
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/824F8AD0187711F1AF6111A7363D8C67.roa
File: 824F8AD0187711F1AF6111A7363D8C67.roa (raw, json)
Hash identifier: OrnpOdJKnCgLpJvnuyIAECeq3kEpUYn5ubA/jjG/jvA=
Subject key identifier: 58:F3:94:9B:29:12:40:68:85:58:EB:65:49:94:DE:BA:66:31:84:1F
Certificate issuer: /CN=A917E322/serialNumber=FA6B62757BCAD457ACA070A51C4808B4B7C93370
Certificate serial: 4A
Authority key identifier: FA:6B:62:75:7B:CA:D4:57:AC:A0:70:A5:1C:48:08:B4:B7:C9:33:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mtidXvK1FesoHClHEgItLfJM3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/824F8AD0187711F1AF6111A7363D8C67.roa
Signing time: Fri 17 Jul 2026 10:35:48 +0000
ROA not before: Fri 17 Jul 2026 10:35:48 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 151662
IP address blocks: 103.252.138.0/24 maxlen: 24
103.252.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.crl
rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mtidXvK1FesoHClHEgItLfJM3A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E322, serialNumber=FA6B62757BCAD457ACA070A51C4808B4B7C93370
Validity
Not Before: Jul 17 10:35:48 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a5a0584-f7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:f7:ff:55:6f:ce:4a:58:da:8c:d7:27:31:
14:24:27:8d:f0:f8:7f:be:f3:9c:00:e4:68:2f:ee:
8c:5b:d8:36:8b:04:7b:c9:09:1a:59:ff:33:cb:d3:
e9:34:e4:19:60:1b:10:96:2e:75:31:06:df:fd:b6:
99:69:25:bd:06:90:7f:fc:b9:94:be:9e:04:4d:7e:
f6:bc:46:34:f1:31:ca:9f:9c:15:db:72:63:4c:55:
0d:25:49:7c:3c:3a:b4:0c:77:b3:c5:82:9c:53:7f:
27:89:e9:b4:d5:8d:8e:81:cd:d5:56:bb:39:2b:bf:
44:3d:41:30:13:24:82:3e:5f:50:94:19:e7:80:b0:
d4:83:80:be:86:6d:c4:62:d2:05:cb:42:b9:4d:df:
0c:03:27:48:69:32:a7:c3:40:2c:c8:a4:85:e1:ca:
30:c4:21:db:dd:d2:03:7a:bd:50:03:30:d2:f7:0e:
59:a8:41:bf:83:e8:4c:a4:5c:f6:03:42:66:b0:83:
62:1a:25:c3:6e:79:38:ad:5a:d3:9d:27:c3:c5:31:
1f:0f:37:d2:0b:91:5e:bf:b9:9e:0c:62:d3:03:75:
53:ad:e3:0d:21:ea:8e:b5:72:d0:d9:5f:b2:5a:51:
73:6d:75:a0:5f:6f:fd:e2:b7:ce:6e:d7:88:30:dd:
c9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F3:94:9B:29:12:40:68:85:58:EB:65:49:94:DE:BA:66:31:84:1F
X509v3 Authority Key Identifier:
keyid:FA:6B:62:75:7B:CA:D4:57:AC:A0:70:A5:1C:48:08:B4:B7:C9:33:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mtidXvK1FesoHClHEgItLfJM3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/824F8AD0187711F1AF6111A7363D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.252.138.0/23
