
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/6E32028AD48511EF8239D526C4F9AE02.roa
File: 6E32028AD48511EF8239D526C4F9AE02.roa (raw, json)
Hash identifier: Kn3RxDk3qhm1BoA1PXfblo/JTZSCcatO617eVns4pg0=
Subject key identifier: DD:B5:5A:63:C1:24:77:86:0B:36:B2:BA:B9:95:DA:06:F1:BA:E5:B4
Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Certificate serial: 040E
Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/6E32028AD48511EF8239D526C4F9AE02.roa
Signing time: Wed 03 Jun 2026 03:30:46 +0000
ROA not before: Wed 03 Jun 2026 03:30:45 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 153494
IP address blocks: 43.241.152.0/22 maxlen: 24
43.242.44.0/22 maxlen: 24
103.37.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl
rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:29:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1038 (0x40e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Validity
Not Before: Jun 3 03:30:45 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a1f9fe5-16f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:73:09:75:f6:b4:e1:f7:c9:e7:76:ba:9f:8e:
dd:f1:84:e5:65:54:45:85:c7:a7:cd:0e:40:9f:d3:
f2:f7:14:8a:ed:29:96:c7:d6:e5:b3:b3:b3:b7:8f:
80:bd:21:09:be:a6:cf:3b:32:39:27:ba:cb:a6:46:
77:89:ca:b4:2f:5c:f4:f9:ad:4e:c3:9d:c0:8d:89:
d3:92:07:43:77:e1:51:e9:4e:3d:8a:11:a8:69:c0:
d0:5e:e2:e2:14:fe:ad:03:d3:6f:93:9f:55:0b:69:
47:6d:d9:a0:fe:f1:cd:87:84:e7:06:50:a5:44:84:
fc:1a:c1:e1:dc:6f:d2:96:91:19:cd:f3:a9:6e:11:
0d:f7:21:2f:e5:b6:41:ca:f1:ee:bb:54:55:59:14:
32:b8:22:ad:c4:b8:b7:52:ef:1d:5f:c1:c7:eb:5f:
76:02:b5:7a:f4:9f:70:61:37:12:aa:cd:54:3d:d1:
4f:d1:a9:4f:3b:49:de:f4:0d:fb:db:5c:14:72:86:
3a:7d:30:f3:39:64:31:f4:e9:51:ea:8f:dd:67:94:
f2:a0:c3:cc:da:2f:8e:ca:87:ba:53:d3:ca:f4:ea:
04:5e:2d:96:86:52:09:26:93:c9:5b:57:15:27:c5:
5b:bd:9c:7c:71:0d:e9:26:9b:c5:b9:81:db:ab:5c:
64:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B5:5A:63:C1:24:77:86:0B:36:B2:BA:B9:95:DA:06:F1:BA:E5:B4
X509v3 Authority Key Identifier:
keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/6E32028AD48511EF8239D526C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.241.152.0/22
43.242.44.0/22
103.37.248.0/22
Signature Algorithm: sha256WithRSAEncryption
35:7b:a8:5b:1a:3d:b1:7f:a4:5a:2e:69:7e:80:22:db:57:9a:
8c:da:52:4f:7b:fd:0d:b6:c2:d8:88:9c:78:b9:d7:4e:e8:52:
4c:88:47:90:fc:45:0f:6e:7b:53:14:f2:32:2f:b6:af:50:88:
d4:6d:08:41:79:43:a9:8c:fd:71:42:34:9a:ae:0c:44:c6:97:
1e:57:99:a7:d9:f5:8a:45:63:09:d3:97:61:43:e5:30:06:c1:
5f:37:3b:5d:f0:73:d4:68:2f:fa:62:4f:77:cc:54:d9:1f:54:
7e:12:07:72:6e:c9:0f:42:47:98:e2:3b:1a:e8:75:e6:ed:a4:
2e:1b:fd:d5:2a:2a:e1:86:b3:97:d5:11:92:2c:b2:c5:d6:63:
cf:d6:ab:56:50:2d:bf:9c:dc:52:ea:49:50:d4:8d:92:a6:99:
76:8d:aa:ac:bc:a5:96:55:3a:b1:61:f3:bb:3c:40:31:7d:8f:
6e:81:a3:49:38:57:f3:5d:fe:6f:b0:f9:8a:21:e8:a0:c9:c8:
98:a0:8d:71:0d:ff:fb:c9:84:c0:9e:05:02:9d:ff:9d:98:0a:
71:b2:5c:f5:22:05:b2:29:a2:3d:9d:a7:b1:7f:d5:ea:cc:5f:
58:56:2d:6c:b5:ca:90:c9:bd:f6:c3:1e:45:b0:80:0b:90:be:
73:3c:9a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:05:50 2026 by rpki-client