
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/4C6FB118CDEC11EB85313B22C4F9AE02.roa
File: 4C6FB118CDEC11EB85313B22C4F9AE02.roa (raw, json)
Hash identifier: AZkz8RkQqtzDCsqbwXmPSPpVGalZTJZrGrvGM5gcWDQ=
Subject key identifier: 54:A5:A7:32:E5:5D:4F:AF:29:B3:93:83:93:8F:62:3C:33:B0:BA:66
Certificate issuer: /CN=A911F1E6/serialNumber=606580F76ED392537D5FCA259694CF9261417C41
Certificate serial: 065C
Authority key identifier: 60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/4C6FB118CDEC11EB85313B22C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:49:23 +0000
ROA not before: Wed 28 Jan 2026 22:19:20 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 142430
IP address blocks: 103.168.66.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl
rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1628 (0x65c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F1E6, serialNumber=606580F76ED392537D5FCA259694CF9261417C41
Validity
Not Before: Jan 28 22:19:20 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a46e13-538e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f6:b8:72:42:89:95:af:d9:8f:97:f2:ad:ae:
67:fa:66:11:4b:f5:f1:21:e0:80:fb:09:55:d8:59:
af:1b:84:39:3e:1c:5d:f6:a5:8d:ee:a2:9b:f4:76:
47:c5:12:88:23:08:8a:a2:7d:29:51:ff:03:ab:0c:
da:cc:b3:74:36:ab:28:90:43:a8:a5:c3:52:68:8e:
51:73:f0:e5:17:7b:5d:19:00:3f:d3:b3:6e:46:06:
bf:02:02:9b:9a:75:7f:27:1d:18:f2:c7:c1:8d:78:
e5:eb:e6:e8:23:3f:9c:57:bb:e6:da:de:eb:da:a4:
b6:a6:ca:0d:f5:4a:26:6d:3c:b1:3a:94:e5:89:39:
bc:d0:01:9a:5b:99:9f:bd:9e:6a:63:5d:ca:a4:f7:
bf:f5:94:08:dc:28:9a:bc:51:35:3a:fb:1e:0c:39:
b3:5d:ca:a0:2f:3c:22:e3:3e:86:43:6b:e7:87:2f:
a7:d0:55:32:88:d6:4c:60:48:b8:25:39:de:07:e0:
54:c6:0a:55:3e:0a:14:7c:05:9c:6d:c7:e4:12:57:
12:8c:4c:9c:8c:4a:91:fd:f8:1c:c3:37:7f:79:50:
66:46:f8:8b:df:d6:ab:22:26:78:e0:6a:fa:b7:e2:
a1:cd:3f:dd:f7:36:a4:d2:4e:21:d4:55:25:06:e6:
1c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A5:A7:32:E5:5D:4F:AF:29:B3:93:83:93:8F:62:3C:33:B0:BA:66
X509v3 Authority Key Identifier:
keyid:60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/4C6FB118CDEC11EB85313B22C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.168.66.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:64:4b:00:02:a8:6a:3c:16:88:74:9b:7c:73:15:b1:7c:8e:
ab:87:05:b8:5f:4f:40:dd:48:90:2f:eb:78:7b:e7:01:56:80:
f6:ab:be:15:81:3c:34:97:b9:a8:ff:63:00:91:55:83:e4:a9:
72:72:3b:90:08:8f:1d:21:c8:df:6a:fa:92:1b:a7:d4:e7:c5:
6a:91:70:75:ad:d5:72:fd:32:b6:f0:ff:fe:93:7b:0b:89:a1:
ad:e7:01:5e:1f:75:af:db:08:08:fd:8d:a6:4e:e3:6f:de:37:
17:53:56:9a:38:4b:2a:f2:48:ba:33:36:e1:b2:42:4a:ee:5c:
97:ec:46:14:9a:f0:b2:bc:ed:2d:00:7c:86:5c:52:5c:e2:5a:
e4:29:9d:a3:8e:3c:ba:55:78:25:ee:d0:87:a1:62:53:01:af:
ed:57:01:2a:15:6c:5b:7e:3b:00:05:b0:88:fc:9a:15:73:e0:
91:cb:f1:bb:c0:f1:26:20:52:1e:52:ca:26:b3:1b:72:60:d4:
3f:8a:c2:f1:26:f7:34:02:bb:a4:c3:9a:55:3b:c0:b2:46:23:
40:14:40:c8:c7:00:45:40:4a:a0:9d:6e:5b:3a:14:79:e7:7e:
72:5e:f3:3d:31:9a:a7:04:25:75:60:d7:7e:48:9e:b8:77:81:
96:71:55:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:07:32 2026 by rpki-client