
$ rpki-client -vvf rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/DC158E965F1411F1B3CEADAF84EE528E.roa
File: DC158E965F1411F1B3CEADAF84EE528E.roa (raw, json)
Hash identifier: uMaazjc7ti/l1Z1a0OqAz7ZZ+wEFluxU9ZV5vCJwJl8=
Subject key identifier: 8A:F7:AB:77:1A:C7:DB:2F:58:EA:3B:E9:1D:8F:83:17:CC:07:A2:E2
Certificate issuer: /CN=A917638D/serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6
Certificate serial: 0A36
Authority key identifier: F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/DC158E965F1411F1B3CEADAF84EE528E.roa
Signing time: Thu 04 Jun 2026 20:24:31 +0000
ROA not before: Thu 04 Jun 2026 20:24:31 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 140594
IP address blocks: 103.150.206.0/23 maxlen: 23
103.150.206.0/24 maxlen: 24
103.150.207.0/24 maxlen: 24
2001:df3:8a80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl
rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 20:24:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2614 (0xa36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917638D, serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6
Validity
Not Before: Jun 4 20:24:31 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a21deff-4f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:8e:82:df:35:8a:c7:81:80:a2:49:0b:39:
a4:7b:88:bd:d8:90:47:87:04:80:a4:32:17:2d:a2:
e5:96:8e:e5:a9:a1:be:b7:da:49:0d:cf:0d:ce:44:
71:c8:76:4a:7a:67:05:5b:aa:e1:cb:26:bc:43:51:
63:93:d4:f2:05:3c:b4:7b:dd:8f:0e:df:0f:53:b0:
1f:c7:6d:f2:c3:93:4a:35:d4:d5:14:75:15:01:cb:
1e:2c:cb:ac:02:e2:50:30:20:85:d6:b0:fa:33:78:
8f:6c:48:6e:70:cf:3f:6e:58:64:68:f1:0a:0a:65:
1d:f1:d4:3c:5c:b6:e7:48:ba:a2:74:8e:03:f4:d1:
2d:ff:56:ba:62:56:a2:3b:aa:a4:bc:8e:50:e3:3d:
8f:62:f0:bb:f5:08:c1:46:be:8f:8d:c0:ca:c0:49:
ee:60:90:6f:31:fb:f1:68:19:57:a7:91:a3:46:0a:
74:32:25:a0:ab:99:0a:69:0f:7d:ba:8f:34:b5:39:
42:a5:32:6c:e5:59:d5:70:fb:e0:71:12:73:14:24:
c2:5e:89:e2:8c:95:8f:8c:2c:86:58:91:d7:79:a1:
b3:9d:67:d0:01:36:cc:7f:0b:ee:2b:e6:9c:83:f2:
55:18:05:5c:45:e9:e0:6f:b5:6d:0d:a9:e3:cc:ef:
0c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F7:AB:77:1A:C7:DB:2F:58:EA:3B:E9:1D:8F:83:17:CC:07:A2:E2
X509v3 Authority Key Identifier:
keyid:F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/DC158E965F1411F1B3CEADAF84EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
103.150.206.0/23
IPv6:
2001:df3:8a80::/48
Signature Algorithm: sha256WithRSAEncryption
b6:11:f1:eb:9d:c6:40:1f:af:d0:97:4a:35:c7:6f:02:8e:e9:
1e:9c:0f:43:b8:3c:5f:c8:ca:d2:5a:77:b5:38:12:e8:16:90:
be:a4:da:d6:48:2c:bc:d3:95:be:da:b4:47:6b:09:0a:f1:17:
4b:09:90:e8:72:b0:d1:58:30:87:bf:0d:72:f2:ad:73:ea:73:
85:7d:f9:8f:47:ef:80:f8:67:9d:21:40:50:e8:27:37:a4:66:
17:6c:f0:ec:60:f5:aa:ce:a4:f6:46:a3:38:0b:5d:fe:c5:ff:
f0:21:72:e9:8c:3c:52:1c:b8:29:30:91:63:f7:7c:0d:58:41:
53:ea:0e:ed:3b:0f:3e:06:96:48:11:08:7f:f8:99:c3:40:a2:
92:04:b7:96:d7:32:be:20:aa:27:94:2d:ed:58:0f:61:8f:3f:
03:27:78:f2:ce:db:50:bf:29:7a:7e:5e:b0:2f:e1:fc:e1:31:
f6:f1:e0:5d:c3:ba:5a:73:a3:04:47:1d:d9:ad:89:4c:10:29:
e2:89:80:7a:70:14:e6:cf:8b:b9:65:28:9a:d2:26:b3:2a:47:
b3:4a:62:3d:9d:45:f9:8a:19:63:dc:73:bd:80:bc:87:26:f7:
57:22:f5:04:ef:a8:9d:e9:0c:24:2f:a5:36:d6:a4:7f:18:bb:
5b:9a:7d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 20:31:36 2026 by rpki-client