
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/585745526BC111EEA163E774C4F9AE02.roa
File: 585745526BC111EEA163E774C4F9AE02.roa (raw, json)
Hash identifier: RCbI/69LSKrQE3x05u/abOOobnm77I9syhgwGg/3j4Y=
Subject key identifier: 17:57:93:0F:95:2C:F5:22:FC:06:ED:C5:B2:EB:5B:E8:57:6B:48:97
Certificate issuer: /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
Certificate serial: 01F2
Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/585745526BC111EEA163E774C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:15:36 +0000
ROA not before: Thu 03 Apr 2025 04:01:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139580
IP address blocks: 103.6.212.0/24 maxlen: 24
103.6.213.0/24 maxlen: 24
103.16.180.0/24 maxlen: 24
103.16.181.0/24 maxlen: 24
2403:4f00::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl
rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:35:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E623, serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
Validity
Not Before: Apr 3 04:01:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a47438-aa8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:20:83:47:b5:0a:ea:2a:cf:54:07:28:89:
40:f6:40:07:eb:b3:73:60:52:46:40:38:90:af:29:
6c:14:28:b3:f7:27:e9:70:80:cd:12:9b:5a:62:0c:
bf:9e:b1:61:09:c9:52:cc:45:d6:74:19:71:c4:79:
99:ff:f0:f0:52:ca:05:14:4d:88:1a:8d:05:2c:0e:
71:34:06:a9:1e:f8:45:c3:7f:bd:29:dc:61:80:52:
26:e6:50:17:15:9f:fe:92:d8:c6:4b:2e:f8:84:68:
8a:f9:f6:5b:84:08:98:00:14:4d:db:fa:2a:9a:94:
34:82:ac:d2:52:b0:b1:94:c1:ad:1f:66:6b:9d:2e:
54:46:38:04:6c:0b:99:fb:cd:2d:ba:b4:61:99:77:
aa:c2:7f:3b:45:72:22:f4:66:e2:9e:27:d4:d5:5a:
c4:07:88:88:d0:47:ab:57:4b:f2:1c:83:9a:b1:e6:
18:5b:ce:ec:91:3f:e4:15:18:56:dd:d0:8e:e5:a7:
ce:dc:9c:a7:48:f5:6f:ea:25:e5:05:39:c1:de:14:
cc:d7:c6:d0:36:68:7a:12:2a:a9:95:41:0b:2d:a9:
b4:4e:6f:1c:fc:ae:27:c0:87:1c:12:bc:ea:2c:a1:
92:3a:e7:86:9e:ee:55:18:60:30:c8:1d:2f:fc:73:
c7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:57:93:0F:95:2C:F5:22:FC:06:ED:C5:B2:EB:5B:E8:57:6B:48:97
X509v3 Authority Key Identifier:
keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/585745526BC111EEA163E774C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.6.212.0/23
103.16.180.0/23
IPv6:
2403:4f00::/36
Signature Algorithm: sha256WithRSAEncryption
b3:56:cc:3f:aa:d5:89:41:26:e5:29:2c:22:32:e3:32:7e:7e:
eb:ce:bc:c7:3c:ad:d1:9b:8e:2a:79:21:8a:3a:df:81:28:93:
45:80:7c:c0:7b:b4:7d:12:dc:7b:83:c3:0b:82:be:72:76:0a:
ee:54:c2:9c:bf:eb:45:ad:60:61:ea:26:1c:87:a4:66:2f:f5:
41:b8:50:d3:f7:71:8f:b8:03:da:b8:b2:26:fd:21:65:a3:c8:
1d:73:f8:8c:8f:bc:9a:5f:c0:06:48:a8:25:7f:cd:9e:a2:0f:
43:85:26:7e:f4:21:6f:d9:67:f1:bc:5d:d5:01:4f:62:a1:b5:
43:65:3c:1a:eb:db:c0:4a:51:a0:bb:bd:c8:7b:a5:3d:63:93:
9a:81:c4:07:a0:ba:15:f9:f4:88:91:41:ce:e0:e3:91:6c:9b:
09:bf:18:fa:76:4f:91:6e:8d:6a:f2:d0:58:b2:84:b8:6f:de:
73:2b:ac:32:59:ea:54:02:a6:a2:fa:22:fb:5c:0d:e5:ed:68:
b7:b8:c9:51:4f:aa:69:af:14:5b:55:ce:f3:c8:b5:f7:2b:26:
81:ce:0d:a9:ea:9a:a5:c2:58:e5:72:34:c1:5e:0b:09:51:f9:
1b:d0:c8:6f:0c:e6:15:b4:d7:32:f8:f7:8f:ba:b6:1e:f4:19:
fe:c4:44:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:49:12 2026 by rpki-client