Signature Algorithm: sha256WithRSAEncryption
20:78:42:86:be:46:66:d8:70:52:23:b7:65:54:3f:04:ed:8f:
1d:b7:b6:32:09:09:a0:1c:ad:07:49:97:6f:dd:c8:6a:da:e9:
cd:de:c3:a6:e9:b9:b7:e1:b4:b9:d5:00:4a:1d:25:aa:b2:15:
6f:8e:14:6e:d2:77:16:1f:e5:71:3f:dc:9b:99:d6:9a:97:92:
19:dc:fa:2c:8d:6c:a8:45:36:09:33:99:87:b9:a6:25:e3:b6:
cf:07:3b:bd:8a:bb:fb:57:bd:35:7c:6b:e0:ab:7c:46:cb:f4:
54:ed:c3:0b:36:e0:a9:a7:59:d3:45:12:65:00:c8:29:e5:5c:
ee:3a:9d:98:e4:c9:8b:8f:b3:85:be:c5:a1:2a:d2:27:36:1b:
c2:88:d6:15:b3:ae:db:60:74:69:ca:64:f2:c1:dd:8c:80:64:
38:17:e3:78:ca:43:21:79:94:16:7b:56:79:be:ca:91:81:26:
d7:e8:e8:48:4d:bf:3c:df:c5:a2:5b:dc:6e:c6:31:21:7f:68:
9b:bc:eb:0b:7d:f5:df:e1:c5:88:11:ca:d5:21:3f:5e:0b:b6:
bf:a7:9f:dc:6a:a6:d0:98:27:65:79:4a:63:d4:a0:89:70:57:
0c:7e:97:59:18:98:25:d3:dd:12:85:09:87:bf:cd:90:54:c5:
c4:45:c0:c4
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
RTMyMjExMC8GA1UEBRMoRkE2QjYyNzU3QkNBRDQ1N0FDQTA3MEE1MUM0ODA4QjRC
N0M5MzM3MDAeFw0yNjA3MTcxMDM1NDhaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNWEwNTg0LWY3ZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpsPf/VW/OSljajNcnMRQkJ43w+H++85wA5Ggv7oxb2DaLBHvJCRpZ/zPL0+k0
5BlgGxCWLnUxBt/9tplpJb0GkH/8uZS+ngRNfva8RjTxMcqfnBXbcmNMVQ0lSXw8
OrQMd7PFgpxTfyeJ6bTVjY6BzdVWuzkrv0Q9QTATJII+X1CUGeeAsNSDgL6GbcRi
0gXLQrlN3wwDJ0hpMqfDQCzIpIXhyjDEIdvd0gN6vVADMNL3DlmoQb+D6EykXPYD
Qmawg2IaJcNueTitWtOdJ8PFMR8PN9ILkV6/uZ4MYtMDdVOt4w0h6o61ctDZX7Ja
UXNtdaBfb/3it85u14gw3ckDAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUWPOUmykS
QGiFWOtlSZTeumYxhB8wHwYDVR0jBBgwFoAU+mtidXvK1FesoHClHEgItLfJM3Aw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMzIyL0M5QzJBQUQ4MTg3
NjExRjE4NjI4NEU0RTM2M0Q4QzY3Ly1tdGlkWHZLMUZlc29IQ2xIRWdJdExmSk0z
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLW10aWRYdksxRmVzb0hDbEhFZ0l0TGZKTTNBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTMyMi9DOUMyQUFEODE4NzYxMUYxODYyODRFNEUzNjNEOEM2Ny84MjRGOEFEMDE4
NzcxMUYxQUY2MTExQTczNjNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAFn/IowDQYJKoZIhvcNAQELBQADggEBACB4Qoa+RmbYcFIjt2VUPwTt
jx23tjIJCaAcrQdJl2/dyGra6c3ew6bpubfhtLnVAEodJaqyFW+OFG7SdxYf5XE/
3JuZ1pqXkhnc+iyNbKhFNgkzmYe5piXjts8HO72Ku/tXvTV8a+CrfEbL9FTtwws2
4KmnWdNFEmUAyCnlXO46nZjkyYuPs4W+xaEq0ic2G8KI1hWzrttgdGnKZPLB3YyA
ZDgX43jKQyF5lBZ7Vnm+ypGBJtfo6EhNvzzfxaJb3G7GMSF/aJu86wt99d/hxYgR
ytUhP14Ltr+nn9xqptCYJ2V5SmPUoIlwVwx+l1kYmCXT3RKFCYe/zZBUxcRFwMQ=
-----END CERTIFICATE-----
Generated at Wed Aug 19 14:31:50 2026 by rpki-client