
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/AA75695ACD2011F0B214A868C4F9AE02.roa
File: AA75695ACD2011F0B214A868C4F9AE02.roa (raw, json)
Hash identifier: 2mnTM/HTgdiRw1sKfT4sEhRjUUWStC3e6p+pRA/D//M=
Subject key identifier: 2F:66:56:C4:5A:2D:FD:97:D9:4C:9F:1B:58:06:4E:9C:D2:68:A1:68
Certificate issuer: /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1
Certificate serial: 0FFB
Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/AA75695ACD2011F0B214A868C4F9AE02.roa
Signing time: Thu 16 Jul 2026 18:18:11 +0000
ROA not before: Thu 16 Jul 2026 18:18:11 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 139016
IP address blocks: 103.138.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl
rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 18:18:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4091 (0xffb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C2CC, serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1
Validity
Not Before: Jul 16 18:18:11 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a592063-07ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a7:93:98:e9:74:b7:71:bc:26:7a:5a:04:c0:
07:95:b6:de:89:04:df:c5:db:cb:61:84:80:6b:39:
42:d9:2f:b2:74:14:c8:b9:e2:0e:da:bf:a9:99:59:
89:a4:c9:98:66:97:8c:0c:e9:f3:71:d6:5f:88:94:
80:ef:c1:df:cb:6a:ef:88:bc:ff:11:61:d6:27:af:
e7:c8:83:45:a0:d4:46:f0:f0:45:77:5e:e5:78:a5:
a8:a7:44:43:fe:cf:e9:78:00:de:99:2e:a4:ae:0f:
e1:db:ed:2c:27:8f:d1:e1:a6:8d:2c:76:95:ee:b9:
9a:9a:b6:1f:b8:18:b3:ab:85:ff:00:bb:33:57:bc:
54:80:fe:61:f2:ae:f3:66:75:a0:c6:a0:c5:79:9b:
7d:f1:61:a8:14:9a:31:89:b9:ab:4d:55:ec:27:79:
33:3f:ba:ef:d2:fe:9b:9b:e7:15:86:92:ad:ce:2b:
44:2a:76:99:98:bf:b6:f1:f8:89:55:aa:31:cd:bd:
a0:00:31:a0:70:06:96:c6:66:63:c3:03:7b:4c:4c:
e0:c4:61:a2:76:e0:a0:78:38:98:bd:fe:b8:77:ef:
7c:26:ab:96:11:c5:12:5b:45:b6:6a:ce:f7:5c:27:
e1:6e:b4:c4:c0:49:b2:08:c8:26:aa:2e:df:05:83:
57:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:66:56:C4:5A:2D:FD:97:D9:4C:9F:1B:58:06:4E:9C:D2:68:A1:68
X509v3 Authority Key Identifier:
keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/AA75695ACD2011F0B214A868C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.151.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ad:8b:c3:7e:93:84:a3:68:e6:d8:04:ea:46:ff:66:3c:92:
89:04:0b:36:53:56:2d:39:59:44:c7:10:2b:d9:de:7f:25:05:
69:a9:2c:09:a5:b5:af:1c:6d:67:78:8a:6b:96:d7:b4:f4:a7:
bf:b0:e4:db:55:fc:59:9c:c2:7a:de:e9:55:50:d2:5f:23:ee:
e0:45:e5:d8:a5:e8:71:8f:de:2d:ec:8b:69:3c:15:db:44:a8:
95:db:f9:e9:c0:25:13:d6:2f:96:6c:b1:ac:1d:22:5b:e0:4c:
2d:92:5d:79:55:36:78:a8:02:1d:07:73:60:78:08:8d:d8:55:
d2:61:c1:53:3c:1b:66:51:53:b1:7a:3f:30:bb:f4:1c:bd:55:
37:cd:5b:d7:5b:be:3b:c2:b7:14:0f:4a:71:15:21:28:e6:c4:
8b:80:8e:0e:c6:f0:6f:b1:a8:62:3a:16:5c:78:2d:fa:85:49:
6a:f6:76:cb:15:ac:b6:4e:68:df:15:b5:67:09:e0:99:1e:2c:
27:1f:93:ca:f0:94:f2:70:15:77:d5:02:f8:95:d0:35:5f:41:
b3:17:c4:1e:27:83:47:22:9d:41:8f:15:45:ed:23:fb:78:67:
68:61:dd:7e:3e:44:ca:90:50:ec:ba:a6:f0:c1:95:37:9d:18:
fa:fe:6e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:10:42 2026 by rpki-client