
$ rpki-client -vvf rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/E82DE3C290AB11ECAB81252FC4F9AE02.roa
File: E82DE3C290AB11ECAB81252FC4F9AE02.roa (raw, json)
Hash identifier: PglW3T12IKlMircnLLUZ33j6kRlzVW56A2kCHbmh2rY=
Subject key identifier: DB:19:6A:F1:1B:E2:B1:F8:37:1F:A4:CA:D1:8D:67:A1:FC:ED:B8:BF
Certificate issuer: /CN=A917991B/serialNumber=89A197D097689C6EB33867A9CC8ACCD7FB364E89
Certificate serial: 0520
Authority key identifier: 89:A1:97:D0:97:68:9C:6E:B3:38:67:A9:CC:8A:CC:D7:FB:36:4E:89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/E82DE3C290AB11ECAB81252FC4F9AE02.roa
Signing time: Fri 17 Jul 2026 07:01:59 +0000
ROA not before: Fri 17 Jul 2026 07:01:58 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 148968
IP address blocks: 103.48.214.0/23 maxlen: 24
103.174.228.0/23 maxlen: 24
202.130.206.0/24 maxlen: 24
203.12.29.0/24 maxlen: 24
2001:df7:d980::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.crl
rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1312 (0x520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917991B, serialNumber=89A197D097689C6EB33867A9CC8ACCD7FB364E89
Validity
Not Before: Jul 17 07:01:58 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a59d366-2f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6a:d8:9c:89:27:2d:00:b2:0f:d1:e7:60:a2:
5c:a3:e5:d9:a3:ac:3f:22:8c:08:72:0e:6d:6b:d3:
b0:15:8a:e8:1d:e4:69:9f:a4:f9:fb:44:61:04:4f:
4b:0d:1b:38:04:df:63:ed:60:da:85:c2:f9:8b:3a:
44:43:c5:cb:20:68:59:39:56:c2:4f:cf:aa:cc:00:
a7:62:a1:5a:42:c4:ae:9e:6a:96:5f:97:87:f5:c4:
77:0c:a2:16:04:fe:d8:23:d5:0a:1e:0c:ea:78:0f:
09:d6:bd:ba:89:cc:43:69:d0:43:e7:38:18:3d:79:
ea:19:37:d6:b0:2e:1f:cb:69:b9:aa:c0:fa:cc:3f:
9b:42:e5:5e:e8:d1:b6:ae:e7:81:9e:56:cc:a0:0f:
00:46:7a:bc:2d:34:1f:5f:f9:b0:5e:c2:40:1b:b5:
90:16:b3:06:4b:f7:f6:0d:5f:08:2e:77:b2:2f:6d:
42:b1:51:5d:0e:dc:d8:b6:b8:93:76:af:35:b7:f4:
4a:46:95:cf:01:da:d6:aa:d7:9a:09:b1:76:e6:22:
23:6a:32:e7:c1:45:a5:4e:6a:95:8c:c1:8f:2d:70:
ed:68:f6:11:5b:05:71:45:cc:f1:43:d6:ae:b2:d0:
04:7e:de:1c:15:07:60:7f:77:51:aa:0f:6b:9b:d1:
94:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:19:6A:F1:1B:E2:B1:F8:37:1F:A4:CA:D1:8D:67:A1:FC:ED:B8:BF
X509v3 Authority Key Identifier:
keyid:89:A1:97:D0:97:68:9C:6E:B3:38:67:A9:CC:8A:CC:D7:FB:36:4E:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/E82DE3C290AB11ECAB81252FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.48.214.0/23
103.174.228.0/23
202.130.206.0/24
203.12.29.0/24
IPv6:
2001:df7:d980::/48
Signature Algorithm: sha256WithRSAEncryption
92:f8:2a:5e:bd:51:36:07:ab:31:c6:46:b9:45:a7:54:89:b8:
a5:8f:d7:06:81:3c:49:e3:6d:5d:3d:90:8b:cc:20:e8:80:e6:
fb:f5:9e:dc:ed:83:ab:b6:a3:c4:50:f6:f4:54:97:7b:df:a3:
f1:21:61:28:32:4a:06:1a:ca:cc:2c:63:13:94:44:78:86:bb:
9f:79:b4:b4:59:99:45:a3:5a:28:ff:b1:8b:99:c3:49:86:fe:
8b:36:ae:1a:94:f6:a0:2b:98:ac:4a:64:5b:11:df:3c:9c:20:
bd:6e:da:f2:c1:96:18:e3:13:e8:9e:35:0f:7a:13:bf:4b:fb:
69:de:55:01:27:cb:7e:83:97:58:ca:53:27:8a:ae:d1:59:ee:
3a:b7:3f:cd:41:6a:78:23:99:86:75:aa:de:a6:03:9c:f7:0a:
bd:a9:ec:76:22:3e:45:7e:e6:67:c4:f4:64:c4:68:b1:ad:63:
13:10:39:f1:a2:50:79:64:cd:db:d4:c5:2d:f2:bb:75:2d:52:
11:a0:8d:67:68:2d:33:e1:c1:b4:cf:55:63:df:3c:1b:c7:5e:
b0:2c:4a:02:29:54:be:00:a4:09:01:25:13:8d:56:70:10:29:
91:0c:0a:91:ea:d3:68:ab:99:0e:72:e8:8d:d0:14:6d:75:be:
96:19:ef:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:20:54 2026 by rpki-client