
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/39E77242050B11F097AB4F3BC4F9AE02.roa
File: 39E77242050B11F097AB4F3BC4F9AE02.roa (raw, json)
Hash identifier: MbYBLk6PY90noXEw9Wp2mq7a1huC8ky0jg5agxHD+Ys=
Subject key identifier: 83:05:A6:BF:33:30:F6:F6:D4:9E:AF:23:70:84:90:E6:B2:3C:69:68
Certificate issuer: /CN=A919F64F/serialNumber=F358D68555BAB5EF62A4DCFD4F324035EE6024B6
Certificate serial: 0116
Authority key identifier: F3:58:D6:85:55:BA:B5:EF:62:A4:DC:FD:4F:32:40:35:EE:60:24:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81jWhVW6te9ipNz9TzJANe5gJLY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/39E77242050B11F097AB4F3BC4F9AE02.roa
Signing time: Wed 05 Aug 2026 07:55:37 +0000
ROA not before: Wed 05 Aug 2026 07:55:37 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 18214
IP address blocks: 103.158.33.0/24 maxlen: 24
203.153.9.0/24 maxlen: 24
203.153.10.0/24 maxlen: 24
203.153.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.crl
rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81jWhVW6te9ipNz9TzJANe5gJLY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 06:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F64F, serialNumber=F358D68555BAB5EF62A4DCFD4F324035EE6024B6
Validity
Not Before: Aug 5 07:55:37 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a72ec79-8150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e8:5b:bc:ea:d0:3e:f7:11:24:84:7d:6b:52:
66:f4:e7:83:d0:80:89:b5:63:bb:6d:33:20:2e:aa:
9e:3f:c0:37:78:3a:d1:f6:29:69:29:50:ed:2f:30:
54:0b:4d:7f:46:44:21:39:64:84:bf:52:bb:d2:f1:
f3:30:7b:34:66:ac:31:c0:01:32:3c:16:8b:30:f3:
7c:b0:c2:88:43:48:ac:d6:1e:56:b6:c0:45:c2:f2:
c7:10:87:f7:6d:f8:27:6d:02:16:b9:37:c9:57:52:
3a:ab:67:b0:ae:5c:b4:8d:7d:29:88:1d:45:64:b9:
e1:97:df:cf:02:42:c3:d7:e2:a4:77:b4:5b:22:26:
4d:c8:b0:36:6e:c0:90:2b:5e:ce:fd:f8:6a:89:a4:
82:8f:a1:4b:9e:77:5f:0a:5b:02:e5:8d:cc:cc:4e:
bd:73:a6:f1:af:e6:f7:95:6e:64:be:3c:d9:e2:f3:
7b:3d:e8:84:cf:fa:46:0e:6e:30:88:25:7b:93:b4:
ed:4d:cf:4a:42:77:39:f3:4b:3b:67:1f:d8:90:32:
45:72:dc:44:dd:21:00:20:94:8b:45:4f:70:09:b4:
06:2e:f2:68:26:b2:24:49:4b:b7:5d:4e:4a:53:b6:
3a:e6:0f:f1:1d:6b:ec:10:32:88:ff:90:db:61:cc:
94:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:05:A6:BF:33:30:F6:F6:D4:9E:AF:23:70:84:90:E6:B2:3C:69:68
X509v3 Authority Key Identifier:
keyid:F3:58:D6:85:55:BA:B5:EF:62:A4:DC:FD:4F:32:40:35:EE:60:24:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81jWhVW6te9ipNz9TzJANe5gJLY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/39E77242050B11F097AB4F3BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.158.33.0/24
