
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa
File: 73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa (raw, json)
Hash identifier: cj0uIogezd0yWwaHnlYBF13kTbwkCk4qf3kI26mN/jI=
Subject key identifier: B7:19:D1:E6:B0:B6:69:C5:22:7E:11:1B:F0:C6:81:2F:57:A7:13:89
Certificate issuer: /CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
Certificate serial: 0A4A
Authority key identifier: 2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa
Signing time: Thu 30 Apr 2026 20:25:45 +0000
ROA not before: Thu 30 Apr 2026 20:25:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40513
IP address blocks: 103.88.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl
rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2634 (0xa4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EC46, serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
Validity
Not Before: Apr 30 20:25:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f3bac8-fd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:93:03:dd:72:36:03:20:2a:62:ca:ab:af:
b6:50:c2:ae:78:89:11:b7:7a:a1:77:62:10:68:23:
d7:87:8d:c7:cf:1e:7c:1a:12:30:6a:b1:01:35:e3:
3f:46:bf:df:98:a6:f7:e8:88:fe:9e:e5:50:f5:50:
06:c3:33:c7:99:d7:38:d8:70:86:2b:8c:9b:ac:5d:
00:a6:63:6c:09:58:06:ee:10:d8:cf:d5:eb:d7:04:
24:6d:b2:28:74:2d:be:74:c0:09:56:4c:b1:15:aa:
eb:b7:1c:80:ec:56:06:3c:d8:af:e9:f1:61:3f:cb:
b6:66:a8:81:0d:5c:2a:41:c9:a7:a4:7e:04:a6:f2:
ce:d8:b0:27:ee:5f:80:e1:8d:34:3c:8d:ad:87:20:
03:13:12:06:88:59:2f:99:e7:19:91:1c:6e:8b:8c:
0f:eb:fd:14:0c:42:a4:2d:e0:a2:1e:8a:f6:6d:a0:
69:ea:36:bc:27:4f:18:39:11:b6:37:5c:d5:09:22:
60:a4:e9:a4:74:20:69:aa:e6:74:81:4b:a5:3c:a6:
ca:e1:df:84:e8:f4:a8:dd:23:c6:40:e8:9b:4c:77:
65:3c:6f:18:db:b4:15:44:0d:ba:76:f4:a5:79:0b:
dc:e2:0e:96:e2:4a:16:61:3a:d6:2c:3c:43:f2:41:
f5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:19:D1:E6:B0:B6:69:C5:22:7E:11:1B:F0:C6:81:2F:57:A7:13:89
X509v3 Authority Key Identifier:
keyid:2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.88.43.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:21:3c:d8:80:40:06:71:e9:27:6f:f9:24:31:69:ef:1e:f6:
b5:c4:74:60:fd:09:3f:28:a4:45:e7:2d:2f:66:ed:34:74:04:
3c:b0:58:6e:e8:07:4e:80:61:99:f8:11:04:54:33:51:bb:de:
08:50:56:19:f6:ff:08:46:61:68:b1:03:5d:a4:d4:0b:a1:2b:
0d:db:40:69:32:01:ca:7f:82:3b:03:17:90:69:e1:c5:27:c8:
8b:e8:eb:d1:bd:9b:ec:ca:fb:dc:97:aa:be:c8:4d:66:be:c3:
93:a1:5c:90:21:7e:8c:57:6d:a6:f2:2c:3c:e0:eb:89:c1:cf:
09:18:81:f6:ef:36:b9:c2:d4:e0:ae:66:47:5d:f9:d8:1b:59:
dc:d5:42:0a:14:7b:92:51:08:9c:ab:db:3d:66:ae:1b:bd:d8:
0f:39:78:1b:fe:3c:3b:d8:4f:01:f6:e4:2e:a9:fa:bc:83:ac:
0f:36:1c:51:6f:ad:0a:3c:e7:45:df:b7:42:42:e0:b8:3c:06:
1b:5d:37:ee:79:fd:a1:48:b5:a3:6e:01:dd:bc:6d:e4:8f:44:
04:8c:cc:5f:7a:8c:a3:3b:52:f2:20:9d:bb:2f:2a:1a:ae:ee:
19:ac:76:29:ac:e0:91:a2:c0:10:8c:61:bd:ea:b1:f1:5c:00:
55:a9:53:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 02:53:07 2026 by rpki-client