
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/63401AAAB35011F19B6C7AEB3511F970.roa
File: 63401AAAB35011F19B6C7AEB3511F970.roa (raw, json)
Hash identifier: Zlckh2z2Au/JfrnsWj+x1Nz6rXBQuPRcjSGFmuHl57U=
Subject key identifier: F9:E5:53:AA:38:2E:FA:BA:77:9A:61:C0:5D:66:90:49:39:B2:CB:D5
Certificate issuer: /CN=A913089B/serialNumber=403F2E7E4DAB13C419C68690C9499547F2C58FC4
Certificate serial: 0110
Authority key identifier: 40:3F:2E:7E:4D:AB:13:C4:19:C6:86:90:C9:49:95:47:F2:C5:8F:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/63401AAAB35011F19B6C7AEB3511F970.roa
Signing time: Mon 21 Sep 2026 06:20:35 +0000
ROA not before: Mon 21 Sep 2026 06:20:35 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 134548
IP address blocks: 27.123.232.0/22 maxlen: 24
45.114.108.0/22 maxlen: 24
45.116.144.0/22 maxlen: 24
103.14.112.0/22 maxlen: 24
103.56.192.0/22 maxlen: 24
103.71.32.0/22 maxlen: 24
103.73.88.0/22 maxlen: 24
103.75.16.0/22 maxlen: 24
103.88.184.0/22 maxlen: 24
103.214.32.0/22 maxlen: 24
103.243.128.0/22 maxlen: 24
116.204.244.0/22 maxlen: 24
117.18.224.0/22 maxlen: 24
122.10.0.0/18 maxlen: 24
122.10.64.0/20 maxlen: 24
144.48.56.0/22 maxlen: 24
150.129.152.0/22 maxlen: 24
157.119.112.0/22 maxlen: 24
216.250.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl
rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913089B, serialNumber=403F2E7E4DAB13C419C68690C9499547F2C58FC4
Validity
Not Before: Sep 21 06:20:35 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6ab0ccb2-8278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bb:93:5f:df:68:02:0d:51:0b:a8:db:f5:c7:
91:61:58:86:87:bb:3d:4f:7b:89:7a:84:f1:f0:7f:
64:98:b8:52:96:56:b8:aa:b4:49:2d:1e:ef:b9:03:
9b:7b:21:c0:f0:dc:ff:1f:67:42:05:42:81:dc:34:
75:d2:12:01:69:95:a6:a3:f9:c9:19:50:b6:8e:04:
75:f0:f1:9b:ed:42:71:c7:88:1c:35:40:c3:73:df:
c4:ca:98:aa:a4:89:05:6d:6a:c3:07:4b:6e:42:6a:
25:30:97:67:fd:24:4f:89:7e:45:58:bf:51:b9:9d:
2e:a9:9e:06:56:92:2f:2e:04:9a:5a:f7:8e:7a:b5:
6a:14:fb:2f:a0:54:63:da:86:3e:52:a2:e4:b0:54:
b9:76:c2:57:60:42:82:a0:27:a3:04:b0:31:de:0c:
a4:aa:4f:fe:2b:43:0c:65:28:7b:a2:42:6b:06:3c:
ad:68:2c:c1:de:4c:c7:98:d5:a3:64:93:5c:c7:06:
ff:dc:4e:61:51:fd:27:69:9f:24:7a:40:d4:66:4e:
17:3c:7a:20:f2:49:4a:e9:40:9d:05:59:e9:66:c7:
61:e1:6c:19:09:70:12:b2:39:05:e7:70:d5:e7:cf:
a6:a4:ab:66:0b:f0:be:cf:5e:71:a8:f5:7f:e1:37:
82:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E5:53:AA:38:2E:FA:BA:77:9A:61:C0:5D:66:90:49:39:B2:CB:D5
X509v3 Authority Key Identifier:
keyid:40:3F:2E:7E:4D:AB:13:C4:19:C6:86:90:C9:49:95:47:F2:C5:8F:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/63401AAAB35011F19B6C7AEB3511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
27.123.232.0/22
45.114.108.0/22
45.116.144.0/22
103.14.112.0/22
103.56.192.0/22
103.71.32.0/22
103.73.88.0/22
103.75.16.0/22
103.88.184.0/22
103.214.32.0/22
103.243.128.0/22
116.204.244.0/22
117.18.224.0/22
122.10.0.0-122.10.79.255
144.48.56.0/22
150.129.152.0/22
157.119.112.0/22
216.250.108.0/22
Signature Algorithm: sha256WithRSAEncryption
08:4e:fe:0d:1d:49:b7:f5:2f:7b:7c:7c:82:45:30:a8:fc:bc:
e5:51:3c:06:24:e6:8f:3b:f7:e0:dd:bd:88:c8:f4:97:0b:51:
70:71:a4:28:4e:16:47:c6:15:9d:db:fc:c7:1d:ae:00:e6:5c:
52:bb:4a:d0:a2:82:8e:6b:84:d3:6b:5f:7a:b8:ce:28:fe:21:
2c:f9:27:14:dd:a2:d3:a8:56:da:a7:fe:63:ed:54:e2:14:0e:
c3:19:4a:2c:db:35:c3:6e:df:01:7e:f5:f1:c9:92:86:8b:a3:
c1:79:8b:d8:88:10:ed:d7:d2:ba:86:9c:f8:2e:29:c2:fa:ec:
6f:ab:88:13:b5:5e:d3:a3:27:33:95:be:f6:82:ab:05:ae:6a:
5f:57:c9:3f:e3:a1:a3:71:1d:72:7f:38:de:3c:7f:e7:14:3c:
6d:bc:d9:cd:4e:39:4c:c9:04:6b:37:40:6e:b8:1a:75:16:4d:
a7:97:76:8c:6d:ed:ca:29:7f:f9:f8:7f:2f:6f:3a:fd:8a:47:
cf:99:79:28:58:60:02:66:2c:f3:99:47:0d:3c:62:18:07:0b:
56:af:8c:13:f7:25:36:d1:3f:d3:55:20:7a:5d:d9:47:64:80:
ae:64:83:3b:25:ee:7a:0d:a9:04:38:b0:10:c1:07:b5:b6:a0:
0c:11:26:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:45:06 2026 by rpki-client