
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/68219776A41311EBBF911855C4F9AE02.roa
File: 68219776A41311EBBF911855C4F9AE02.roa (raw, json)
Hash identifier: fKg8ntxQpUWIysk2hR9+QrUacflT95hyt+BE5Ct5DAI=
Subject key identifier: E8:31:5B:A8:1A:80:97:AC:2C:63:04:32:5E:4C:92:72:72:4D:6C:4C
Certificate issuer: /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Certificate serial: 071F
Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/68219776A41311EBBF911855C4F9AE02.roa
Signing time: Fri 24 Jul 2026 23:43:26 +0000
ROA not before: Fri 24 Jul 2026 23:43:26 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 137443
IP address blocks: 103.117.120.0/24 maxlen: 24
103.117.121.0/24 maxlen: 24
103.117.122.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1823 (0x71f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Validity
Not Before: Jul 24 23:43:26 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a63f89e-6a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:18:63:f4:f4:d0:ea:cc:c9:6f:63:61:a9:
a5:a3:13:95:14:3b:c9:21:83:90:7e:5d:07:d5:3f:
3b:28:32:6d:7a:ed:4f:d9:f1:68:3b:0f:bd:b7:7f:
b6:44:23:80:85:0d:88:81:c1:58:5c:8b:67:4a:5b:
33:1d:f8:b9:92:58:f3:21:99:b3:1d:c7:14:1b:cd:
53:76:9a:c8:14:9b:2a:52:e1:8c:b3:52:c3:ff:6a:
bd:b0:3d:20:cb:8e:f2:db:62:6f:2c:34:f7:9c:92:
94:cd:2d:4c:a4:12:dc:cd:97:fb:6d:4c:62:36:41:
22:82:82:ec:7f:63:f3:5c:b4:fb:4c:87:97:99:30:
1f:04:da:88:94:7b:02:c7:62:8b:58:b3:b9:01:b5:
25:bd:17:d2:50:86:e5:0b:dd:93:51:7b:22:8f:13:
83:e5:95:09:91:ef:0b:9f:c5:af:29:29:1c:ec:64:
25:91:3b:4e:a1:64:2f:8f:47:5d:df:97:f9:9b:ba:
7c:63:4b:be:ac:01:e2:2e:ac:b2:a2:38:c2:c2:de:
c4:a2:2d:c6:79:37:29:3f:d9:d4:cc:65:c8:08:5d:
44:c1:a0:e0:30:05:49:68:02:3e:33:48:f3:3f:d0:
69:7a:d1:28:da:db:e4:1e:43:9d:a7:18:13:28:1f:
8a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:31:5B:A8:1A:80:97:AC:2C:63:04:32:5E:4C:92:72:72:4D:6C:4C
X509v3 Authority Key Identifier:
keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/68219776A41311EBBF911855C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.117.120.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:c9:b8:c8:2e:9a:76:06:11:29:68:a6:b5:2a:98:f6:84:39:
0c:a2:d1:8f:e0:a7:c7:20:52:ad:49:7e:e1:33:3e:ef:bd:8e:
9f:96:58:ca:3a:dd:72:4c:58:15:69:f1:78:31:68:69:f7:3e:
18:f7:c6:b8:2b:2a:cf:05:94:da:48:3a:99:b3:dd:90:80:e9:
f2:d4:f8:e8:7e:34:00:17:9b:5b:19:27:7b:eb:71:f5:08:8a:
ec:b7:6b:96:4b:11:d3:34:bf:77:07:40:bc:fc:4e:e6:da:5a:
d6:60:3b:05:1d:24:29:26:0e:30:17:de:e9:74:d5:f7:e7:12:
85:1c:6c:4c:05:46:95:17:f6:4a:d3:84:2e:ff:2e:c3:49:b4:
6d:4c:e0:ea:75:a5:b8:db:df:ab:cb:5a:7a:54:19:7e:be:8f:
a2:73:22:43:d7:6c:a1:df:03:8f:44:59:f3:50:ba:1a:47:0d:
65:fd:55:17:db:28:96:33:91:c8:74:52:87:6e:86:8a:50:de:
28:29:bb:f6:e5:91:7c:83:c2:77:32:72:d6:bf:67:ae:34:0b:
0f:40:d8:ab:34:ff:1c:72:c3:cf:7c:cd:01:16:c9:de:76:48:
c8:07:e3:64:09:51:7b:70:b3:eb:fc:76:1a:28:27:bf:76:a3:
15:5c:a8:ca
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkI0QTMxMTAvBgNVBAUTKEZFNDlDMkNGN0VGN0JDRkI0NDQyNDU4M0RGNDRBNDcz
MzIwODJDNTkwHhcNMjYwNzI0MjM0MzI2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTYzZjg5ZS02YTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtkwYY/T00OrMyW9jYamloxOVFDvJIYOQfl0H1T87KDJteu1P2fFoOw+9t3+2
RCOAhQ2IgcFYXItnSlszHfi5kljzIZmzHccUG81TdprIFJsqUuGMs1LD/2q9sD0g
y47y22JvLDT3nJKUzS1MpBLczZf7bUxiNkEigoLsf2PzXLT7TIeXmTAfBNqIlHsC
x2KLWLO5AbUlvRfSUIblC92TUXsijxOD5ZUJke8Ln8WvKSkc7GQlkTtOoWQvj0dd
35f5m7p8Y0u+rAHiLqyyojjCwt7Eoi3GeTcpP9nUzGXICF1EwaDgMAVJaAI+M0jz
P9BpetEo2tvkHkOdpxgTKB+KbwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOgxW6ga
gJesLGMEMl5MknJyTWxMMB8GA1UdIwQYMBaAFP5Jws9+97z7REJFg99EpHMyCCxZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRBMy82RDYyQzhDNEEw
NDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQdEVRa1dEMzBTa2N6SUlM
RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19rbkN6MzczdlB0RVFrV0QzMFNrY3pJSUxGay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkI0QTMvNkQ2MkM4QzRBMDQyMTFFQjgxQkZGRDFGQzRGOUFFMDIvNjgyMTk3NzZB
NDEzMTFFQkJGOTExODU1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ3V4MA0GCSqGSIb3DQEBCwUAA4IBAQCeybjILpp2BhEpaKa1Kpj2
hDkMotGP4KfHIFKtSX7hMz7vvY6flljKOt1yTFgVafF4MWhp9z4Y98a4KyrPBZTa
SDqZs92QgOny1PjofjQAF5tbGSd763H1CIrst2uWSxHTNL93B0C8/E7m2lrWYDsF
HSQpJg4wF97pdNX35xKFHGxMBUaVF/ZK04Qu/y7DSbRtTODqdaW429+ry1p6VBl+
vo+icyJD12yh3wOPRFnzULoaRw1l/VUX2yiWM5HIdFKHboaKUN4oKbv25ZF8g8J3
MnLWv2euNAsPQNirNP8ccsPPfM0BFsnedkjIB+NkCVF7cLPr/HYaKCe/dqMVXKjK
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:44:29 2026 by rpki-client