
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/73438FF06DED11E9A21D1341C4F9AE02.roa
File: 73438FF06DED11E9A21D1341C4F9AE02.roa (raw, json)
Hash identifier: zgCYwMeP1UfI6GngEcCGqtGu4743/UjhmFPwZo3tqb0=
Subject key identifier: 6C:A8:26:DF:70:A2:65:35:57:52:B9:F1:B7:C3:2C:15:CD:E7:0B:0E
Certificate issuer: /CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C
Certificate serial: 35B0
Authority key identifier: 68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/73438FF06DED11E9A21D1341C4F9AE02.roa
Signing time: Sat 12 Sep 2026 15:16:36 +0000
ROA not before: Sat 12 Sep 2026 15:16:36 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 134376
IP address blocks: 103.63.27.0/24 maxlen: 24
2001:de8:8000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl
rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 14:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13744 (0x35b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917201D, serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C
Validity
Not Before: Sep 12 15:16:36 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6aa56cd4-6c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:62:e0:ad:72:d5:77:ec:9a:bd:62:b8:26:07:
35:ff:1f:04:14:22:87:88:62:5c:e1:70:65:8c:d2:
02:87:dc:e6:a3:2f:c1:ae:0b:64:1d:46:ff:45:46:
68:0d:50:61:89:5c:e0:8c:e2:57:e1:db:e0:89:3f:
3a:43:86:0d:b8:63:6d:47:dc:d8:43:53:09:55:e5:
d7:9f:fe:8f:8d:28:33:98:34:46:b9:fd:9f:4c:2a:
98:89:8e:aa:96:57:80:89:35:7e:e4:41:6f:73:41:
52:ae:3e:46:7d:a5:4f:8d:fa:70:a9:7b:66:47:00:
df:ef:bb:e6:f4:22:f3:67:5e:43:4c:4d:74:d5:6b:
bd:29:0d:03:87:d3:bc:4e:6b:6b:1c:cc:04:3d:d5:
02:bc:3f:62:ac:9b:0a:a8:50:96:0d:43:72:de:e6:
f9:bc:14:ae:2c:35:d2:57:64:90:85:3f:d2:e6:37:
a5:d2:ab:41:4e:9e:dc:ac:3a:bc:5f:0b:0d:99:74:
94:2a:f2:45:49:0c:9d:32:26:62:81:b7:5f:2d:0e:
6c:c2:bd:e1:69:37:5f:5c:75:42:1b:cd:fb:6c:8a:
f8:67:21:24:94:bf:51:03:48:35:f7:a7:73:9c:ed:
5e:3f:d3:56:31:b3:06:34:8f:6c:54:62:bc:1e:84:
7d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A8:26:DF:70:A2:65:35:57:52:B9:F1:B7:C3:2C:15:CD:E7:0B:0E
X509v3 Authority Key Identifier:
keyid:68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/73438FF06DED11E9A21D1341C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.63.27.0/24
IPv6:
2001:de8:8000::/48
Signature Algorithm: sha256WithRSAEncryption
da:b7:6c:85:b2:53:7c:93:a8:9c:d0:bf:5f:09:3c:a4:64:66:
81:95:9c:68:a6:06:d5:78:86:2e:c3:c8:92:69:c4:67:c6:7f:
ad:b7:01:e7:4f:5c:c8:6d:9d:c3:8d:dd:1f:e8:53:b7:cd:70:
ca:ae:40:a3:c5:02:f1:69:d5:b4:4f:33:97:d8:44:f5:87:23:
15:5c:32:5e:e6:8a:dc:88:4d:94:67:08:fb:66:e8:a9:5e:65:
7e:35:d4:8c:46:ea:8d:42:91:4d:77:49:cd:42:a2:61:1c:da:
da:3c:77:36:20:a8:f8:78:3f:11:f8:fc:76:a7:2c:14:a5:77:
66:ce:00:d6:56:0f:c5:de:eb:6f:be:17:fe:3f:f6:d6:e3:11:
51:a7:04:bb:23:07:da:37:c2:4c:cd:da:17:4a:b1:0b:d4:55:
76:f4:c7:bc:28:e6:65:8c:a5:08:6a:19:29:b7:32:7b:e0:d2:
d9:12:0c:5b:44:28:8a:6f:30:fc:28:9b:7d:b1:42:8f:63:98:
76:94:5b:39:62:1c:81:81:f7:dc:1c:f6:cf:91:ef:d5:e5:35:
47:a7:d9:7f:f7:46:3e:c9:95:79:6c:ef:81:c8:21:b3:d8:85:
0b:44:be:2c:18:e0:c4:86:06:55:61:99:d2:c8:8f:30:6a:0c:
68:a2:5a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:47:08 2026 by rpki-client