
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/6DAFB1EAEA7E11EF93A91726C4F9AE02.roa
File: 6DAFB1EAEA7E11EF93A91726C4F9AE02.roa (raw, json)
Hash identifier: 0gG/vzv2YpG/iP82tjYo7K3pN2xfdypYInw7S+HU64o=
Subject key identifier: 59:06:51:85:03:6A:16:59:4C:F2:15:DB:81:C1:6A:1C:07:2B:0A:21
Certificate issuer: /CN=A912F62D/serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D
Certificate serial: FF
Authority key identifier: 54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/6DAFB1EAEA7E11EF93A91726C4F9AE02.roa
Signing time: Thu 11 Jun 2026 08:36:57 +0000
ROA not before: Thu 11 Jun 2026 08:36:57 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 4764
IP address blocks: 203.31.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl
rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:21:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F62D, serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D
Validity
Not Before: Jun 11 08:36:57 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a2a73a9-be30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:f5:4e:92:a7:5b:db:86:29:a7:ed:45:35:
0a:8b:23:a4:3c:0c:e6:de:21:87:d1:4f:a0:37:41:
a8:1d:08:b1:62:83:5f:91:b2:a2:fc:04:ab:3e:56:
7f:86:57:4a:1e:ff:0b:2f:d1:8a:6a:7f:6b:f6:08:
26:62:ce:8c:6c:25:a5:ca:99:9c:24:54:ad:c7:69:
53:b3:e4:a3:09:66:d5:80:94:2e:dd:42:4b:2c:9a:
d0:8e:6c:98:7a:e8:e3:2c:fe:70:81:d0:a4:c0:95:
56:d3:c4:cc:9d:e3:1c:02:c4:22:c6:e5:0e:b3:7a:
44:65:bb:dd:13:37:ac:f1:df:bf:9b:e1:26:87:2e:
8f:3e:24:8d:bc:a1:1d:40:6b:e0:4f:59:a5:75:6f:
ab:ca:47:17:88:cd:5a:90:d6:09:1e:f1:be:93:d7:
37:41:5c:b3:1c:56:44:16:cb:63:bd:29:e8:c3:e8:
10:7d:04:e9:66:13:9f:ba:a0:48:ad:ba:43:9e:fa:
cc:8d:d2:45:1c:bd:c0:7b:a6:5e:4b:af:1a:c4:46:
4a:45:ea:3c:99:b8:81:0a:8d:19:66:e9:3e:4c:f1:
e6:78:c8:1b:df:4b:da:c8:6a:c4:1d:01:d7:81:b9:
3f:25:a1:80:31:c2:77:79:a1:ab:88:9e:c9:e6:a1:
58:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:06:51:85:03:6A:16:59:4C:F2:15:DB:81:C1:6A:1C:07:2B:0A:21
X509v3 Authority Key Identifier:
keyid:54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/6DAFB1EAEA7E11EF93A91726C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.31.96.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:d1:9c:0d:e4:45:58:e1:a5:39:28:1e:65:be:93:3b:fa:38:
08:51:e7:60:73:a7:42:5e:e8:ab:b4:a8:1e:90:86:9a:2e:d6:
a2:7a:6f:69:df:c1:43:f1:dc:18:b7:32:d8:d8:cb:cc:87:d9:
53:eb:16:30:c5:8a:4c:24:34:96:cf:29:bf:80:bb:72:2f:5b:
eb:e9:6c:4e:60:30:90:ba:90:68:71:d6:ce:d3:90:a3:8b:1c:
9f:4a:5a:d4:f3:05:4e:19:29:24:31:69:d5:a2:da:1f:43:82:
d9:b0:5d:fc:12:28:17:db:83:a2:c2:22:df:5e:06:2a:00:a4:
58:43:22:b4:80:7d:07:fb:67:00:98:23:d5:3f:95:5b:e0:8e:
49:46:c7:73:18:cd:d6:45:c5:80:ab:89:2e:8d:92:50:a4:03:
73:da:19:1e:e0:e1:88:66:b2:5b:81:7f:29:45:d0:64:93:5e:
7e:d5:09:33:c7:04:4c:b1:e9:65:56:9b:ea:08:d7:6f:32:13:
06:35:eb:b0:64:bf:e0:24:ca:0f:38:6a:be:0a:89:67:97:ff:
cb:d5:06:85:8c:75:df:de:6b:8c:1d:0c:a6:22:f9:bb:92:3a:
3c:a1:37:96:fe:f3:b9:35:75:bb:11:49:3f:c4:27:9a:a0:e2:
83:a8:6d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:30:43 2026 by rpki-client