
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/AEACE2F45FED11F1B089404D7B47A888.roa
File: AEACE2F45FED11F1B089404D7B47A888.roa (raw, json)
Hash identifier: 8qt7Nk+q7mX3XH4uLY+f1lds3c65NXoG7uS8l6CZVxE=
Subject key identifier: 96:28:7B:45:5A:68:7C:5A:C9:12:BF:03:84:A8:70:36:25:86:42:75
Certificate issuer: /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Certificate serial: 0BFB
Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/AEACE2F45FED11F1B089404D7B47A888.roa
Signing time: Thu 04 Jun 2026 08:16:27 +0000
ROA not before: Thu 04 Jun 2026 08:16:27 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 216138
IP address blocks: 103.6.20.0/24 maxlen: 24
103.6.21.0/24 maxlen: 24
103.6.22.0/24 maxlen: 24
103.6.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:58:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3067 (0xbfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Validity
Not Before: Jun 4 08:16:27 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a21345b-cf8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:eb:5d:dc:51:6e:0f:57:d6:a2:42:be:b1:3a:
f6:b1:9c:31:4f:00:3b:d3:d5:d4:35:11:99:9f:21:
c3:81:cd:83:c4:c3:0f:54:e5:8e:3b:75:c5:68:f3:
bb:29:be:d4:1d:8d:29:fd:40:b5:5f:8f:89:6c:f5:
6d:78:b0:13:99:0e:ff:fe:10:5b:fd:c7:b8:97:66:
85:10:ac:e2:14:11:05:8c:0c:8b:0a:01:2c:b9:1b:
8b:de:cf:d3:71:5f:39:e7:97:5f:cd:62:96:42:66:
fd:19:f6:da:ce:be:e6:f4:10:7b:08:3a:94:10:56:
b2:d4:e1:cc:be:ad:78:ba:a6:5d:4d:ba:67:59:b3:
c2:68:06:37:c4:e9:94:09:de:40:3c:21:ca:08:2a:
dd:e7:76:d1:95:f9:41:5e:53:e8:74:39:f2:13:02:
08:85:c9:51:e2:ee:e1:b4:0a:48:77:49:24:e1:7b:
af:71:1e:72:0a:58:ef:48:5c:56:09:b1:ba:c1:f5:
19:00:a3:19:a5:92:c0:43:2d:2f:19:79:9e:ab:1f:
0b:57:b1:48:a8:b6:e6:4b:c8:21:ed:d5:2a:89:5b:
7f:74:58:f8:35:b2:35:54:dd:db:98:94:dd:1d:3f:
32:b5:7f:87:4b:1b:28:0f:36:af:46:32:db:8b:de:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:28:7B:45:5A:68:7C:5A:C9:12:BF:03:84:A8:70:36:25:86:42:75
X509v3 Authority Key Identifier:
keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/AEACE2F45FED11F1B089404D7B47A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.6.20.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:a9:08:f5:ad:8b:ee:39:1b:be:79:06:35:ab:5f:72:7f:77:
37:8d:1e:92:c0:b3:9d:8d:7e:7b:26:c7:bc:d5:48:62:cf:7a:
53:82:79:96:4f:03:9c:ba:36:fb:73:5a:d0:e0:3c:27:30:0f:
62:95:85:ca:b1:91:18:fd:90:45:31:2a:fe:36:d8:ff:d8:ef:
d8:ea:26:0a:45:02:65:93:d6:37:fa:dc:82:cc:52:85:08:7f:
3f:4a:7e:f3:a6:6e:41:20:e9:f0:63:62:c7:2e:c3:32:4c:9a:
6a:c8:e3:2b:4f:34:14:9d:ee:79:b4:d2:76:5c:bc:55:1f:00:
c6:a9:b1:63:9e:ed:5d:b1:ff:28:b9:58:70:de:46:8e:dc:79:
91:54:0c:9b:29:ab:43:6a:c3:22:96:13:74:76:5f:86:a1:3b:
83:d9:ef:f6:91:d4:e3:51:ad:c4:e6:6c:40:de:b5:3c:c7:d9:
10:96:31:7f:54:12:fb:b2:58:b7:d1:1c:47:8b:45:14:d7:a1:
87:ca:4f:79:7e:cd:d3:49:58:67:8a:c9:19:48:92:16:32:cf:
d6:1c:40:27:45:b4:69:56:c8:9b:e0:c1:bb:5f:0e:04:fe:2a:
53:e2:80:a1:34:c6:b7:93:6c:03:e8:4a:ad:e6:a3:ec:ae:ff:
ef:1a:d0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:39:50 2026 by rpki-client