
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/AEF7F896B23511EF99CCD73DC4F9AE02.roa
File: AEF7F896B23511EF99CCD73DC4F9AE02.roa (raw, json)
Hash identifier: PC9A/wN78/m5hkQIoyPN7PzUs869VkeVXqkOIXy5YDs=
Subject key identifier: 25:8F:D9:82:57:9F:64:47:F4:24:7C:38:C1:67:FC:1A:2E:C2:21:07
Certificate issuer: /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial: 041B
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/AEF7F896B23511EF99CCD73DC4F9AE02.roa
Signing time: Wed 05 Aug 2026 01:49:34 +0000
ROA not before: Wed 05 Aug 2026 01:49:34 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 395793
IP address blocks: 103.189.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 08 Sep 2026 00:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1051 (0x41b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917315B, serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Validity
Not Before: Aug 5 01:49:34 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a7296ae-7d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:bd:ef:c4:ce:94:45:7b:50:16:c1:ba:c1:
54:95:5c:26:bd:35:e8:5b:66:06:d6:ce:ef:4e:62:
17:1f:b1:c7:14:cf:cb:55:c2:f4:e4:f3:0a:59:a8:
b0:ab:e8:d9:de:3f:50:f5:e1:f2:24:51:6b:6a:d0:
2d:04:ac:ac:0f:96:ce:9c:cd:62:f9:fa:f6:32:ef:
ec:a6:aa:f5:cd:25:f1:94:97:25:2e:26:73:97:81:
40:98:ae:5c:f2:de:1b:d8:3b:53:fe:0e:9b:91:6f:
d7:39:8c:9d:49:ff:c1:c4:28:3e:5c:e1:9a:1a:9b:
59:6c:df:60:80:4b:cc:b9:95:ee:77:1f:a4:c4:93:
a3:3f:f5:4d:19:0d:74:73:5d:d7:75:80:b2:e3:ce:
27:2a:1a:0a:3b:66:bb:30:01:e5:36:ca:36:24:ad:
f1:27:2b:93:29:d6:05:33:15:23:9c:ce:1f:6f:61:
52:74:09:32:8c:17:92:64:1a:c4:0b:42:30:df:7d:
2a:3d:3b:a2:f7:5a:e0:bb:3f:fd:49:1d:2e:59:f4:
63:5e:99:54:53:e9:6d:53:2e:d8:51:e6:45:ff:c4:
3d:f2:90:9e:db:a1:64:4d:57:f0:f9:92:e7:18:c8:
fa:c7:35:82:16:5a:06:27:b2:62:18:47:ee:6e:2e:
a1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8F:D9:82:57:9F:64:47:F4:24:7C:38:C1:67:FC:1A:2E:C2:21:07
X509v3 Authority Key Identifier:
keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/AEF7F896B23511EF99CCD73DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.189.190.0/24
Signature Algorithm: sha256WithRSAEncryption
84:31:97:8f:fc:da:22:b9:f4:23:9b:ef:0e:65:9f:cc:2e:2a:
02:ae:06:69:53:3d:a7:14:1a:15:ac:e1:23:12:dd:6d:6d:24:
1d:a6:19:61:fb:60:1e:4f:5b:4a:db:db:26:71:aa:40:6c:70:
15:f7:a9:eb:3d:7e:a4:41:23:a9:e9:73:1a:b2:53:23:92:0a:
62:50:ed:30:65:fc:cf:98:bb:62:d2:37:d4:27:9b:73:22:ea:
cd:56:3d:2b:9d:80:ec:2d:10:59:0a:ec:15:91:c8:87:fb:67:
04:b7:a0:b8:70:87:fa:57:fa:30:c3:28:e5:5f:c9:86:3c:50:
64:0c:b1:99:8c:c3:03:b5:a0:82:41:5e:aa:0c:ba:2f:bc:07:
d1:5e:50:e3:fe:25:ab:27:2a:52:a7:98:b6:6c:b4:f0:cb:df:
e4:4e:ab:33:a2:c2:45:46:02:50:fc:42:f1:1c:36:e6:8a:7f:
18:9b:68:e5:28:7b:00:ae:89:09:20:2c:ab:01:3f:7a:ed:88:
de:60:27:00:1a:63:e5:f3:9c:76:5c:72:74:d3:5e:8f:84:08:
92:f0:44:3e:bc:8e:e7:14:d7:d5:c6:44:41:6a:0d:13:f5:da:
5b:cf:d3:e8:a9:00:b4:86:a1:a9:d1:e5:18:24:ac:48:27:de:
f2:f5:c1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:09:29 2026 by rpki-client