
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/63B7CB76D0E511EA9916E053C4F9AE02.roa
File: 63B7CB76D0E511EA9916E053C4F9AE02.roa (raw, json)
Hash identifier: cdnSLxMfhuwZ6Et2fzD+gihlVu8L05hih+WXS+qI80c=
Subject key identifier: 06:12:1E:5E:3C:F3:3A:24:D8:49:73:BF:A8:1C:E1:E2:7E:F1:2A:05
Certificate issuer: /CN=A911AE4B/serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E
Certificate serial: 08C4
Authority key identifier: 82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/63B7CB76D0E511EA9916E053C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:05:28 +0000
ROA not before: Tue 06 May 2025 21:01:34 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 140659
IP address blocks: 103.151.116.0/23 maxlen: 24
2406:19c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl
rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2244 (0x8c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AE4B, serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E
Validity
Not Before: May 6 21:01:34 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a447a8-8e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:bb:20:c8:cf:ed:ce:07:f5:9e:bd:35:ec:
b4:ab:0c:d2:be:54:b5:5f:8d:a5:88:8a:b1:fb:79:
4c:38:d6:47:a6:55:00:21:21:22:d6:e5:82:3e:bf:
50:62:e2:b9:65:fa:54:d0:33:e2:9f:4f:8a:9d:59:
ef:2d:e8:07:0f:cd:c5:83:54:d2:75:d6:50:d5:9a:
52:46:be:68:65:af:35:43:94:eb:37:bc:46:eb:c5:
a1:b3:d6:8c:36:f0:4d:41:f8:9b:c4:2f:55:b8:d6:
1b:af:9e:14:eb:6f:89:ed:dd:76:13:e9:6e:dc:45:
39:ea:c9:89:66:b7:50:97:2c:99:b4:2f:a6:80:2e:
03:45:07:9b:53:95:66:93:8b:ed:44:ad:20:d3:de:
05:5b:42:54:58:87:63:d1:38:0f:82:b8:dd:6d:79:
f0:a8:f9:da:d2:9e:d6:a5:81:e9:58:74:52:1b:7d:
5b:83:22:2a:4a:a5:95:7e:9f:e1:85:50:a4:4f:2c:
89:ce:79:af:97:12:22:c2:23:c9:cb:b4:7b:b5:e0:
e8:7b:c8:d1:ca:19:fe:48:60:d6:c9:5b:63:68:6c:
f3:e3:99:82:ee:9f:d1:89:20:6c:ee:63:c4:5a:08:
0e:fb:52:f9:1b:8f:f7:e6:f1:09:0b:d4:8c:35:7c:
13:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:12:1E:5E:3C:F3:3A:24:D8:49:73:BF:A8:1C:E1:E2:7E:F1:2A:05
X509v3 Authority Key Identifier:
keyid:82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/63B7CB76D0E511EA9916E053C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.151.116.0/23
IPv6:
2406:19c0::/32
Signature Algorithm: sha256WithRSAEncryption
42:0f:37:d1:70:39:16:40:84:89:b6:aa:3c:49:86:05:6c:63:
16:d6:b6:09:85:03:b2:c7:70:0e:63:54:18:18:26:e4:49:31:
ae:a5:f3:83:69:b0:b2:bd:4e:fd:20:60:b1:51:b2:ad:8c:6b:
54:d1:94:53:f9:0c:c6:0b:b6:29:a9:73:3a:7a:ca:02:4f:d0:
11:fc:63:c7:d0:d4:a5:72:61:92:09:8a:42:ca:8a:5e:ca:d7:
96:8d:2a:de:fd:23:56:27:4b:2a:af:e7:a8:2e:38:59:60:32:
bb:d4:f0:4d:00:ec:d4:ce:0d:69:a1:da:89:19:ca:9e:97:fc:
49:2d:18:c9:c9:1a:06:2d:96:43:c1:77:05:8d:8d:e6:a1:26:
78:be:d3:d9:72:f3:2f:22:22:93:b3:0a:bc:c2:3d:28:81:c7:
6d:3d:02:9b:03:e2:2d:61:5c:70:69:f2:e7:b8:cb:69:23:0e:
a6:89:0f:cb:52:39:a3:d4:c7:65:bf:92:b6:82:8a:9a:c5:f9:
56:51:89:e7:64:98:49:c0:45:58:1a:c2:84:a6:d5:ff:49:e1:
ef:d8:fe:87:43:ce:28:18:94:3e:74:68:09:84:4f:e3:84:f0:
e6:56:63:a3:1c:e8:11:fa:4c:a1:59:51:ca:88:dc:17:bf:2d:
ac:c0:5e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:04:22 2026 by rpki-client