
$ rpki-client -vvf rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0E17B1AE78F511EC83E56014C4F9AE02.roa
File: 0E17B1AE78F511EC83E56014C4F9AE02.roa (raw, json)
Hash identifier: bDOD+j7hhvA5ItKdW+s15kWeIrZ0O1fJuwC8AQXRM8A=
Subject key identifier: CE:A8:26:8B:3C:94:CD:C6:C1:01:36:6B:24:E0:21:87:85:DA:EA:CE
Certificate issuer: /CN=A919608D/serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9
Certificate serial: 1169
Authority key identifier: D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0E17B1AE78F511EC83E56014C4F9AE02.roa
Signing time: Tue 31 Mar 2026 11:38:42 +0000
ROA not before: Tue 31 Mar 2026 11:38:42 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 136003
IP address blocks: 103.134.36.0/23 maxlen: 23
103.134.36.0/24 maxlen: 24
103.134.37.0/24 maxlen: 24
2404:5c40::/32 maxlen: 32
2404:5c40::/48 maxlen: 48
2404:5c40:1::/48 maxlen: 48
2404:5c40:2::/48 maxlen: 48
2404:5c40:3::/48 maxlen: 48
2404:5c40:4::/48 maxlen: 48
2404:5c40:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl
rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4457 (0x1169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919608D, serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9
Validity
Not Before: Mar 31 11:38:42 2026 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69cbb242-f859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a3:21:79:01:23:97:a8:df:ea:77:0e:5a:e9:
9a:5c:87:90:76:0e:85:02:23:12:91:5f:ea:c3:e5:
0b:97:b6:f9:b7:a8:e1:cb:c6:df:d0:42:cb:90:91:
78:08:fe:f9:b1:64:1f:5e:5d:3a:50:25:d9:c1:f1:
e5:30:01:e8:c6:cd:4a:d5:79:b8:ee:8c:2e:97:1f:
8d:37:ec:87:a4:d3:c3:d0:a7:47:69:2a:30:14:ed:
28:a5:cd:5a:6b:9f:d3:40:c1:24:12:07:21:db:69:
6a:0c:47:c4:c6:3b:dd:49:b4:88:1e:5a:2c:0b:b3:
0f:55:89:7f:e1:65:73:b6:ba:72:54:9d:85:fc:fd:
06:8f:67:0f:ac:4e:37:50:b3:fd:5b:54:3d:b9:45:
46:b1:bb:02:f9:12:6f:80:8c:f4:92:82:18:5a:71:
56:bd:d6:e3:02:78:7f:b7:f6:4c:8a:03:c6:d4:d2:
40:ec:d4:76:08:57:3d:b9:3a:0c:b9:9e:ff:3b:c4:
bf:55:97:85:e4:51:34:22:ec:87:d4:38:46:22:71:
63:66:a8:86:d3:6d:15:ba:69:d0:67:18:21:8b:10:
9b:ac:8d:44:80:64:34:0e:05:fe:a8:9c:a3:9c:41:
ba:43:10:17:38:31:18:18:6c:cc:e9:df:00:e9:44:
2a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A8:26:8B:3C:94:CD:C6:C1:01:36:6B:24:E0:21:87:85:DA:EA:CE
X509v3 Authority Key Identifier:
keyid:D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0E17B1AE78F511EC83E56014C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.134.36.0/23
IPv6:
2404:5c40::/32
Signature Algorithm: sha256WithRSAEncryption
6a:c5:ca:59:51:3d:b9:45:43:71:66:84:de:a4:7a:02:9b:c8:
75:d0:07:22:15:59:a2:14:32:40:ab:e1:1a:c3:8d:50:e5:70:
2a:8c:21:e0:01:8f:21:0e:b0:c4:85:f8:55:11:0c:b4:26:f4:
3c:a7:bf:f1:17:0d:af:54:f2:22:3b:dd:bc:ea:ea:fa:51:a9:
39:98:d2:fb:7a:5c:1e:0a:78:6a:dd:5b:db:20:a1:be:98:e3:
7c:a0:98:b0:b6:69:39:b8:06:b8:15:2d:c9:9e:24:09:c8:94:
41:ad:0c:34:d7:26:4f:ad:06:70:3e:f2:40:b4:29:db:06:2f:
23:92:1e:d6:6b:c8:8a:52:f8:cc:58:c8:d2:8c:43:e1:f8:45:
2a:3a:be:a5:56:63:81:09:78:bf:66:ae:a4:ce:23:e8:71:5d:
5b:a5:31:6b:63:06:aa:f4:a3:96:21:a4:84:03:24:59:a5:90:
2a:a7:fb:27:c9:4c:e0:ba:66:e3:ea:d5:e9:f3:17:6e:46:77:
fa:89:ac:91:20:84:b1:72:55:cb:ca:ca:5a:fe:08:72:bf:13:
1d:8b:4c:9b:d1:51:4d:cd:66:62:7e:60:0b:c4:e2:1f:79:b0:
fb:d2:4a:ca:38:f5:5d:c1:15:4a:cc:a0:e0:a7:bc:0a:de:09:
26:41:e0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 15:33:44 2026 by rpki-client