
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/020607A2498711EFBB260663C4F9AE02.roa
File: 020607A2498711EFBB260663C4F9AE02.roa (raw, json)
Hash identifier: NE7gXopF/sfzGGjBPy5TRpiqm9S4sfZVevZ1+WaB9aw=
Subject key identifier: 4E:DD:FB:19:2A:E5:E7:98:F7:A6:5F:06:59:B6:7A:2E:6D:DB:42:E1
Certificate issuer: /CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004
Certificate serial: 0292
Authority key identifier: 54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/020607A2498711EFBB260663C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:04:34 +0000
ROA not before: Sat 31 May 2025 03:51:00 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 62610
IP address blocks: 101.47.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl
rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:08:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658 (0x292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B520, serialNumber=542B94D8625CF711964FD13741295D27AD7A9004
Validity
Not Before: May 31 03:51:00 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a47fb2-03a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d7:af:a3:5e:21:06:78:f3:8e:a1:5e:49:b0:
f4:12:09:84:cc:1a:e6:7f:49:16:f7:e4:f2:20:2f:
25:33:1b:1a:26:53:b2:4d:2a:51:53:b5:d6:d4:4e:
b0:22:44:4d:1a:df:da:80:40:a0:b6:b3:88:ae:94:
af:68:df:04:5d:4d:3e:d5:bb:16:ef:9e:53:2e:79:
60:84:25:5d:81:76:ed:fb:48:66:cd:4a:dc:cd:0c:
b3:5c:ca:13:a8:46:c1:ac:a5:1c:75:bb:54:29:99:
a1:c9:16:f4:67:55:a6:86:ea:cc:6e:33:37:ed:29:
60:e5:d6:1c:3e:4c:c9:51:6a:88:71:09:c0:29:98:
5c:7a:d3:8e:eb:7e:3d:8d:cf:c5:0c:ec:1e:5d:0c:
9d:b5:c9:95:a1:4f:6c:9b:fa:2a:d8:76:1c:0e:cc:
8d:49:4e:27:e7:4e:e3:39:0b:8c:cf:4b:f6:2a:3f:
cb:34:c3:1b:cc:89:43:27:a0:b6:5d:62:d2:a4:ff:
a1:e3:2a:2e:9e:1e:9d:08:b6:a6:a0:37:36:ed:10:
14:66:91:cc:51:74:c8:5e:83:e1:2a:03:a1:05:72:
fa:db:7e:ec:8f:1d:aa:a9:dd:88:bd:ce:23:1f:c0:
7e:45:99:50:ac:19:07:7d:2c:ba:63:87:2d:e3:ea:
df:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DD:FB:19:2A:E5:E7:98:F7:A6:5F:06:59:B6:7A:2E:6D:DB:42:E1
X509v3 Authority Key Identifier:
keyid:54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/020607A2498711EFBB260663C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
101.47.94.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:e9:21:a2:26:39:8d:5e:09:d1:0e:b5:0d:bc:b7:9a:9a:91:
67:6b:fb:3a:6b:d2:1d:60:ec:49:77:b0:d2:06:d4:14:ce:12:
08:48:a0:ce:e7:d9:7a:02:68:45:38:eb:d6:9c:77:2b:52:5b:
22:eb:c6:de:e3:a0:6a:e3:6e:dd:6a:48:0a:96:cf:c6:b5:e9:
a2:62:f2:63:13:4e:0b:48:82:05:29:25:d8:d8:d7:23:fb:da:
0a:6f:cc:64:99:65:6d:14:23:e3:b2:79:7f:4b:b1:9b:86:f2:
41:e1:6e:62:92:28:36:7f:68:40:59:fa:59:e3:5d:90:4e:25:
e1:51:2a:63:bb:d3:c1:9f:5d:81:1c:5e:b3:bd:5d:67:a6:ca:
ae:cf:b4:79:eb:49:2a:fd:ec:e6:ec:20:65:a0:56:ce:c8:1e:
c8:b2:88:89:de:af:da:da:fe:8a:63:6b:29:d1:96:1c:37:b0:
d0:a0:b0:48:1f:1f:3b:03:3a:64:a7:df:98:31:2e:2b:c0:00:
3d:24:f8:2a:76:db:c0:07:74:78:fe:34:75:bd:0d:c2:52:87:
f9:8b:5d:14:ed:cd:63:79:5b:eb:56:c8:74:28:8e:3d:ba:fe:
99:6d:ef:3b:71:50:ae:cb:26:9b:b2:84:21:2a:92:06:00:e3:
7c:b5:6f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:31:38 2026 by rpki-client