
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/6FA255F0CF9511F0BB07FA4DC4F9AE02.roa
File: 6FA255F0CF9511F0BB07FA4DC4F9AE02.roa (raw, json)
Hash identifier: 4mHBI72RpqtbTIqATD0m8H0efW8dPxbcgwFw+GoOGKY=
Subject key identifier: 3D:38:F3:B9:F1:EB:8C:0C:B7:C9:2E:BF:92:25:92:B5:E4:C8:E6:9A
Certificate issuer: /CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443
Certificate serial: 084F
Authority key identifier: 2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/6FA255F0CF9511F0BB07FA4DC4F9AE02.roa
Signing time: Wed 10 Jun 2026 13:33:16 +0000
ROA not before: Wed 10 Jun 2026 13:33:16 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 26337
IP address blocks: 103.29.84.0/23 maxlen: 24
114.142.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl
rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2127 (0x84f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B871, serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443
Validity
Not Before: Jun 10 13:33:16 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a29679c-0f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4f:11:61:6b:d5:a1:10:ac:b1:f0:27:4e:11:
e0:e6:c9:15:91:ee:39:e8:a4:dd:75:2d:41:e6:76:
e7:1e:aa:32:44:02:d3:0b:37:a3:30:fc:14:17:3a:
5e:2e:61:9b:d2:0c:b4:16:0b:c2:54:35:cd:42:4e:
94:22:33:43:dd:ff:ef:11:b3:c7:84:77:3a:02:70:
95:59:2b:cc:30:a7:2e:a1:1e:ae:46:59:b7:65:9b:
27:89:ad:7d:5a:ef:9d:2b:38:38:12:75:6f:db:5c:
84:41:d2:24:bc:40:dc:bf:eb:28:d2:28:0c:cd:73:
72:36:dd:63:74:dc:e3:46:0f:a1:5d:86:27:01:16:
5e:0f:a0:f6:b1:df:fa:d7:67:11:df:72:38:82:79:
3d:70:0c:44:2b:2c:27:d2:70:e7:36:1c:75:de:01:
f4:09:82:78:7d:6c:4c:a8:ba:b8:60:ea:01:2e:8c:
55:86:1b:b7:45:d2:fc:4f:89:24:2c:39:53:34:19:
b4:e5:48:8e:bf:e5:3c:13:d1:57:1d:d4:b3:ef:a5:
7f:f1:f8:4d:90:e2:63:b1:bc:5b:56:20:dc:f5:56:
e3:fd:b8:a7:c8:47:cd:1f:d4:af:4c:bf:82:9f:a1:
93:23:22:01:53:e0:69:77:66:31:7c:45:28:25:c9:
67:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:38:F3:B9:F1:EB:8C:0C:B7:C9:2E:BF:92:25:92:B5:E4:C8:E6:9A
X509v3 Authority Key Identifier:
keyid:2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/6FA255F0CF9511F0BB07FA4DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.29.84.0/23
114.142.160.0/22
Signature Algorithm: sha256WithRSAEncryption
70:80:19:ea:c2:3f:1b:49:b1:38:72:d8:f6:fa:2b:f0:7f:2f:
38:58:9d:95:3e:fa:02:b4:30:33:20:26:31:8c:8e:fc:43:cf:
0a:12:7e:52:5e:10:4f:ee:07:bc:5b:87:cb:64:9d:3f:4a:4b:
6d:70:aa:c5:ad:11:60:2e:fc:cb:c3:05:a1:1a:f9:a5:a6:89:
22:67:db:a1:59:ff:5f:a3:6c:59:05:e1:7b:d2:32:c6:12:96:
bd:3f:fd:cb:10:6e:f9:d6:82:05:df:67:f3:96:91:d3:26:fb:
a3:4e:26:35:8d:a7:67:16:20:6d:d6:d2:e3:f9:0d:ef:26:3a:
69:91:85:5c:a5:58:54:cb:c5:a2:65:e2:3f:de:78:57:3f:37:
23:ee:6d:54:c4:1d:ec:61:b5:38:1a:e8:34:77:c8:44:7c:54:
98:b8:0c:9a:61:63:43:05:aa:e6:5e:6c:d6:7c:56:a6:1d:d5:
2e:93:d9:08:3e:1f:9c:c9:15:be:01:7b:05:0d:30:d5:0d:b0:
7a:41:d3:88:4e:40:06:5d:f8:73:eb:aa:21:cf:03:25:61:88:
f1:f8:3d:0c:e1:59:50:06:d9:72:cf:13:9f:bc:10:75:d1:cc:
4d:b9:96:9a:ec:b2:de:fc:f3:c1:64:c6:24:ce:d6:e7:88:e7:
7a:6d:0f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:09:26 2026 by rpki-client