
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/6199B5668DE011ECB9F9C06EC4F9AE02.roa
File: 6199B5668DE011ECB9F9C06EC4F9AE02.roa (raw, json)
Hash identifier: gXnStk1MwegllJpHCk0mKvppBMmur0BRxsppyW6UBsI=
Subject key identifier: 0A:E4:BB:A2:E9:8A:38:F6:80:AD:A5:AD:EE:D9:E6:AA:B9:83:27:5D
Certificate issuer: /CN=A914E950/serialNumber=D875E63C73508DD89F6ACDCC060144A08C0866DC
Certificate serial: 0451
Authority key identifier: D8:75:E6:3C:73:50:8D:D8:9F:6A:CD:CC:06:01:44:A0:8C:08:66:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2HXmPHNQjdifas3MBgFEoIwIZtw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/6199B5668DE011ECB9F9C06EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:49:45 +0000
ROA not before: Sun 05 Oct 2025 00:56:45 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 132727
IP address blocks: 103.73.228.0/24 maxlen: 24
103.73.229.0/24 maxlen: 24
103.73.230.0/24 maxlen: 24
103.73.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.crl
rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2HXmPHNQjdifas3MBgFEoIwIZtw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:40:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1105 (0x451)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E950, serialNumber=D875E63C73508DD89F6ACDCC060144A08C0866DC
Validity
Not Before: Oct 5 00:56:45 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a435e9-5560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fd:79:89:68:a7:0c:4a:4e:a6:c7:07:8b:6b:
90:b0:98:fe:8b:5c:16:75:aa:95:fd:37:c8:ea:79:
f4:58:64:56:71:80:89:60:62:e5:3d:6a:24:1d:2b:
89:dd:67:90:61:74:32:bf:97:7f:29:c0:e8:87:4b:
f9:55:f7:05:1f:c6:db:db:a3:2f:a6:81:af:3b:04:
ed:e5:4d:48:89:9d:c9:79:db:7e:ff:6b:19:70:52:
85:b7:58:65:92:af:2f:20:0b:94:c0:82:11:4f:bc:
19:86:6f:c7:18:c4:d9:03:fd:05:01:f5:68:bf:59:
50:98:90:79:ca:c9:b6:fe:15:7d:ef:ff:74:e6:b3:
63:d6:4e:c9:fc:25:05:16:b3:4e:e9:06:45:48:8a:
2a:7f:08:25:6c:c1:6b:5e:79:47:2a:ac:15:f2:34:
fa:77:ba:ad:ec:2f:a1:b4:fb:fe:b8:78:f2:bf:3e:
96:68:8f:be:6a:db:8d:61:c1:70:6f:87:48:d7:b4:
0b:25:7a:09:22:4c:13:32:bf:43:d5:7f:49:a2:4d:
ef:71:66:9e:ca:03:df:b3:1c:54:1b:69:e0:0c:58:
be:5e:a2:ee:92:73:d7:d4:da:51:6d:5d:b8:a3:54:
e5:fa:e2:8c:f9:83:35:47:ed:f5:a1:d7:b6:c2:03:
84:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E4:BB:A2:E9:8A:38:F6:80:AD:A5:AD:EE:D9:E6:AA:B9:83:27:5D
X509v3 Authority Key Identifier:
keyid:D8:75:E6:3C:73:50:8D:D8:9F:6A:CD:CC:06:01:44:A0:8C:08:66:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2HXmPHNQjdifas3MBgFEoIwIZtw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/6199B5668DE011ECB9F9C06EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.73.228.0/22
Signature Algorithm: sha256WithRSAEncryption
70:a7:12:08:04:21:97:45:58:7a:05:85:c7:91:f7:f9:91:9a:
3a:a2:0e:2a:97:d0:59:35:f2:46:25:7e:5b:0a:9b:79:b9:39:
fa:e9:24:fa:4d:66:32:d4:0d:66:48:32:66:76:5f:a6:23:d5:
6b:f9:e1:7b:c9:79:10:9e:fb:18:5e:1c:78:72:4b:0d:1c:26:
13:4f:92:25:93:4b:7b:2d:41:6c:09:df:05:d8:3d:3c:4e:1a:
ec:78:69:8a:d5:bd:3b:11:ae:7a:2b:1a:e8:e1:59:e7:95:76:
94:a7:1c:23:39:89:bb:09:cc:9a:dc:b8:d9:dd:45:91:26:05:
58:87:82:d4:ad:ba:00:bf:6e:aa:6b:88:7b:21:2d:69:9b:09:
07:50:d7:96:a9:69:9c:98:99:11:ac:2e:3f:2b:7e:8f:98:9e:
38:d3:3d:69:fd:55:13:65:c6:30:6f:97:87:82:8f:e0:0e:63:
b2:56:5b:49:38:1b:46:08:33:4f:58:16:73:46:aa:7f:78:4a:
1d:60:04:c8:22:86:4f:04:94:1b:f5:29:3a:72:4a:fa:49:97:
c7:8f:e0:8b:af:94:1b:ac:de:f9:22:57:d7:9a:16:f0:cc:87:
19:0e:9d:02:af:51:d2:74:cb:67:c9:d3:7d:99:3d:e5:c0:d9:
6a:51:ef:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:49:52 2026 by rpki-client