
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/710A095EB62A11EF9D01E53DC4F9AE02.roa
File: 710A095EB62A11EF9D01E53DC4F9AE02.roa (raw, json)
Hash identifier: DoI1H5cBVDVpM0o3Z6TBBwhDvf1Ij5PjDVqCV737dgA=
Subject key identifier: C7:C4:BF:E0:57:FB:03:AB:6E:F6:A9:F1:89:EE:38:4B:CE:70:9E:7B
Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial: 02B1
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/710A095EB62A11EF9D01E53DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:17:01 +0000
ROA not before: Wed 27 Aug 2025 02:37:45 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 395793
IP address blocks: 103.62.1.0/24 maxlen: 24
103.62.2.0/24 maxlen: 24
103.62.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 689 (0x2b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Validity
Not Before: Aug 27 02:37:45 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4748d-da14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a7:8a:a8:46:c4:a4:38:56:6d:61:5c:b1:fa:
cf:32:33:12:01:78:65:93:68:fa:cf:82:7e:9d:4b:
be:97:f0:a2:f0:57:64:cd:33:94:a8:93:79:0f:2e:
86:21:b6:02:1d:0f:11:84:46:98:aa:d4:f1:57:a3:
6b:56:57:2d:f4:5d:b0:2d:a1:52:76:d1:fc:50:32:
c3:4a:f6:a1:cd:02:3a:a8:35:aa:1e:cd:c1:ca:04:
53:a3:80:9f:d0:12:ca:cb:45:2b:d3:8e:46:92:81:
63:d8:7c:cf:76:27:9b:a4:7a:14:11:19:97:70:14:
4c:7a:37:7d:fa:13:c0:1f:c8:89:ea:01:04:80:e5:
08:d5:1e:83:d7:8b:5b:5f:b4:89:d9:99:95:af:7b:
96:6e:7d:c1:f1:2f:3e:6a:b6:33:1e:f3:dc:63:4b:
2c:33:aa:45:ee:1f:dd:62:77:9a:5a:b7:07:78:f7:
49:7c:b3:81:85:42:67:90:02:8e:08:2c:34:10:fe:
fb:8a:c1:1e:2a:3e:36:fe:28:fa:ac:13:7b:4c:85:
be:56:b6:d8:29:3e:6a:d4:5d:f8:ab:67:52:32:c1:
ca:58:bc:82:b7:e9:b7:7c:e6:94:33:ae:68:11:3e:
bc:eb:7d:c7:1e:5e:10:9c:bd:b2:93:41:2b:10:60:
4f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C4:BF:E0:57:FB:03:AB:6E:F6:A9:F1:89:EE:38:4B:CE:70:9E:7B
X509v3 Authority Key Identifier:
keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/710A095EB62A11EF9D01E53DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.62.1.0-103.62.3.255
Signature Algorithm: sha256WithRSAEncryption
1e:2f:fd:ac:c9:23:aa:2a:a9:8b:c3:a1:01:96:68:4b:8f:d6:
50:1b:e9:39:ea:a5:94:cb:3b:14:e0:70:f1:c8:d8:2a:f9:b0:
4b:40:26:30:fa:6d:22:90:93:73:ab:9a:24:75:85:12:88:8c:
a0:b3:28:de:23:ac:40:03:93:fd:7c:a4:83:67:25:97:bd:7e:
a8:85:e0:a4:6f:a5:68:ed:77:c3:03:42:bc:57:65:a0:ee:8d:
1b:ba:f2:33:cb:30:62:9a:0f:70:0e:16:bd:d0:5e:54:b5:0a:
6f:a1:3c:32:b9:1d:20:c9:0d:7a:4b:46:92:9d:ab:0a:cb:68:
74:50:5d:33:79:1b:42:77:b8:7a:e6:d6:f1:61:3d:c3:8b:6d:
22:63:3e:c6:c8:97:21:c9:65:07:6d:b3:e1:40:63:0c:00:f3:
c4:05:a5:1a:2a:67:4f:e5:32:fb:c7:9e:56:2e:5d:b4:d7:9e:
20:aa:c8:7b:41:fb:cc:83:ad:eb:21:44:3c:ad:c2:30:8c:d9:
db:d9:ca:a6:29:76:1f:af:f3:e0:7b:1a:0d:dd:6a:a4:5f:f3:
02:36:e7:72:12:21:b2:cf:83:0a:96:32:76:a2:57:5c:89:61:
10:f7:0f:d4:5b:ca:64:a9:f7:fa:c0:63:f7:1a:50:f6:24:ce:
ec:2b:b3:0c
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICArEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE4MTQxMTAvBgNVBAUTKDVDMDU2QjgwNjFBODYyMkMyQzA2QkI4NTc4NkU5REM2
MTM2MTRCQ0EwHhcNMjUwODI3MDIzNzQ1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzQ4ZC1kYTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0KeKqEbEpDhWbWFcsfrPMjMSAXhlk2j6z4J+nUu+l/Ci8FdkzTOUqJN5Dy6G
IbYCHQ8RhEaYqtTxV6NrVlct9F2wLaFSdtH8UDLDSvahzQI6qDWqHs3BygRTo4Cf
0BLKy0Ur045GkoFj2HzPdiebpHoUERmXcBRMejd9+hPAH8iJ6gEEgOUI1R6D14tb
X7SJ2ZmVr3uWbn3B8S8+arYzHvPcY0ssM6pF7h/dYneaWrcHePdJfLOBhUJnkAKO
CCw0EP77isEeKj42/ij6rBN7TIW+VrbYKT5q1F34q2dSMsHKWLyCt+m3fOaUM65o
ET68633HHl4QnL2yk0ErEGBPWQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFMfEv+BX
+wOrbvap8YnuOEvOcJ57MB8GA1UdIwQYMBaAFFwFa4BhqGIsLAa7hXhuncYTYUvK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTgxNC9EMzhBMTkxMjc0
NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lpd3NCcnVGZUc2ZHhoTmhT
OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEE4MTQvRDM4QTE5MTI3NDVFMTFFREJBNjg4NTE0QzRGOUFFMDIvNzEwQTA5NUVC
NjJBMTFFRjlEMDFFNTNEQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBABnPgEDBAJnPgAwDQYJKoZIhvcNAQELBQADggEBAB4v/azJI6oq
qYvDoQGWaEuP1lAb6TnqpZTLOxTgcPHI2Cr5sEtAJjD6bSKQk3OrmiR1hRKIjKCz
KN4jrEADk/18pINnJZe9fqiF4KRvpWjtd8MDQrxXZaDujRu68jPLMGKaD3AOFr3Q
XlS1Cm+hPDK5HSDJDXpLRpKdqwrLaHRQXTN5G0J3uHrm1vFhPcOLbSJjPsbIlyHJ
ZQdts+FAYwwA88QFpRoqZ0/lMvvHnlYuXbTXniCqyHtB+8yDreshRDytwjCM2dvZ
yqYpdh+v8+B7Gg3daqRf8wI253ISIbLPgwqWMnaiV1yJYRD3D9RbymSp9/rAY/ca
UPYkzuwrsww=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:22:06 2026 by rpki-client