203.153.9.0-203.153.10.255
203.153.14.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:53:64:8b:08:a2:82:e3:56:e8:c9:4e:fc:0f:51:9c:07:8a:
37:da:b6:13:23:f3:f5:4f:a0:a3:3f:87:6c:b5:ce:61:28:e8:
3b:fc:ae:1f:a6:8a:14:c3:6d:29:b7:37:87:9c:93:03:ef:21:
94:eb:01:d5:a2:ae:2c:7a:fe:79:09:8e:d6:cc:6d:78:87:8a:
26:70:99:fb:52:b3:88:6d:93:88:0e:27:86:07:55:77:81:0e:
e1:75:df:aa:c4:da:1b:9f:ec:9d:d1:7a:87:4e:33:6b:20:2b:
00:24:4b:f6:5e:3c:3c:38:6a:4a:ce:c4:98:36:98:ad:f9:b4:
75:4a:0d:27:c4:db:86:d1:a3:ca:ab:57:72:d0:a4:46:96:32:
43:1e:51:59:8f:8a:2f:2b:46:21:ed:cf:14:f3:06:25:f0:8a:
18:89:91:57:fa:5f:9d:06:54:bc:7d:60:8e:f9:b7:26:0b:d5:
39:b6:f8:f1:42:a5:ef:27:00:16:d1:73:5a:41:f0:98:14:01:
40:a1:23:d5:ce:f3:c0:a0:72:cb:2f:61:61:f9:e7:0b:30:3f:
30:f5:f2:f0:3e:9d:ca:4e:5f:57:a6:65:9e:5f:f7:c1:25:67:
3f:7f:5c:4a:52:ae:ad:2e:80:66:4e:90:0b:72:5e:35:b2:ed:
bf:8a:37:9e
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUY2NEYxMTAvBgNVBAUTKEYzNThENjg1NTVCQUI1RUY2MkE0RENGRDRGMzI0MDM1
RUU2MDI0QjYwHhcNMjYwODA1MDc1NTM3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTcyZWM3OS04MTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtOhbvOrQPvcRJIR9a1Jm9OeD0ICJtWO7bTMgLqqeP8A3eDrR9ilpKVDtLzBU
C01/RkQhOWSEv1K70vHzMHs0ZqwxwAEyPBaLMPN8sMKIQ0is1h5WtsBFwvLHEIf3
bfgnbQIWuTfJV1I6q2ewrly0jX0piB1FZLnhl9/PAkLD1+Kkd7RbIiZNyLA2bsCQ
K17O/fhqiaSCj6FLnndfClsC5Y3MzE69c6bxr+b3lW5kvjzZ4vN7PeiEz/pGDm4w
iCV7k7TtTc9KQnc580s7Zx/YkDJFctxE3SEAIJSLRU9wCbQGLvJoJrIkSUu3XU5K
U7Y65g/xHWvsEDKI/5DbYcyU7QIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFIMFpr8z
MPb21J6vI3CEkOayPGloMB8GA1UdIwQYMBaAFPNY1oVVurXvYqTc/U8yQDXuYCS2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjY0Ri9BQkE2MTNEMDA1
MEExMUYwODdCNzY1M0FDNEY5QUUwMi84MWpXaFZXNnRlOWlwTno5VHpKQU5lNWdK
TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzgxaldoVlc2dGU5aXBOejlUekpBTmU1Z0pMWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUY2NEYvQUJBNjEzRDAwNTBBMTFGMDg3Qjc2NTNBQzRGOUFFMDIvMzlFNzcyNDIw
NTBCMTFGMDk3QUI0RjNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg
BAIAATAaAwQAZ54hMAwDBADLmQkDBADLmQoDBADLmQ4wDQYJKoZIhvcNAQELBQAD
ggEBAKVTZIsIooLjVujJTvwPUZwHijfathMj8/VPoKM/h2y1zmEo6Dv8rh+mihTD
bSm3N4eckwPvIZTrAdWirix6/nkJjtbMbXiHiiZwmftSs4htk4gOJ4YHVXeBDuF1
36rE2huf7J3ReodOM2sgKwAkS/ZePDw4akrOxJg2mK35tHVKDSfE24bRo8qrV3LQ
pEaWMkMeUVmPii8rRiHtzxTzBiXwihiJkVf6X50GVLx9YI75tyYL1Tm2+PFCpe8n
ABbRc1pB8JgUAUChI9XO88CgcssvYWH55wswPzD18vA+ncpOX1emZZ5f98ElZz9/
XEpSrq0ugGZOkAtyXjWy7b+KN54=
-----END CERTIFICATE-----
Generated at Fri Sep 11 06:50:04 2026 by rpki-client