
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/EA17F65E6C6711ECB7C0925AC4F9AE02.roa
File: EA17F65E6C6711ECB7C0925AC4F9AE02.roa (raw, json)
Hash identifier: JBITMoocNfEn/DC51LyDttOjzmGPPbU/nUR+4OvjGYI=
Subject key identifier: A9:83:F7:11:BE:08:BB:92:46:B5:F1:00:53:EA:A7:DA:31:4F:D0:56
Certificate issuer: /CN=A91A8B0B/serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37
Certificate serial: 0D4A
Authority key identifier: E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/EA17F65E6C6711ECB7C0925AC4F9AE02.roa
Signing time: Thu 14 May 2026 18:22:10 +0000
ROA not before: Thu 14 May 2026 18:22:10 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 7605
IP address blocks: 103.138.50.0/23 maxlen: 23
103.138.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl
rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 18:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3402 (0xd4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8B0B, serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37
Validity
Not Before: May 14 18:22:10 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a0612d2-d9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0c:a7:8f:20:5c:6b:47:a6:41:99:10:4d:4d:
67:26:1b:b2:2a:e8:89:bc:1b:ee:cc:c0:46:82:bf:
18:63:ca:c7:b8:49:d0:e2:92:c0:b2:fd:9b:77:6f:
68:a1:f8:61:14:5f:9b:ad:2c:d9:4c:95:b5:a6:b9:
c6:8a:67:25:49:ca:68:91:79:5a:4d:3f:11:bd:c0:
53:45:fa:d4:1f:75:54:82:ad:3e:6e:99:f1:bd:72:
65:87:36:21:83:c6:7b:2c:26:d9:c7:6a:59:d1:71:
59:32:f2:03:f4:fb:cf:dd:7d:7b:fb:52:e8:20:6a:
76:cc:77:a8:9f:c7:ac:e4:d8:bd:a8:b5:05:f1:d1:
20:ae:5c:19:ee:82:86:0e:d4:7e:db:bf:2e:fb:c5:
14:b6:60:fd:7b:6e:c2:e1:01:bc:e4:a8:dd:b8:1d:
9c:f7:fa:c2:10:8b:c8:8c:c3:d3:cd:ef:8f:94:c8:
83:37:88:7c:1e:9f:d5:b7:38:8a:76:fd:9e:de:93:
f3:d4:94:b0:62:76:ff:cc:68:94:48:c1:b2:cb:f0:
9f:99:11:da:db:f3:ec:2d:5e:7f:72:b7:9a:a6:37:
57:46:93:09:fc:7a:a8:6a:d7:90:2e:2b:ba:c7:6c:
55:d9:96:71:2d:bb:74:d3:b8:4c:83:6b:b1:06:27:
b1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:83:F7:11:BE:08:BB:92:46:B5:F1:00:53:EA:A7:DA:31:4F:D0:56
X509v3 Authority Key Identifier:
keyid:E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/EA17F65E6C6711ECB7C0925AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.50.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:48:3c:f9:4e:2b:cf:57:0c:b4:54:36:71:6d:41:7c:65:c1:
58:e5:2c:ee:47:a9:95:95:a7:62:7a:b2:05:b9:07:e6:b1:34:
40:78:f1:03:7f:83:05:1c:40:d8:b3:21:eb:96:c5:bd:04:6e:
41:9e:75:c3:02:f5:16:b9:cd:ed:6e:7b:51:56:cd:ba:a5:8c:
05:07:9c:5f:fc:61:20:8e:88:e0:d4:9b:8e:5e:6f:fc:b3:4d:
8b:a6:f5:cf:cb:ae:33:3f:01:b2:e9:72:8f:56:3f:e8:1d:fb:
dc:5d:12:e1:5b:36:c0:81:ed:eb:4b:29:9b:83:8e:d5:0d:7f:
f5:29:4b:4b:40:01:68:e5:cc:ea:6b:a7:37:d9:0a:d1:5b:f3:
77:54:f2:d7:b6:50:da:c4:59:6b:4f:84:42:2f:9a:a0:cb:c7:
47:87:ee:6f:34:99:d8:cc:3f:05:96:c8:4c:39:36:e9:e9:40:
25:55:02:e2:f9:b0:1d:97:e1:63:89:44:09:37:19:29:45:29:
53:91:17:b8:3b:16:49:b0:b9:ee:eb:0a:7b:d2:4a:e8:6b:73:
7f:31:9c:da:f4:99:71:74:45:65:24:b9:ae:fc:f0:88:78:6d:
1c:f8:bf:de:bb:c4:48:cf:99:64:ee:4f:c7:22:ba:5a:ee:4b:
16:d0:35:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:52:22 2026 by rpki-client