
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/EA5EB99CEBBD11ECB3DAFE39C4F9AE02.roa
File: EA5EB99CEBBD11ECB3DAFE39C4F9AE02.roa (raw, json)
Hash identifier: tZN6ZhlBaJlSeqZvecE5/VxMhbLZpXKbOog3hKIU06c=
Subject key identifier: 57:2F:80:57:26:D7:B8:0F:48:6D:99:8E:3E:6B:5A:E0:A0:1A:FC:7B
Certificate issuer: /CN=A917AC8C/serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2
Certificate serial: 03BC
Authority key identifier: 56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/EA5EB99CEBBD11ECB3DAFE39C4F9AE02.roa
Signing time: Sun 09 Aug 2026 00:50:17 +0000
ROA not before: Sun 09 Aug 2026 00:50:17 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 139009
IP address blocks: 103.189.158.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl
rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:58:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 956 (0x3bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AC8C, serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2
Validity
Not Before: Aug 9 00:50:17 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a77cec9-c65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b6:00:5e:2a:50:c8:9a:cd:cb:3a:13:9c:cc:
87:7d:85:48:77:63:4e:fa:1c:b2:ef:6d:47:03:f1:
41:09:43:a0:6c:22:6a:9b:cf:c8:83:63:b8:4e:49:
59:5b:bf:56:6b:17:c8:c7:4f:1f:cb:d4:17:7d:c6:
7d:e3:b3:5f:74:63:2f:90:91:5b:23:ce:2b:73:6e:
d7:1d:e5:f5:33:05:6a:a6:22:a8:cf:ac:b2:91:47:
b0:95:8d:1c:87:5f:9a:b2:4a:ff:30:cb:76:b3:c6:
5b:1c:d6:62:d7:0b:53:e0:9d:59:69:28:a7:51:fd:
fd:61:0d:62:85:50:c0:a5:c4:2c:1c:98:06:7f:0f:
14:f4:d2:c6:09:1c:38:33:de:3e:5e:16:d5:fd:ae:
f8:98:9f:48:d0:05:fc:4c:39:9e:f1:54:cf:83:e6:
af:7e:4b:01:5f:4c:7e:f6:61:a6:62:d7:ca:f8:f5:
01:4a:8e:49:56:db:ab:93:9c:24:9d:e6:35:b8:d4:
15:71:38:80:88:1f:3e:b7:a6:9d:3e:29:f5:b7:33:
55:dc:4f:e9:2b:2b:0d:87:3c:ae:7d:b3:73:b0:bd:
b8:eb:4a:c0:2f:e0:43:88:1d:fa:ed:20:7b:34:28:
09:66:cf:02:c8:e3:38:50:40:76:ae:b4:8f:75:92:
87:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2F:80:57:26:D7:B8:0F:48:6D:99:8E:3E:6B:5A:E0:A0:1A:FC:7B
X509v3 Authority Key Identifier:
keyid:56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/EA5EB99CEBBD11ECB3DAFE39C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.189.158.0/23
Signature Algorithm: sha256WithRSAEncryption
40:2f:7e:91:94:80:d5:1d:fd:55:d5:85:04:78:24:9d:ba:d4:
10:ae:2f:07:b9:67:30:69:f0:d6:f6:b3:2c:be:ba:ea:cb:6d:
03:42:f4:97:df:a3:ec:a3:98:77:6d:f3:fc:0d:0b:70:d0:f6:
59:94:45:9c:42:8d:2d:5c:ef:be:5c:1d:76:a7:27:fd:3c:5a:
a6:78:53:3b:74:12:97:22:9b:b2:74:5b:e0:a4:86:0d:39:5f:
e2:23:69:49:81:ec:97:4a:62:11:c4:f3:36:0c:d9:6f:5d:71:
2c:2c:42:a7:b2:9c:c9:39:6a:d1:d0:4b:4d:a6:43:fe:30:88:
bc:8c:06:b3:cf:e2:9d:ee:d8:77:14:9d:73:07:d9:6a:29:ad:
07:76:c5:84:da:75:32:8b:6a:54:90:2a:a7:55:5b:d8:c8:8d:
f9:0b:fb:b2:2b:d2:19:c4:0f:da:b5:05:be:66:75:a6:91:3e:
ae:ef:9f:6d:76:71:1b:d7:c0:f2:f0:ed:b8:8e:b1:cf:5f:82:
15:d7:ae:89:cb:2a:f6:11:e7:38:2c:80:6d:15:46:6c:45:2d:
1c:99:4a:dc:84:a8:89:e8:77:5f:2f:1a:dc:9a:35:11:ee:ed:
6a:8a:60:ba:01:53:66:38:9f:73:f3:55:8d:89:69:a3:75:24:
2f:5c:10:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:17 2026 by rpki-client