
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/FD62B046DF1611ED81C1BE7CC4F9AE02.roa
File: FD62B046DF1611ED81C1BE7CC4F9AE02.roa (raw, json)
Hash identifier: RpPhdY8+tXmNKm2CO6PsrLMjG0gZZmTjNB6euQu9tho=
Subject key identifier: 84:FE:1E:8F:69:DC:5F:BB:44:16:CA:67:62:23:03:F2:95:FA:78:97
Certificate issuer: /CN=A913BB9E/serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416
Certificate serial: 0650
Authority key identifier: A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/FD62B046DF1611ED81C1BE7CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:50:56 +0000
ROA not before: Mon 28 Jul 2025 23:35:37 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 142412
IP address blocks: 103.168.6.0/23 maxlen: 24
2407:7a40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl
rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1616 (0x650)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BB9E, serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416
Validity
Not Before: Jul 28 23:35:37 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a40bff-7e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:69:af:80:4f:7a:e4:d0:55:2c:d3:3a:6e:17:
14:25:aa:e6:f8:c3:7f:56:0d:de:f5:a0:cc:a3:66:
0b:63:a2:2d:18:01:80:b9:ef:56:8b:ac:ae:40:1b:
ad:3d:7b:f2:f9:de:ee:e4:67:f7:15:b4:ad:4d:c3:
8a:4e:e9:c6:b9:34:7d:4b:99:04:09:62:c8:bb:cc:
cc:30:f8:79:71:75:26:32:ad:95:ac:9d:19:88:cd:
26:ad:de:d1:16:a8:ef:89:0b:51:b5:cb:f5:3b:95:
ed:b7:a1:3c:d7:de:4f:6a:31:d0:d3:67:43:76:e3:
73:fc:52:b8:2d:a2:a1:0c:2f:1b:da:6b:89:26:17:
29:5d:5d:bf:4a:08:70:d6:49:73:d5:3c:ba:b4:6f:
6b:ec:f2:a1:2a:d5:5a:aa:3d:92:14:1c:7a:28:90:
7d:45:bc:09:31:00:09:73:32:61:bd:b0:5b:cf:85:
e7:0d:56:13:83:c5:b6:84:b8:7c:45:1f:fb:dd:bc:
a3:f8:bd:9a:b4:53:7e:08:7b:ea:a1:86:9d:fd:d1:
2d:c3:cd:3f:0d:dc:1c:6d:37:74:4d:e7:d1:d8:c2:
f4:00:72:91:9d:01:31:4f:c3:18:a3:90:d6:5e:9d:
5e:33:2b:45:66:34:c1:ac:70:94:41:ef:f2:ee:08:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FE:1E:8F:69:DC:5F:BB:44:16:CA:67:62:23:03:F2:95:FA:78:97
X509v3 Authority Key Identifier:
keyid:A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/FD62B046DF1611ED81C1BE7CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.168.6.0/23
IPv6:
2407:7a40::/32
Signature Algorithm: sha256WithRSAEncryption
49:12:3a:4b:dd:e6:82:ea:7e:39:e6:59:bb:d1:39:79:95:37:
b7:76:3a:db:14:de:cf:55:0b:32:7d:eb:a2:f4:40:a1:95:52:
cb:1c:e8:3c:f7:9f:6f:90:91:b2:e8:d8:d4:d3:5a:d7:00:15:
1b:2a:64:7f:d4:2b:8d:9e:10:4d:92:d5:cd:51:ea:ce:c4:99:
09:b0:43:7a:1e:cc:37:df:43:83:5e:9a:aa:36:35:a1:00:5c:
38:86:05:00:72:47:68:b6:9e:4c:1f:71:2a:4a:cf:98:36:57:
ed:bc:ce:3d:6c:a5:ad:f0:69:c0:96:fd:cc:3f:17:4a:88:f6:
b4:85:8a:25:a5:cf:b0:db:af:72:7c:cb:fb:c1:23:ff:5e:d6:
2d:0d:2e:c5:42:e0:a5:2a:37:5f:e6:ee:6c:73:23:70:38:a3:
e7:6c:52:90:e1:aa:b2:4a:fe:90:ac:0a:4f:1f:ba:8f:7f:b0:
32:d1:16:a3:df:83:22:fd:6a:a4:f3:d5:5c:9b:8d:da:e5:54:
94:54:b5:07:82:15:c6:b3:2a:2c:e9:9f:31:8b:55:f7:11:fc:
73:f4:20:17:ce:26:5a:75:3b:91:7e:dc:20:a0:2c:60:70:d0:
12:a4:be:39:5f:45:ba:63:07:79:e0:3e:86:69:ad:be:09:64:
68:03:b3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:54:44 2026 by rpki-client