
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/CC389424E71D11F0959F3B7B706F56BC.roa
File: CC389424E71D11F0959F3B7B706F56BC.roa (raw, json)
Hash identifier: ViUTH93Gp8AyO1ZPVD0Xv7OzlXm6aJc97Z4QEzfdTJ0=
Subject key identifier: A5:EC:F3:46:97:0B:4D:8E:3D:88:30:15:6A:ED:A6:CE:61:85:24:49
Certificate issuer: /CN=A917ACA8/serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0
Certificate serial: 01B5
Authority key identifier: CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/CC389424E71D11F0959F3B7B706F56BC.roa
Signing time: Sun 01 Mar 2026 17:31:42 +0000
ROA not before: Thu 01 Jan 2026 14:26:01 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 136030
IP address blocks: 103.101.232.0/24 maxlen: 24
103.165.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl
rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 03:17:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 437 (0x1b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ACA8, serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0
Validity
Not Before: Jan 1 14:26:01 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a477fe-e3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:1a:68:9b:2c:c6:c7:e4:d6:f7:66:1b:64:b4:
e6:e0:66:89:a7:c4:72:76:e5:c1:b8:32:ab:dd:12:
3b:d0:26:8e:2d:cc:66:76:76:97:3e:58:23:94:99:
13:7b:9f:6b:75:dd:12:04:32:6b:e7:1a:e8:68:ca:
7d:e3:3a:42:0c:25:76:5e:21:58:7c:41:e6:01:8e:
9d:dd:1f:b1:01:25:d3:50:29:1e:56:bd:b3:4b:e6:
0a:79:4b:2a:91:c2:55:bb:34:2a:37:ae:e6:25:e2:
cb:96:6a:e5:99:81:66:f2:a5:d9:4d:92:a9:a9:0c:
fc:5e:fb:27:bf:66:ad:73:9d:dc:86:fd:5e:ae:5c:
79:19:a6:03:e8:68:72:31:41:ff:6e:f3:49:b2:f2:
1b:68:c5:e7:9c:4b:21:1b:ee:aa:d6:2b:f6:91:4d:
ed:60:6e:b9:58:3d:47:80:73:2a:d6:aa:d0:24:10:
77:a8:ad:d8:c9:a4:1e:e9:ed:2e:a0:a9:3a:f9:b6:
40:dd:fc:91:b4:5f:b4:ca:51:f6:90:f1:fe:1e:ca:
ec:88:29:c1:6a:78:b4:76:bd:08:d4:2d:3a:d2:3e:
da:84:ec:5a:06:be:03:3c:f1:88:cb:ed:18:85:a5:
27:93:c2:8e:9a:5d:e9:19:5a:80:ac:84:ec:a9:d1:
7a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EC:F3:46:97:0B:4D:8E:3D:88:30:15:6A:ED:A6:CE:61:85:24:49
X509v3 Authority Key Identifier:
keyid:CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/CC389424E71D11F0959F3B7B706F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.101.232.0/24
103.165.176.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:ac:7c:74:f9:3a:58:20:34:c0:11:28:6e:24:fc:e7:ac:b1:
61:a4:7c:06:8e:68:6a:24:4b:03:0c:80:ad:51:53:62:bf:f9:
fa:c8:8c:a5:eb:14:fa:c0:2d:b9:0f:e0:a4:c4:8c:ca:a9:ed:
9b:a2:10:1b:db:46:81:60:49:4a:83:88:95:f1:d3:6f:eb:83:
8e:06:e5:98:60:49:ca:f0:33:5e:cd:7f:7b:40:04:fa:b7:78:
87:28:9d:0f:8d:54:a7:04:40:ab:f7:2c:1e:d1:27:c2:c3:97:
a2:07:2b:78:2e:74:48:78:47:34:98:6e:18:2e:a4:44:b2:16:
46:31:5c:7e:0b:36:e1:ee:5e:3a:6f:ec:5f:8a:87:f1:c3:c0:
71:ac:46:1a:60:22:6d:79:27:28:bb:de:c8:34:a6:f3:14:0d:
b8:1c:82:d6:c0:46:16:fb:48:b2:de:94:3a:b2:44:10:88:d2:
51:62:94:a0:8a:a9:3f:50:9f:22:65:fe:71:3b:92:db:07:53:
18:8d:cc:ab:7c:d6:c7:55:5b:12:8c:0d:67:ae:0e:45:86:b3:
b0:c2:7f:fb:c1:d5:82:74:12:e9:0e:dc:f4:30:5e:4d:06:c0:
1d:ad:14:61:b3:03:43:c0:ed:22:64:3c:27:94:97:b9:eb:e0:
e7:b5:f9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:31:37 2026 by rpki-client