
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/62CCFF308C7211EB98A6DD43C4F9AE02.roa
File: 62CCFF308C7211EB98A6DD43C4F9AE02.roa (raw, json)
Hash identifier: WxAIRYRE7eTQzHuyOnAErEM5WvplkaMzE1ad9+U5aeI=
Subject key identifier: 69:87:21:5B:41:28:AC:88:F6:2F:74:5C:87:BF:15:4C:29:6D:A6:E1
Certificate issuer: /CN=A9124803/serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77
Certificate serial: 06DF
Authority key identifier: 1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/62CCFF308C7211EB98A6DD43C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:44:40 +0000
ROA not before: Wed 02 Apr 2025 22:54:18 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 138689
IP address blocks: 103.136.164.0/22 maxlen: 22
103.136.164.0/24 maxlen: 24
103.136.165.0/24 maxlen: 24
103.136.166.0/24 maxlen: 24
103.136.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl
rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1759 (0x6df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124803, serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77
Validity
Not Before: Apr 2 22:54:18 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3fc78-c368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ed:00:ee:c5:c3:10:f6:51:e9:7d:ef:f8:3f:
9d:d2:ad:dd:44:1d:96:42:d4:90:77:a8:35:39:bc:
8b:06:44:8e:d4:54:6f:be:94:2e:92:d4:a4:b6:80:
db:ed:d3:a3:91:2b:75:c4:c0:b2:15:55:2b:6d:77:
55:c3:cc:29:7b:24:2b:82:d3:1c:c7:3b:2f:c0:d9:
19:c7:24:6c:20:b1:4a:e7:da:7d:1c:0d:a3:2b:27:
90:82:44:00:03:99:62:11:cb:c3:3a:6a:66:7b:ac:
2f:20:c2:66:9e:64:3e:0e:3c:80:24:d6:8b:b7:16:
0e:16:a5:10:48:5e:0f:77:b9:50:62:20:78:8b:35:
c0:bf:08:7b:5b:11:47:7b:4d:78:b0:b2:1e:89:d2:
bf:e1:ec:8c:23:f1:13:e5:3f:63:5b:bc:cd:06:a0:
8e:cc:7e:86:b1:ab:56:65:fe:8d:09:41:aa:a8:3c:
20:c2:5b:80:90:3a:5e:1c:81:98:44:8f:ba:a5:87:
ce:14:b5:c2:39:c7:3f:6b:87:cd:7d:28:d0:e2:bb:
89:ac:89:3e:c0:ed:b8:99:ab:60:af:07:30:74:09:
66:ef:36:4c:22:64:e4:8b:f7:6b:0e:0e:7a:e2:87:
84:a9:8d:5a:b3:aa:0f:1a:d3:56:38:02:df:d2:8c:
b8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:87:21:5B:41:28:AC:88:F6:2F:74:5C:87:BF:15:4C:29:6D:A6:E1
X509v3 Authority Key Identifier:
keyid:1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/62CCFF308C7211EB98A6DD43C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.136.164.0/22
Signature Algorithm: sha256WithRSAEncryption
e3:9d:01:df:45:c1:23:55:15:98:ce:f9:b8:6e:ed:6e:f6:20:
8d:32:a5:a4:d6:5f:1a:fa:4e:9f:59:50:b8:7c:65:5c:ee:e9:
a9:aa:ec:ec:86:e8:99:69:81:07:93:2b:da:f9:fa:82:83:a1:
5c:91:ef:5c:8c:17:8c:9f:78:36:cd:13:ae:cc:28:3d:1d:0c:
07:7e:55:bc:ae:5e:b8:b3:80:75:07:5f:3d:e5:7f:96:97:1e:
a0:17:39:86:86:de:9e:20:d8:e1:0e:e9:e5:41:e8:93:4f:ab:
44:25:02:04:ac:2c:da:1e:80:23:c9:09:0f:3f:24:da:af:14:
0b:0a:4a:4f:76:ea:a7:7f:b2:c8:be:5c:8f:0d:c5:52:42:70:
a0:b0:f1:ed:10:45:d5:64:0c:b8:26:27:cb:12:3d:97:70:1a:
a3:7f:4e:59:73:29:7c:bc:a9:a4:e2:8d:10:f9:8f:d6:80:aa:
6f:5e:20:86:31:88:6a:4c:a9:14:2b:fd:8f:a1:47:a4:14:fb:
ee:ed:eb:e8:05:94:5f:03:0e:68:b5:3f:2f:3b:aa:b4:d7:dc:
b1:06:78:dc:bd:e5:6e:3f:5f:79:bb:eb:22:4d:94:70:f9:83:
80:30:55:5e:a5:18:ab:99:42:4f:ec:d3:62:d0:6d:5b:50:0c:
5b:76:c9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:16:20 2026 by rpki-client