b8:7d:8a:89
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VEQUMxMTAvBgNVBAUTKEI2MzhCOUE5QkY3RTMwOEYxRkJBQ0YzQjRDM0E0NDU3
MUYyOURGNzcwHhcNMjUwNzMwMjEwMTMxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0Mjg1YS1iNmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6MBYqMiKFgWhs1LXUMFA01RFfhvbQoZ1FaTpXFKNOFwYDBKIkFYvCKVVxfhR
h3p6fHaKEq/oBBVmB7+TqwzQcqOSFTwvS4ElrrimgJ4VJlzWSbKuvz5wU/ShvluQ
c1ivUkx/eSHuujQmby2pjzPEi+F/27ip5IeUvok5BE6afnixBK9uV6B008T8gGb8
4upvZEg3W7tfPtPZP/eiY3CboR+zDzf+EV8BLIdpz38h9DK5dxX97dHXc8SZTA6j
Ftru7U6QHhywjv6BWoJ44uxEO2C/N+b363e2qtms7qbrxhRwUPZi5oU41zc7cvyc
1djSYL30IfW+0uHKSYcZsPt0BQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNxvvw4w
g1vWTW0d2xzT/zxJ/v72MB8GA1UdIwQYMBaAFLY4uam/fjCPH7rPO0w6RFcfKd93
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RURBQy81ODNBRjIwNEI1
MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1JOGZ1czg3VERwRVZ4OHAz
M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RqaTVxYjktTUk4ZnVzODdURHBFVng4cDMzYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VEQUMvNTgzQUYyMDRCNTA3MTFFQUJDQzg5NDBEQzRGOUFFMDIvNUI1NTkyRjA3
QjA3MTFFRDlENTk1OTY5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5hqMA0GCSqGSIb3DQEBCwUAA4IBAQBtrNrBKo5goz79rH0Zu9KG
K5cT2gkPvdv9gq7ouSq43MsTj554CFta9x4g5/oBIquqIf+QB8qoOY4LU2ucaNV0
zfQpKkFPdxS0PIyamq67aoNUcM9lMSz/Rmt5Hekpy6ZWdjd8uq6+MEpxQJyJn/VI
GMA+xZ2FF/yQ5RiPe2rV0lkQu2lbMuFts4VIZ/rx3Hk+gQogQVYkocwEGVZ1PoSg
mDOgVV7wWzppLzH4Yp/9p45y/bNOb3tjbZ3KhNnSB/BMJqT8dYAgouM41Zw5ci/l
VgdqzZUPeTBlvrRdTO83DeIf/PbVAaDgec1fudAcPZBpGtVCaa2KjkUSsWu4fYqJ
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:30:00 2026 by rpki-client