
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/113D35904DD611EE8F798349C4F9AE02.roa
File: 113D35904DD611EE8F798349C4F9AE02.roa (raw, json)
Hash identifier: qdvyQNGC7XibGViTobWBPoXnAqigwJTvWfUP0M1u2aU=
Subject key identifier: 5A:71:9D:1F:C3:F9:21:71:F5:4C:64:F2:19:CF:93:EB:94:59:0D:1E
Certificate issuer: /CN=A917EFA9/serialNumber=7B91A8B011D619C4271D45203A0E33D9185EF781
Certificate serial: 0264
Authority key identifier: 7B:91:A8:B0:11:D6:19:C4:27:1D:45:20:3A:0E:33:D9:18:5E:F7:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/113D35904DD611EE8F798349C4F9AE02.roa
Signing time: Tue 01 Sep 2026 02:51:44 +0000
ROA not before: Tue 01 Sep 2026 02:51:44 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 135889
IP address blocks: 103.79.23.0/24 maxlen: 24
103.102.50.0/23 maxlen: 23
103.102.51.0/24 maxlen: 24
103.102.52.0/24 maxlen: 24
182.16.152.0/22 maxlen: 22
182.16.152.0/24 maxlen: 24
182.16.153.0/24 maxlen: 24
182.16.154.0/24 maxlen: 24
182.16.155.0/24 maxlen: 24
202.62.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.crl
rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 612 (0x264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EFA9, serialNumber=7B91A8B011D619C4271D45203A0E33D9185EF781
Validity
Not Before: Sep 1 02:51:44 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a963dc0-0525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:02:79:e8:fd:26:b1:1d:2a:ea:22:72:96:66:
b1:d5:ad:07:23:a3:a3:89:58:bd:9e:f2:fe:08:e7:
3d:fa:0a:be:43:e9:f1:ae:55:45:62:6c:65:89:d5:
5a:d6:e8:b8:5d:6c:1e:9c:c4:95:32:2b:66:8e:dc:
2d:23:50:88:5b:33:59:3e:d7:25:1b:51:8b:4f:cc:
86:fb:c2:cd:3a:01:3f:1e:53:a5:cd:cb:33:4e:8b:
0e:84:67:e2:b6:db:cc:d5:93:fb:f1:e2:34:f5:0f:
2e:84:42:fb:70:a7:fe:81:8a:63:ca:ed:0c:16:52:
9d:62:68:c4:b2:69:47:ed:55:1b:59:16:44:f5:e6:
38:98:46:3a:a4:ec:b8:35:ab:7b:02:12:da:13:21:
9f:d9:05:e4:5f:19:bb:c7:ae:e6:f9:52:62:92:c5:
fd:59:6c:24:f4:c5:d2:ce:b3:19:76:f9:79:b6:95:
9a:36:8e:68:79:0c:aa:89:d3:b4:c6:36:8f:59:a1:
56:6d:18:de:b7:de:b7:c1:af:60:f2:95:98:3c:00:
2d:05:eb:af:87:4d:4d:09:d0:78:81:cb:35:4b:9f:
c7:a8:2c:d1:6c:3a:a3:4e:69:93:8b:13:9d:07:64:
33:19:d5:2c:70:ea:e9:04:74:ab:fb:ec:70:7b:9e:
8d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:71:9D:1F:C3:F9:21:71:F5:4C:64:F2:19:CF:93:EB:94:59:0D:1E
X509v3 Authority Key Identifier:
keyid:7B:91:A8:B0:11:D6:19:C4:27:1D:45:20:3A:0E:33:D9:18:5E:F7:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/113D35904DD611EE8F798349C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.79.23.0/24
103.102.50.0-103.102.52.255
182.16.152.0/22
202.62.245.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:a7:5a:a2:62:d2:d1:60:24:d6:d9:00:1a:b6:aa:f7:cd:0a:
dd:b9:de:c2:62:39:5a:33:39:7e:1f:1f:59:8a:c1:4f:38:42:
86:4a:fa:22:f0:9c:c2:9c:59:67:00:3c:ee:e1:37:10:58:b0:
b7:3a:72:52:da:b1:4f:d5:8b:e0:de:4e:c9:36:7c:4d:d1:0d:
f2:88:d3:e5:5d:b0:c0:49:9e:7b:ef:d4:08:3a:2e:33:39:75:
9d:1a:25:72:1a:c7:28:07:c0:2c:36:a8:bc:89:30:c4:5d:56:
08:01:d3:55:1b:1a:f4:26:f4:fd:54:ff:4e:6f:64:f9:b1:35:
ca:a3:50:a7:b1:95:f8:af:6e:78:69:4f:15:ad:7b:8e:4f:5f:
dc:23:39:a8:84:27:6d:72:1f:fc:3c:0b:a1:f3:a7:a6:82:ab:
df:53:cf:f7:77:64:0e:52:ea:6e:f8:e9:c4:44:64:38:69:b3:
04:d2:21:d3:d8:9f:2e:03:04:f6:af:2f:7c:92:d1:c1:00:22:
43:9b:ab:e5:32:80:bd:79:2a:70:79:96:41:2b:ad:f4:32:42:
7e:e8:80:ac:dd:78:c3:a5:d6:7c:71:c8:65:74:f1:42:4f:95:
68:d6:62:7b:ce:db:fe:c7:63:a3:72:16:62:c9:71:4b:d0:b2:
61:46:7c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 03:11:45 2026 by rpki-client