
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/688AF35CC09511EC8CFFDB10C4F9AE02.roa
File: 688AF35CC09511EC8CFFDB10C4F9AE02.roa (raw, json)
Hash identifier: GmrvF9q2dTq3b8GyefG/oexNHNjvwnXO2pwjnxyLh6s=
Subject key identifier: F4:78:3F:94:6B:FE:0E:16:27:BB:1C:8E:F8:64:B8:EE:12:B3:2B:56
Certificate issuer: /CN=A913CB5F/serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99
Certificate serial: 0405
Authority key identifier: F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/688AF35CC09511EC8CFFDB10C4F9AE02.roa
Signing time: Sun 07 Jun 2026 00:30:21 +0000
ROA not before: Sun 07 Jun 2026 00:30:20 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 132372
IP address blocks: 103.186.116.0/24 maxlen: 24
103.186.117.0/24 maxlen: 24
2001:df0:a8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl
rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:27:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1029 (0x405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CB5F, serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99
Validity
Not Before: Jun 7 00:30:20 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a24bb9c-e378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c8:16:7b:dc:63:e3:b3:23:18:36:d9:01:d3:
9c:a5:9c:1f:95:41:4e:e1:17:ef:13:81:f3:75:82:
ff:b9:20:da:23:94:27:42:34:4d:5b:89:d4:87:7a:
f7:cd:3b:c7:20:86:0d:6c:5c:d4:5c:3f:b6:fe:45:
d5:de:8a:27:cc:87:38:24:79:72:6f:79:5d:c8:3d:
1d:78:4d:e7:4f:c2:db:21:d6:e2:39:dc:ac:e1:d8:
ba:32:d5:ad:64:63:e2:ad:c7:36:83:f3:27:d2:77:
2d:05:92:12:65:56:72:6a:7a:9f:9b:7b:b5:ca:9f:
67:93:d3:ee:2d:70:e1:0a:d8:9e:11:e3:37:3e:26:
ea:45:8a:a8:17:a2:87:ef:f5:d0:83:52:40:65:d9:
a4:a7:bf:ae:7d:5a:93:a9:3b:49:ab:1d:7c:8c:c2:
e3:4d:fb:f7:cc:5f:78:bc:13:e5:a8:01:1d:f1:fb:
0a:d2:99:ca:fc:00:27:05:0f:78:29:f1:93:87:53:
f3:14:0f:9a:44:55:46:44:b5:04:70:3c:0f:4b:99:
db:10:43:33:fd:70:8b:22:89:b3:36:f0:61:0e:2d:
d2:5f:45:db:e4:e7:25:9f:91:fb:75:10:85:dc:9c:
e4:5d:20:a4:fa:86:b8:1f:36:0a:8e:b2:a2:36:11:
0b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:78:3F:94:6B:FE:0E:16:27:BB:1C:8E:F8:64:B8:EE:12:B3:2B:56
X509v3 Authority Key Identifier:
keyid:F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/688AF35CC09511EC8CFFDB10C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.186.116.0/23
IPv6:
2001:df0:a8c0::/48
Signature Algorithm: sha256WithRSAEncryption
90:63:b1:0f:5a:65:59:8b:8e:96:34:09:42:fa:5b:2f:4a:bb:
08:c2:1b:84:d2:00:fe:a3:63:07:c4:a3:ca:28:5a:f9:9c:03:
c2:a5:22:23:eb:01:2c:23:27:45:20:0a:02:77:ed:6a:5d:9d:
de:ad:62:b5:71:e0:58:c9:86:23:8f:92:aa:ab:89:13:68:ab:
b8:a9:d2:ca:6e:b4:46:fd:72:bd:e1:52:5e:e1:49:e0:ed:15:
80:55:4f:3a:e2:7d:1f:4e:df:c6:b0:a1:2a:ff:75:76:e7:c8:
68:0a:7e:0b:ea:f4:04:c3:fa:a8:30:92:2d:ae:a3:53:80:58:
59:8e:ec:90:fe:71:25:73:a5:8e:ef:02:29:a0:c0:47:49:60:
4e:57:cd:78:74:6f:f1:e7:6b:2a:67:7e:f6:0a:62:46:56:13:
55:50:74:09:e3:dd:88:98:31:bc:9c:a1:f2:00:b3:59:ae:b7:
3f:6b:c7:37:df:40:cf:5b:a0:b2:48:0b:b7:0d:76:66:c7:66:
e5:9b:35:29:f9:2c:c5:66:ea:26:0a:b1:09:a2:15:77:73:96:
78:91:13:1e:21:f0:8d:a9:64:fc:38:e0:40:c1:53:29:2e:57:
13:9b:0e:3b:fc:06:fb:8a:02:b8:67:02:34:89:42:7b:8e:28:
cf:5e:5b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:14:42 2026 by rpki-client