
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/62743016CC1111EFA5744A6FC4F9AE02.roa
File: 62743016CC1111EFA5744A6FC4F9AE02.roa (raw, json)
Hash identifier: hlc/zBoAtbTj6NsgQPISupfKKjQQ309kzeQx+JZUlfI=
Subject key identifier: C5:ED:38:FC:A4:0E:EE:9E:63:28:E6:58:11:BA:F9:D2:C7:2C:3C:E9
Certificate issuer: /CN=A913D125/serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C
Certificate serial: E0
Authority key identifier: 6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/62743016CC1111EFA5744A6FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:14:42 +0000
ROA not before: Thu 29 Jan 2026 05:29:10 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 153487
IP address blocks: 161.248.102.0/23 maxlen: 23
161.248.102.0/24 maxlen: 24
161.248.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl
rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:55:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224 (0xe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D125, serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C
Validity
Not Before: Jan 29 05:29:10 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a41fa2-639a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:01:85:d0:9f:cf:d4:d3:62:7a:79:6c:3d:8e:
4d:76:3b:35:97:7d:2f:5f:2d:75:3a:98:39:38:e3:
9e:e5:a3:1f:51:bb:c5:6a:52:ff:c6:5f:29:6e:5d:
7f:8d:2d:35:02:3a:4f:ae:be:98:50:1c:45:8e:d8:
26:d1:48:d4:f9:32:cb:59:d1:ff:f2:80:c6:92:79:
74:32:66:c0:21:b0:7c:dc:bf:71:2f:44:be:06:fa:
81:86:ab:01:c9:e8:f1:6a:19:c7:96:5e:ed:af:b5:
a1:d5:b6:02:ec:97:a9:58:ef:f6:82:ea:fa:f0:ba:
6d:6a:9c:78:02:0d:62:38:75:30:ba:d9:c5:fe:d1:
d5:f3:b0:1f:46:3f:e4:27:75:69:dc:0e:db:3c:9a:
78:cf:c4:5e:1d:89:26:06:af:24:44:ae:c1:be:ad:
0a:f8:52:fb:0a:07:fe:7c:b2:0e:5f:af:d6:55:5f:
06:24:9d:86:c7:bc:a6:1a:4f:da:91:1b:13:bf:aa:
8c:31:08:97:2e:24:0b:79:74:34:36:a0:67:a7:aa:
c9:61:f3:ef:a1:56:cd:f4:e9:66:1f:46:12:96:53:
29:91:0b:bf:9d:ba:9f:1d:4b:4b:43:a4:71:c7:ab:
3c:c6:1b:2c:eb:5f:d6:01:69:bd:b1:da:e1:ff:36:
9c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:ED:38:FC:A4:0E:EE:9E:63:28:E6:58:11:BA:F9:D2:C7:2C:3C:E9
X509v3 Authority Key Identifier:
keyid:6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/62743016CC1111EFA5744A6FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.102.0/23
Signature Algorithm: sha256WithRSAEncryption
13:ec:84:24:5f:1b:96:f5:35:e0:17:ae:6d:c4:6d:06:7e:83:
89:5e:d6:2d:f0:d0:74:90:59:32:5b:c6:b1:61:39:bd:a5:9d:
0f:5d:0d:30:4e:47:d8:f6:c9:49:83:67:36:cd:45:53:31:e3:
11:4d:3a:ce:02:27:77:74:45:96:ed:38:b7:99:98:82:01:ef:
f4:e2:83:50:38:b2:53:f5:36:a4:72:6b:d4:48:09:87:38:10:
c4:50:8b:02:33:0b:5c:d1:71:a1:b7:ba:9f:16:06:29:ac:a7:
3d:84:4d:51:e6:1c:c6:58:22:e5:2f:4d:80:6e:e7:e8:9f:41:
8b:6b:86:b8:4d:d3:e4:3f:19:2d:84:7a:fb:4c:df:1a:c3:fa:
40:88:69:ed:64:db:75:d9:7a:1c:79:03:cb:09:84:15:9e:a8:
93:43:02:4a:92:56:10:84:c7:3e:0c:9f:45:5e:bb:9f:9d:01:
9d:d9:d0:f6:0c:87:fb:63:c0:4a:fe:45:bb:c4:5c:e0:bb:64:
a6:bb:35:d1:eb:a7:5e:e3:32:85:7a:4b:12:14:6e:b9:ee:7c:
6d:87:4c:d0:5c:f1:a1:da:2d:a0:2b:25:fd:18:52:7a:7c:35:
c5:b8:c7:0a:9d:06:af:06:14:d3:81:65:55:5f:ba:25:a6:36:
dc:a3:f6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:22 2026 by rpki-client