
$ rpki-client -vvf rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0E17B1AE78F511EC83E56014C4F9AE02.roa
File: 0E17B1AE78F511EC83E56014C4F9AE02.roa (raw, json)
Hash identifier: W4h7IWYUmM/hyejWwAL7UxMd6DDsYA0doq+8X7am/ms=
Subject key identifier: C5:4B:44:AC:9F:2B:AD:EE:AA:2A:21:6E:75:DC:54:BF:9F:D2:1C:0C
Certificate issuer: /CN=A919608D/serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9
Certificate serial: 116E
Authority key identifier: D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0E17B1AE78F511EC83E56014C4F9AE02.roa
Signing time: Tue 31 Mar 2026 17:22:11 +0000
ROA not before: Tue 31 Mar 2026 17:22:11 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 136003
IP address blocks: 103.134.36.0/23 maxlen: 23
103.134.36.0/24 maxlen: 24
103.134.37.0/24 maxlen: 24
2404:5c40::/32 maxlen: 32
2404:5c40::/48 maxlen: 48
2404:5c40:1::/48 maxlen: 48
2404:5c40:2::/48 maxlen: 48
2404:5c40:3::/48 maxlen: 48
2404:5c40:4::/48 maxlen: 48
2404:5c40:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl
rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:09:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4462 (0x116e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919608D, serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9
Validity
Not Before: Mar 31 17:22:11 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69cc02c3-6292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:48:6e:c7:f0:c9:ac:89:96:80:e5:93:2f:d7:
07:a4:ab:00:47:5a:2b:f6:f7:4f:3a:51:08:14:7f:
93:56:b9:08:cb:e2:7a:70:ce:c9:dd:9a:df:fd:2a:
b2:dc:d1:65:8d:51:56:eb:bb:e6:a2:cb:32:1c:de:
e3:e7:be:77:39:fc:15:9c:0b:c4:4e:96:85:72:51:
b5:09:aa:53:11:f5:fe:a1:f7:7e:ef:61:c9:0c:78:
66:96:d3:29:51:04:c4:f8:67:8a:7f:48:e1:80:0c:
54:0b:cb:d8:60:40:d9:cc:9a:19:d4:52:c0:eb:12:
a4:38:35:6b:d3:5d:59:36:57:ce:f0:92:86:8e:45:
ef:b5:a6:6e:d6:6a:9e:e6:91:48:cd:4d:dd:e8:67:
57:62:74:2d:d7:db:50:5d:01:df:4c:38:48:2f:65:
b3:c7:46:70:6f:33:6a:9a:0f:49:04:c1:4c:5e:e9:
8e:20:7b:77:7b:1f:88:05:79:a8:83:5d:d3:d1:ef:
06:ad:cb:1c:47:7e:16:e2:0f:70:85:11:fa:85:1b:
a9:7c:ab:90:72:6c:09:8e:e3:5d:48:26:ad:dc:fa:
21:12:4f:d5:a2:e2:19:c7:e8:90:dc:f0:5c:05:11:
9a:98:a2:b8:dc:5d:d5:f9:bb:b7:26:a8:d9:3e:cb:
7e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4B:44:AC:9F:2B:AD:EE:AA:2A:21:6E:75:DC:54:BF:9F:D2:1C:0C
X509v3 Authority Key Identifier:
keyid:D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0E17B1AE78F511EC83E56014C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.134.36.0/23
IPv6:
2404:5c40::/32
Signature Algorithm: sha256WithRSAEncryption
b4:e6:6e:74:68:ff:ef:fb:ff:d4:8c:43:f0:aa:c8:c0:f7:35:
bc:1a:2f:63:85:04:6a:b7:16:90:ec:98:a9:71:7c:10:cb:60:
62:41:aa:8b:40:94:35:5c:10:c4:e3:38:82:98:f2:9c:d1:26:
a4:98:c0:f7:88:c2:fb:d9:12:5a:0d:fc:d8:f4:cb:29:a4:ab:
98:aa:e1:f4:0e:49:97:89:39:82:ba:c2:08:77:1f:4c:fb:49:
da:48:f6:3c:d1:5a:b0:84:07:a4:54:7e:ee:62:61:d8:08:e3:
f3:db:63:1f:ad:19:98:7e:b7:1a:85:b8:23:d8:51:b6:bc:41:
48:88:30:a6:b9:e4:5a:d4:ae:39:9c:b5:19:55:3c:96:04:4c:
eb:ee:2b:76:d4:4e:05:c3:f7:cc:ff:c8:3a:b8:10:a3:5b:c1:
7e:25:a8:c9:dd:c3:8b:b5:90:23:8a:1f:e0:de:3a:f3:e4:bf:
35:ed:b9:11:a7:ba:30:e0:dd:90:f5:c4:8b:59:66:f3:22:a9:
a8:37:78:48:09:63:81:61:57:16:09:e2:d2:17:64:ce:7b:64:
81:6c:fe:5c:47:b5:73:74:8b:fd:f4:ff:e8:8a:c9:bc:33:d3:
78:b5:22:12:96:4a:73:0d:ca:30:3e:5e:24:e0:9f:b6:a1:72:
56:1e:2c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:03:54 2026 by rpki-client