
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/B2602B2820EC11EF964FFE2CC4F9AE02.roa
File: B2602B2820EC11EF964FFE2CC4F9AE02.roa (raw, json)
Hash identifier: VfrfnykE97GgaY0zRE1Dz7s8bBRf2eI3Tb8yh05ip+M=
Subject key identifier: 98:5E:9A:8E:E0:62:39:5B:C1:1D:9A:76:39:DA:C8:0B:63:97:EA:8F
Certificate issuer: /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Certificate serial: 0720
Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/B2602B2820EC11EF964FFE2CC4F9AE02.roa
Signing time: Fri 24 Jul 2026 23:43:28 +0000
ROA not before: Fri 24 Jul 2026 23:43:28 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 152705
IP address blocks: 103.117.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1824 (0x720)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Validity
Not Before: Jul 24 23:43:28 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a63f8a0-91ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:91:55:83:7f:b4:c4:c0:0e:c6:43:62:6b:
a7:08:ec:53:53:c7:34:b6:f2:cb:66:d6:b7:1d:4b:
eb:a3:da:5b:f1:13:f6:09:f9:16:0c:e1:00:90:f7:
b9:97:9b:06:c6:c5:1f:5f:17:d2:31:0b:4b:6f:c8:
f7:6e:48:05:03:3a:b5:17:db:18:43:14:84:6b:e6:
ad:4c:41:20:d4:fc:6a:0c:34:c8:e6:95:a4:31:15:
07:8a:c5:c1:b7:27:76:a7:1a:95:89:25:3a:60:2e:
7a:f9:96:da:b7:58:18:3c:e2:76:2b:45:3d:45:ef:
1a:a5:91:58:9b:38:d6:23:af:a8:3a:c8:5f:36:2c:
8a:8d:e5:2e:64:75:ba:bc:c4:18:50:81:ef:5d:1f:
ab:57:b9:eb:2e:34:76:18:d6:84:17:f5:87:ea:8c:
94:90:2a:f9:c2:fd:24:db:9a:9d:b4:07:7b:53:7a:
a5:8d:c8:01:b7:2c:25:54:55:43:4d:4f:f2:a5:64:
3e:05:fc:0d:d0:4d:65:7f:88:84:f9:a8:fc:18:a0:
27:51:91:1d:7c:7e:e2:55:0a:c1:d0:ac:e4:fb:50:
3d:4e:b1:ef:e0:7c:ca:45:40:91:61:f4:6a:fd:7e:
40:07:be:2e:2d:fa:0a:e3:85:a4:d4:1c:7d:39:ae:
6d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5E:9A:8E:E0:62:39:5B:C1:1D:9A:76:39:DA:C8:0B:63:97:EA:8F
X509v3 Authority Key Identifier:
keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/B2602B2820EC11EF964FFE2CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.117.120.0/22
Signature Algorithm: sha256WithRSAEncryption
37:fd:8c:5c:c3:0a:1b:96:b4:e6:b7:52:64:3e:99:b8:2e:91:
49:a5:05:18:6f:e4:f6:17:0a:f5:19:a6:81:ef:e4:08:b2:d0:
e4:a4:44:df:8d:a9:9c:a8:d9:45:2d:9f:99:57:94:12:31:00:
ee:2b:2d:fd:06:c0:bf:41:22:f6:07:3c:09:95:91:e0:79:d0:
ea:fd:37:c7:3a:b1:79:72:88:bb:32:c4:21:34:09:7c:8a:11:
2a:fe:d7:cb:4a:0c:6e:09:e3:86:e9:d2:15:e1:05:dc:bb:8c:
a4:88:05:30:88:30:53:b1:40:22:7c:b0:8d:14:e3:e2:59:48:
af:1a:08:ea:24:a9:0d:00:dd:74:ad:35:a6:af:3a:96:ff:6e:
a4:a9:40:0e:4f:36:43:90:1e:83:7b:24:e0:e6:b1:07:c2:07:
9e:67:b7:5d:9f:f6:96:82:48:6f:9a:88:bf:ab:9a:b1:b9:48:
98:71:63:27:a0:41:bb:ac:8f:30:b3:a4:88:5a:c3:3a:43:f0:
3a:57:09:4a:92:90:68:fc:3f:5a:5c:5b:60:4a:b4:2f:57:5f:
2e:43:0b:88:32:7c:e9:88:f5:c6:cc:48:6e:a4:1c:da:66:8f:
a1:27:a1:6d:5a:ad:3f:2d:67:aa:de:c2:95:09:32:7a:fd:40:
9a:05:db:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:36:55 2026 by rpki-client