
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/68219776A41311EBBF911855C4F9AE02.roa
File: 68219776A41311EBBF911855C4F9AE02.roa (raw, json)
Hash identifier: VjXHPuIwGHjxhTWLqkjCa7VDTT6rvVJHd6oJKd+W8yI=
Subject key identifier: DE:A2:04:C6:36:9C:1D:58:0A:EF:A8:B1:BD:7D:4D:4F:6B:E4:1F:9B
Certificate issuer: /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Certificate serial: 06CD
Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/68219776A41311EBBF911855C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:31:47 +0000
ROA not before: Mon 04 Aug 2025 23:35:21 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 137443
IP address blocks: 103.117.120.0/24 maxlen: 24
103.117.121.0/24 maxlen: 24
103.117.122.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1741 (0x6cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Validity
Not Before: Aug 4 23:35:21 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a59142-1e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:89:2b:4b:7f:ee:e2:ed:cb:3b:85:6a:70:3b:
6b:f8:43:fe:72:78:59:a3:28:45:f8:51:a0:8e:6e:
6d:cf:64:3c:ec:92:c1:af:37:0e:54:d3:b2:61:35:
67:28:5f:b7:8a:cd:7d:e5:4a:06:96:30:ec:f4:a4:
e0:d7:14:86:29:bd:bb:b1:20:03:99:06:6a:a5:76:
4e:10:0e:d2:cc:49:0c:32:a0:26:c4:0e:97:ca:68:
31:4e:1c:09:86:52:81:dc:85:a7:c2:8b:6e:e9:16:
5e:0a:57:b4:94:54:d4:56:c9:81:d7:d8:f3:f1:08:
51:6b:90:c3:fc:a2:ef:de:58:e7:60:3a:7d:2e:dc:
87:10:1d:a9:61:97:94:cb:0f:4d:b5:f4:bc:0a:09:
d9:f2:b5:71:8b:ef:57:5c:14:83:cf:33:d8:c2:1d:
df:c1:70:51:9e:e8:f3:37:19:63:26:7f:c2:e1:e3:
8f:b3:e2:b9:18:2a:da:13:96:d6:c9:39:19:ce:f1:
66:c9:1f:21:44:c6:3a:69:07:a2:77:fc:c7:cf:a5:
af:6f:a3:5c:ec:e5:85:69:f6:df:4a:61:bd:81:35:
a0:dc:02:bc:51:6a:b0:45:74:1d:25:56:4b:40:6e:
d6:8b:98:f2:ae:f2:a1:72:d3:f7:4f:49:0f:bc:6e:
f6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A2:04:C6:36:9C:1D:58:0A:EF:A8:B1:BD:7D:4D:4F:6B:E4:1F:9B
X509v3 Authority Key Identifier:
keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/68219776A41311EBBF911855C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.117.120.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:f9:10:7a:92:48:98:01:2c:24:d8:98:e1:38:1b:d4:99:e9:
6f:94:2c:ea:1d:3e:94:7a:1b:65:74:26:b3:03:fa:e2:d7:3b:
e3:33:88:fa:ad:4f:59:ca:b4:35:10:3e:1d:10:2f:46:e7:c4:
bb:02:cc:c9:70:ec:02:85:62:ad:42:0f:9f:70:8b:a2:f2:d5:
fd:00:70:b5:1b:14:48:52:42:0c:7e:55:9a:54:b1:7b:ae:49:
8e:b0:b2:c3:29:50:f9:61:5f:43:f2:36:e6:ff:19:d0:0f:4b:
c9:eb:b5:e9:ab:3e:a8:58:dd:53:b8:35:14:b7:92:cf:8a:c4:
e3:ca:a3:93:f8:4e:7f:c7:e7:31:3a:ab:de:0b:f4:59:5b:c3:
b6:7b:c8:3d:79:2f:c9:60:2e:cb:ba:c5:14:95:39:88:8b:0d:
bc:cf:ec:41:eb:87:e4:db:25:61:78:82:69:41:2f:d2:f2:79:
98:d8:dd:5c:eb:2d:68:de:82:eb:e2:86:fe:cc:a5:6f:07:9c:
00:d0:f5:af:4f:63:1b:55:c1:38:d5:4d:00:ac:f0:cb:b7:be:
56:6b:68:f9:52:5a:28:44:ce:b7:d9:9d:bc:b6:2c:65:70:a6:
14:e6:5f:03:fb:6f:29:7b:7e:31:43:c3:5e:85:67:b8:89:b3:
5d:be:44:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:32:17 2026 by rpki-client