
$ rpki-client -vvf rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/6585F720AD9911EB8E8DCF82C4F9AE02.roa
File: 6585F720AD9911EB8E8DCF82C4F9AE02.roa (raw, json)
Hash identifier: ZQ0tRy6D04/v0g80XcurqFzqLFGfof04wiOAL+prD7o=
Subject key identifier: BB:4B:FE:31:9A:0B:F3:A8:47:55:6B:B1:6B:92:73:68:D7:46:05:02
Certificate issuer: /CN=A913239C/serialNumber=C1C80E59FCBB7FD9D4ECFAC356A9574AD29DA526
Certificate serial: 06AB
Authority key identifier: C1:C8:0E:59:FC:BB:7F:D9:D4:EC:FA:C3:56:A9:57:4A:D2:9D:A5:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcgOWfy7f9nU7PrDVqlXStKdpSY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/6585F720AD9911EB8E8DCF82C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:46:42 +0000
ROA not before: Tue 08 Apr 2025 23:03:27 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 137080
IP address blocks: 103.166.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.crl
rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcgOWfy7f9nU7PrDVqlXStKdpSY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:07:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1707 (0x6ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913239C, serialNumber=C1C80E59FCBB7FD9D4ECFAC356A9574AD29DA526
Validity
Not Before: Apr 8 23:03:27 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3fcf2-0692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:8c:89:31:c5:5a:d0:9a:f5:4a:c7:0a:86:
64:dc:e8:51:06:e5:c9:78:45:e6:44:8a:a1:d3:8b:
6a:de:0c:5b:af:31:cf:f1:11:58:37:7c:d6:fa:3b:
34:45:ef:1b:75:0e:ef:04:7b:9b:64:2d:58:8a:88:
88:fa:c7:9a:59:cb:c8:4b:16:25:91:18:a7:db:6b:
17:63:13:28:0d:18:c5:e9:b7:4a:9d:19:c9:d5:2d:
9b:2f:18:11:ae:32:16:75:a9:0c:af:17:9f:e8:68:
4c:3d:46:bd:d8:78:b7:6f:fe:fc:39:c4:b3:82:7b:
98:22:c0:4b:53:f3:82:ab:ca:5f:62:b1:65:b8:4a:
65:7d:a2:70:51:dd:e7:fc:7f:50:50:14:3d:a2:3a:
1d:d5:5c:bb:ec:ed:23:e1:ed:80:33:3f:31:0a:6e:
a5:54:41:e9:1e:d2:54:4f:2e:da:53:37:43:a3:d5:
82:08:a3:18:9e:ac:ca:2c:02:3b:67:1c:9c:dc:fa:
a7:3e:f1:8a:d3:ff:8c:34:89:3e:c3:16:69:73:5e:
29:d7:6b:bd:96:67:4e:21:2b:8f:20:87:7f:16:c0:
42:7a:3b:46:e9:f5:a0:e8:1c:78:80:c4:96:19:b7:
c5:97:a2:10:20:14:fb:6c:ab:6c:09:57:b9:14:8f:
88:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4B:FE:31:9A:0B:F3:A8:47:55:6B:B1:6B:92:73:68:D7:46:05:02
X509v3 Authority Key Identifier:
keyid:C1:C8:0E:59:FC:BB:7F:D9:D4:EC:FA:C3:56:A9:57:4A:D2:9D:A5:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcgOWfy7f9nU7PrDVqlXStKdpSY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/6585F720AD9911EB8E8DCF82C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.166.18.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:75:ba:ca:91:0e:19:11:87:0f:3a:04:01:13:cd:bd:bd:db:
a8:7d:2b:a3:a3:66:76:f6:bd:68:0c:24:c1:dd:6d:7e:f0:a5:
62:95:36:fc:22:ee:fe:da:84:22:ca:e7:7d:11:60:d3:bc:4f:
6b:5b:2e:ea:87:de:76:ce:f3:b2:10:04:5c:9d:6b:af:e8:2e:
06:42:ad:25:a9:3a:a4:b9:18:ab:c5:20:12:43:7b:d3:bd:0d:
d2:4e:5d:b6:84:36:2a:ed:18:a0:87:83:18:8a:50:42:04:2e:
53:23:01:54:5c:b5:4a:ed:22:1d:ee:ae:cf:a3:ca:5b:ea:45:
86:31:d2:e5:74:a5:52:54:40:d3:da:0b:20:85:f2:14:6e:74:
de:c6:84:1a:2c:cf:b4:7d:a4:79:4e:e4:01:2c:8f:02:71:5b:
17:a0:7f:62:1d:ee:2d:13:77:57:dc:54:2b:3e:1e:37:33:49:
4d:34:e9:53:5c:c2:0e:ad:4a:f1:c9:09:c3:97:09:6d:e1:4d:
c7:31:36:29:ab:83:30:52:16:13:ef:99:cb:f2:94:a4:e0:38:
2e:4d:4d:c4:49:3c:0a:fe:8c:56:ff:73:65:0a:b6:b9:e1:2b:
55:89:a7:a1:7f:fe:ac:5b:1f:53:be:19:78:fe:e0:26:0c:4d:
60:2e:88:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:34:36 2026 by rpki-client