
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/99DA0A4C533C11EF92170913C4F9AE02.roa
File: 99DA0A4C533C11EF92170913C4F9AE02.roa (raw, json)
Hash identifier: Aj1fD2njgxaaCMrLDUOZ4SGm3Hvt63qneYMFP6GWOAI=
Subject key identifier: 87:42:9F:57:B2:1A:65:B0:78:30:92:17:67:F0:D4:66:9B:D6:23:53
Certificate issuer: /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5
Certificate serial: 02B6
Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/99DA0A4C533C11EF92170913C4F9AE02.roa
Signing time: Thu 09 Jul 2026 04:31:13 +0000
ROA not before: Thu 09 Jul 2026 04:31:13 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 61112
IP address blocks: 103.158.116.0/24 maxlen: 24
103.158.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl
rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 03:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694 (0x2b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BEA7, serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5
Validity
Not Before: Jul 9 04:31:13 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4f2411-778c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:23:4e:98:0b:bf:ff:8b:3c:c7:e4:4a:b2:
4f:2a:bc:a6:7f:6c:42:27:8a:fc:8c:50:83:71:cc:
51:98:27:de:d4:88:d2:40:9f:84:8d:ae:77:18:d1:
c5:11:2c:fa:1c:78:8b:37:19:6a:d0:9c:dd:53:30:
db:4c:b7:fb:11:f4:9c:4e:cb:4c:9a:4f:36:16:22:
89:7f:45:50:9d:95:13:b0:a5:a6:da:7a:1d:de:59:
bb:d8:29:6f:c6:38:7c:5c:0c:b6:2e:9c:71:97:f2:
13:75:a7:02:74:9a:b4:9c:76:f6:99:58:4e:17:80:
bc:3b:ef:21:69:ce:a8:05:71:43:24:41:34:84:c8:
eb:18:01:14:f8:4c:7f:c7:ad:42:39:68:bc:7f:17:
c4:91:21:51:95:c3:bb:c5:32:7a:0f:c3:b2:68:d4:
a9:7a:3d:39:69:3e:28:d9:80:68:9b:65:f0:06:e6:
39:e7:44:d5:f5:de:15:48:bf:d4:fe:50:f5:0f:78:
cb:67:59:4b:7f:17:d1:ff:cd:fa:3f:60:7c:35:36:
01:1e:1d:dc:ec:ca:66:f1:0a:c1:f8:2c:70:cd:ed:
4a:70:8c:43:43:40:6f:8c:c6:0a:f1:23:56:fe:a0:
ef:91:4d:7b:61:52:b4:42:a7:9a:75:14:f0:d3:7f:
e4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:42:9F:57:B2:1A:65:B0:78:30:92:17:67:F0:D4:66:9B:D6:23:53
X509v3 Authority Key Identifier:
keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/99DA0A4C533C11EF92170913C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.158.116.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:cd:27:72:8e:df:55:e3:bd:2f:fe:b7:31:a7:aa:9b:ac:5b:
65:32:8a:ea:87:f1:96:e6:b3:d6:56:97:85:60:63:c3:f7:78:
aa:f3:f2:07:d5:24:58:b7:92:84:f1:cd:c0:d9:95:c6:53:fc:
df:d3:46:02:7e:b8:bf:0b:5c:42:a5:0c:ce:59:f5:74:b1:06:
f9:2a:b6:12:5f:94:7f:85:fd:89:6c:57:80:c6:a6:72:16:c2:
bc:a3:12:05:da:f5:e8:fc:a5:4a:79:b2:3b:3b:81:41:6a:14:
86:d4:7b:ae:54:86:ac:7a:74:0d:00:0f:fb:2e:cd:d9:25:61:
88:64:11:8c:bb:ff:44:ce:7b:24:9d:fb:fb:5c:94:37:07:7c:
cd:f0:cb:bb:64:fd:7e:9c:c4:99:f8:2b:20:27:23:af:2b:b3:
02:9a:58:36:db:79:16:a4:6f:40:5f:dc:12:42:2b:c1:aa:55:
56:16:b1:79:02:4c:3c:0c:2c:29:f0:2a:1c:97:4c:51:9d:b5:
e3:ad:bc:66:dd:52:5f:a9:1f:2c:03:08:23:25:25:47:70:00:
86:ac:9c:22:b2:2b:13:86:10:99:2b:01:a2:0d:5d:b9:0b:3c:
76:aa:de:a5:4d:0a:6b:13:7d:9a:4a:3b:2b:17:b8:c1:38:94:
38:29:fc:f1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICArYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0JFQTcxMTAvBgNVBAUTKDBCOEQ2MzhGRkQzOEIxRjc3RTQ4RTFCQjVERjI5OTI5
Q0U3RDc4QjUwHhcNMjYwNzA5MDQzMTEzWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRmMjQxMS03NzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuzojTpgLv/+LPMfkSrJPKrymf2xCJ4r8jFCDccxRmCfe1IjSQJ+Eja53GNHF
ESz6HHiLNxlq0JzdUzDbTLf7EfScTstMmk82FiKJf0VQnZUTsKWm2nod3lm72Clv
xjh8XAy2Lpxxl/ITdacCdJq0nHb2mVhOF4C8O+8hac6oBXFDJEE0hMjrGAEU+Ex/
x61COWi8fxfEkSFRlcO7xTJ6D8OyaNSpej05aT4o2YBom2XwBuY550TV9d4VSL/U
/lD1D3jLZ1lLfxfR/836P2B8NTYBHh3c7Mpm8QrB+Cxwze1KcIxDQ0BvjMYK8SNW
/qDvkU17YVK0QqeadRTw03/k4wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIdCn1ey
GmWweDCSF2fw1Gab1iNTMB8GA1UdIwQYMBaAFAuNY4/9OLH3fkjhu13ymSnOfXi1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVBNy8wNDRGNjQ0ODEx
NjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNmZC1TT0c3WGZLWktjNTll
TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0M0MWpqXzA0c2ZkLVNPRzdYZktaS2M1OWVMVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0JFQTcvMDQ0RjY0NDgxMTY4MTFFRUFDNjNDMjM0QzRGOUFFMDIvOTlEQTBBNEM1
MzNDMTFFRjkyMTcwOTEzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ550MA0GCSqGSIb3DQEBCwUAA4IBAQA/zSdyjt9V470v/rcxp6qb
rFtlMorqh/GW5rPWVpeFYGPD93iq8/IH1SRYt5KE8c3A2ZXGU/zf00YCfri/C1xC
pQzOWfV0sQb5KrYSX5R/hf2JbFeAxqZyFsK8oxIF2vXo/KVKebI7O4FBahSG1Huu
VIasenQNAA/7Ls3ZJWGIZBGMu/9Eznsknfv7XJQ3B3zN8Mu7ZP1+nMSZ+CsgJyOv
K7MCmlg223kWpG9AX9wSQivBqlVWFrF5Akw8DCwp8Cocl0xRnbXjrbxm3VJfqR8s
AwgjJSVHcACGrJwisisThhCZKwGiDV25Czx2qt6lTQprE32aSjsrF7jBOJQ4Kfzx
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:01:47 2026 by rpki-client