
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/5DC57C34693911F18A70725D6747A888.roa
File: 5DC57C34693911F18A70725D6747A888.roa (raw, json)
Hash identifier: 8AVzqYtNr+IhLlpD+hpOxigD0/VLIZe5PV8ElncI/tU=
Subject key identifier: CE:2D:F3:AD:CD:3B:5F:3F:0A:F5:CA:FB:D0:99:65:09:8C:47:7D:47
Certificate issuer: /CN=A9154840/serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62
Certificate serial: 0149
Authority key identifier: 9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/5DC57C34693911F18A70725D6747A888.roa
Signing time: Tue 16 Jun 2026 04:10:53 +0000
ROA not before: Tue 16 Jun 2026 04:10:53 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 151634
IP address blocks: 103.168.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl
rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 05:47:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154840, serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62
Validity
Not Before: Jun 16 04:10:53 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a30cccd-1930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:46:f8:3c:dd:3d:7b:15:28:e2:64:58:b9:c9:
96:03:f5:2a:ef:a1:3d:11:8b:91:e2:21:f3:ec:64:
6e:1c:8a:52:81:a2:2c:fb:ca:14:b9:85:51:c1:62:
db:ab:a4:6b:b2:f8:6b:5d:d3:ef:33:e7:fd:c2:85:
49:19:82:6b:12:e5:d2:80:91:19:67:85:b5:c8:d2:
81:80:b1:7e:72:bc:97:b3:ef:32:7c:83:a2:7d:a3:
43:fe:a1:12:cb:24:ea:30:f3:d5:9c:e1:a7:10:83:
03:9c:5f:1a:92:52:c0:5d:c4:93:5f:f7:0b:c2:7a:
9b:6b:aa:bf:09:4c:55:b5:69:ca:b2:f7:23:cd:ab:
26:ff:41:9f:df:70:40:ce:2d:d3:b4:78:fb:53:3f:
6c:c8:f7:5f:30:01:4a:f3:dc:9b:06:fd:16:f5:0c:
3b:f3:be:65:64:9b:24:e3:df:85:03:ca:4c:f9:04:
90:83:88:c0:e5:3a:d5:49:24:78:c3:33:30:cf:68:
98:45:9c:25:98:41:87:0d:9a:2f:2c:8d:26:28:5e:
22:40:a1:cf:be:21:bc:8f:90:cb:15:6c:87:95:03:
af:59:fb:61:b1:16:c2:a1:4f:67:56:89:d0:8b:6c:
71:8b:ad:2b:d0:e0:e1:47:0f:96:80:29:e8:1f:a2:
e8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2D:F3:AD:CD:3B:5F:3F:0A:F5:CA:FB:D0:99:65:09:8C:47:7D:47
X509v3 Authority Key Identifier:
keyid:9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/5DC57C34693911F18A70725D6747A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.168.43.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:48:ef:64:e0:0d:23:6f:4a:7c:fd:d1:98:34:95:fc:2b:ba:
2b:f9:5a:8f:eb:7d:26:88:a0:fd:40:dd:69:46:24:e1:92:a7:
ac:c3:6a:f7:98:26:da:29:5c:64:72:cd:25:12:ab:3b:14:68:
df:20:9c:dc:80:a4:00:0b:bd:fa:d3:b0:2e:6f:27:29:f4:e7:
d5:dc:69:84:26:60:86:9f:bc:1c:42:42:eb:6e:b1:0f:56:78:
3a:6c:a3:f2:75:4a:25:c0:06:33:59:3c:cd:b1:a6:7c:31:41:
9e:e3:49:bc:99:66:0f:e0:4d:6c:43:74:d4:a4:c2:cc:74:70:
66:65:a3:32:ed:80:1f:67:6d:8a:e9:3f:9e:f7:05:95:25:67:
50:ac:c3:4e:98:75:3e:a6:6a:c0:b7:b5:44:e4:1c:c2:f4:de:
4f:96:f3:e0:6b:d3:56:32:83:a8:1b:80:8b:71:c2:42:08:00:
bf:c3:8f:27:ec:48:92:b8:01:7f:c2:a5:03:1d:a9:02:a6:aa:
29:e4:b9:0b:eb:1f:fb:86:87:de:06:75:b3:c4:d3:1b:7d:99:
cc:34:6d:45:82:0d:a9:86:a0:f8:c9:91:56:18:a9:39:e3:77:
c2:88:ee:7f:6d:16:ec:bf:8e:f6:4c:ca:1d:da:41:0a:35:1a:
19:76:08:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:31:23 2026 by rpki-client