
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/B62B9156280611ED8BEBC536C4F9AE02.roa
File: B62B9156280611ED8BEBC536C4F9AE02.roa (raw, json)
Hash identifier: cWhKsGGtwm24L2b24qEiOJQYknotmIIZJa7i5F5KPHg=
Subject key identifier: 5B:DE:A4:B0:A9:CF:F4:A5:E9:CC:F6:84:69:E2:88:E1:AA:DE:C9:C9
Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial: 1A7B
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/B62B9156280611ED8BEBC536C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:26:06 +0000
ROA not before: Tue 08 Jul 2025 17:25:59 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 149167
IP address blocks: 103.239.74.0/24 maxlen: 24
103.239.75.0/24 maxlen: 24
203.167.23.0/24 maxlen: 24
2405:f080:ff00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6779 (0x1a7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Validity
Not Before: Jul 8 17:25:59 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a492cd-b273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1f:91:c1:af:2c:10:0c:6a:6d:45:34:0e:fe:
2e:05:ed:fe:af:d2:b9:e0:7d:83:d3:3a:b7:0a:eb:
b7:18:54:12:67:b8:0f:65:9f:76:70:9a:a1:24:28:
55:7d:ad:61:10:ba:31:c5:67:f5:ff:2b:ff:1c:99:
45:91:01:00:6d:bf:1b:4b:59:51:09:67:8a:f3:de:
f6:97:8b:1a:c8:fa:30:ab:76:15:b7:a0:00:20:2e:
23:95:c2:32:6a:38:21:cf:e8:3c:aa:60:8c:de:54:
1a:44:fe:6f:d2:c6:9d:6b:ef:ec:d5:25:47:fa:f7:
31:d3:60:64:a7:a4:9e:95:ed:35:26:9b:69:a2:bc:
e7:2a:06:90:f6:c5:57:49:c9:a5:45:30:4f:7b:43:
be:b5:bc:fa:64:72:62:5a:4a:e4:89:e4:c1:b2:42:
3a:f9:fa:9a:de:4b:6a:c9:05:c1:10:4d:73:6f:3c:
c4:06:f6:d6:bd:81:15:ea:a1:b4:41:c6:2c:38:0a:
fd:bf:f7:50:5b:9b:8d:a1:a2:e7:16:39:ef:04:b9:
9e:6b:42:e8:77:29:79:ea:df:a6:a3:03:e3:81:b7:
ea:63:de:5c:9e:26:a7:08:09:61:54:9c:1a:85:58:
0b:f8:32:a5:bd:ab:46:82:3c:58:86:56:a3:94:4f:
69:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DE:A4:B0:A9:CF:F4:A5:E9:CC:F6:84:69:E2:88:E1:AA:DE:C9:C9
X509v3 Authority Key Identifier:
keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/B62B9156280611ED8BEBC536C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.239.74.0/23
203.167.23.0/24
IPv6:
2405:f080:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
14:de:dd:d5:e7:12:c6:e8:ee:95:b5:77:56:e6:4e:94:a4:07:
88:35:08:d9:4d:4f:65:49:76:e0:71:e2:9a:ab:57:61:4a:75:
15:fd:07:43:3e:36:a2:00:9f:43:25:37:c2:66:ec:c8:20:09:
34:69:89:5a:c7:47:2b:13:b3:ff:28:de:ff:f8:15:05:c2:3c:
c4:e6:a6:9f:18:b0:d6:28:16:de:78:ed:cd:ec:bf:93:b6:a2:
3f:e3:d4:1b:55:59:3d:17:c3:ff:e3:6c:e5:c6:ae:0c:34:06:
a1:58:e3:79:46:04:33:03:f2:1a:d5:cc:0a:19:74:b8:3e:7b:
7d:58:b8:ff:00:4a:05:25:4b:ab:78:42:ac:0c:80:4e:5a:19:
3c:3d:74:f3:4c:aa:22:28:0e:10:50:b4:a8:05:90:6f:1e:ec:
dd:04:40:d1:e8:df:41:36:d0:f9:a4:94:09:23:77:aa:91:90:
14:aa:67:73:0d:53:8b:ef:39:d4:80:8f:ef:54:f6:99:df:49:
bc:66:98:8a:88:7c:9c:b9:d5:0f:cb:a8:4d:61:48:78:46:48:
14:2b:75:2f:d2:c6:5e:9f:8d:17:45:20:fb:85:71:57:0b:f4:
13:8f:df:5b:b0:39:54:a9:0f:6d:e9:47:04:7b:eb:2a:ea:cc:
c8:09:72:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:18:04 2026 by rpki-client