
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/606EB6AE240911EDBFA59C27C4F9AE02.roa
File: 606EB6AE240911EDBFA59C27C4F9AE02.roa (raw, json)
Hash identifier: gdssxyk0VOuSG6kaNQg5db6yiCYv/hnxJ8zIYAcoUqE=
Subject key identifier: F9:66:B1:1D:4D:C5:71:6E:71:4F:4B:C2:FE:EC:BF:1E:6C:44:01:69
Certificate issuer: /CN=A914E488/serialNumber=903A3843679A0B105DCA485C3D648F3D11272FB7
Certificate serial: 02CF
Authority key identifier: 90:3A:38:43:67:9A:0B:10:5D:CA:48:5C:3D:64:8F:3D:11:27:2F:B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDo4Q2eaCxBdykhcPWSPPREnL7c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/606EB6AE240911EDBFA59C27C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:23:57 +0000
ROA not before: Fri 21 Mar 2025 02:08:21 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 132330
IP address blocks: 103.12.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.crl
rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDo4Q2eaCxBdykhcPWSPPREnL7c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 719 (0x2cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E488, serialNumber=903A3843679A0B105DCA485C3D648F3D11272FB7
Validity
Not Before: Mar 21 02:08:21 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a3e98d-78f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a4:bd:c0:f1:64:f4:d8:8b:15:cb:0c:e1:2b:
cf:95:f9:00:67:55:cf:3d:24:fb:86:72:f8:d9:d3:
48:44:16:d5:fb:cb:ae:a7:d5:ef:f1:45:a2:54:7e:
7a:5f:e3:4f:e8:1d:cd:6b:26:99:f5:f7:9f:c9:2d:
8a:af:15:5c:ae:6b:a8:b2:c2:f2:24:79:30:b9:03:
d9:c6:bc:da:c2:69:d8:fd:6f:bb:63:b7:9f:76:8f:
2d:64:14:df:69:0d:ad:40:4b:59:92:f6:ee:63:7d:
3e:d9:4a:92:17:0e:96:f4:6b:20:b7:6a:31:92:4e:
c1:09:31:31:6b:3a:a8:3d:82:0d:b5:ad:ec:27:32:
d6:77:7a:c8:15:58:6e:d0:89:4e:ed:2b:1b:cf:fe:
e3:55:02:b3:95:96:66:06:2f:3e:db:ad:e9:eb:96:
2e:2e:cd:38:60:a3:b1:32:e3:2f:ca:e9:0a:37:37:
d1:eb:dc:ad:2f:2a:d4:7b:1d:8e:2b:e5:33:54:de:
c2:ba:c2:21:71:eb:6b:2d:79:1c:d0:db:bc:48:b8:
c5:d9:62:0c:d1:dd:6b:53:e9:57:a5:49:dc:e9:1e:
82:e0:0c:05:5d:f8:d9:ef:43:a8:4e:c5:19:7c:6d:
b8:45:45:90:ca:89:9a:67:b4:b6:af:54:e4:f6:ce:
bd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:66:B1:1D:4D:C5:71:6E:71:4F:4B:C2:FE:EC:BF:1E:6C:44:01:69
X509v3 Authority Key Identifier:
keyid:90:3A:38:43:67:9A:0B:10:5D:CA:48:5C:3D:64:8F:3D:11:27:2F:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDo4Q2eaCxBdykhcPWSPPREnL7c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/606EB6AE240911EDBFA59C27C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.12.165.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:39:3d:6a:60:bd:67:fb:ea:68:7d:e2:e4:47:d8:79:ff:61:
a6:22:45:11:b2:aa:ae:6e:12:df:a6:c5:9c:56:38:fe:94:d1:
c3:da:ec:38:54:2c:dd:9b:0f:d4:88:b2:79:a3:ee:a9:c8:62:
40:0c:18:51:0f:1d:63:7e:26:d3:c0:42:50:5f:fe:00:ac:f4:
2e:95:d8:46:90:c1:01:2d:6a:53:13:70:f6:25:71:4d:d4:75:
a3:d2:38:d8:5c:37:73:b9:f2:6e:f4:28:fc:15:ad:81:98:f6:
a3:28:70:a2:73:bd:7d:08:9c:72:1e:14:83:77:f4:34:e1:3a:
fc:b8:a0:1f:8a:3d:7f:31:a7:82:d3:55:fd:b6:44:e8:b4:93:
a3:86:39:b0:4e:f2:2c:db:35:db:5e:48:15:6b:34:6f:77:e5:
89:33:51:c4:bb:ca:7d:f1:f4:3e:d0:8d:a6:2e:16:df:88:f9:
59:1f:fe:e2:90:bb:4a:d9:7a:19:89:d7:b3:1c:60:85:95:63:
7a:e2:49:2c:43:0c:55:2a:01:ea:5c:a0:fd:2b:4e:aa:5f:19:
d4:21:62:6f:4c:56:4f:23:42:11:74:f3:a5:2e:e6:82:97:55:
13:7b:7e:e3:a3:7e:9a:c2:77:c1:c6:93:92:ed:06:89:35:38:
71:73:7c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:17:47 2026 by rpki-client