
$ rpki-client -vvf rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/679A3A06D1F211ED8C598E75C4F9AE02.roa
File: 679A3A06D1F211ED8C598E75C4F9AE02.roa (raw, json)
Hash identifier: GiGFmzfp0JcmzMEj9/8+EUQT4rCYMXVADjq597dRKsc=
Subject key identifier: E4:A6:E8:C2:C6:BE:92:C3:4D:DD:56:D7:EA:CB:31:A0:43:E4:37:93
Certificate issuer: /CN=A91843C6/serialNumber=C2E1F76743D5EF7A346A3732EAF90DAD582877DD
Certificate serial: 0268
Authority key identifier: C2:E1:F7:67:43:D5:EF:7A:34:6A:37:32:EA:F9:0D:AD:58:28:77:DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuH3Z0PV73o0ajcy6vkNrVgod90.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/679A3A06D1F211ED8C598E75C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:58:37 +0000
ROA not before: Tue 09 Dec 2025 00:38:27 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 150381
IP address blocks: 103.24.18.0/23 maxlen: 23
103.24.18.0/24 maxlen: 24
103.24.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.crl
rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuH3Z0PV73o0ajcy6vkNrVgod90.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:55:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 616 (0x268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91843C6, serialNumber=C2E1F76743D5EF7A346A3732EAF90DAD582877DD
Validity
Not Before: Dec 9 00:38:27 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a41bdd-62a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:be:64:b0:b7:e5:3e:ee:dd:5c:1c:71:90:81:
1f:e2:7c:ee:1b:6c:77:50:15:aa:db:30:d4:61:8e:
83:a6:3b:72:50:ed:4c:31:23:8f:41:ac:4d:bc:50:
98:be:ef:9e:7c:21:b4:8b:d2:ba:9e:30:92:55:ab:
3f:38:20:cf:3f:04:8b:65:61:ba:90:39:79:4d:51:
0e:1d:24:38:ee:81:e8:8e:8d:51:d8:51:db:6c:98:
0a:4c:d5:7c:db:7c:f6:39:68:a0:26:06:2d:a4:fd:
f1:fe:4a:6a:43:68:02:d4:4d:2e:e7:b2:be:94:ea:
ef:85:2e:c5:e0:61:16:a7:82:d3:e9:0b:6c:d0:67:
a7:23:95:0a:b0:b6:a1:a0:f6:78:be:11:8e:a1:d4:
88:b9:a4:fd:51:76:88:3e:81:16:88:d2:ee:43:28:
c2:24:57:31:50:c5:d9:d6:3a:f5:fc:cc:a6:20:a3:
de:89:c7:12:ab:95:f5:81:44:cd:f9:ba:96:8b:7d:
1d:12:6d:96:d5:f4:a7:16:f3:15:22:21:53:70:3e:
9f:17:ff:3e:6e:e3:96:64:2c:22:07:be:fb:2d:7b:
0f:e8:80:1e:87:15:36:2f:3b:ed:3d:05:bd:60:29:
c6:bc:8d:4e:22:dd:33:a8:78:b8:5e:c0:e0:1c:19:
6f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A6:E8:C2:C6:BE:92:C3:4D:DD:56:D7:EA:CB:31:A0:43:E4:37:93
X509v3 Authority Key Identifier:
keyid:C2:E1:F7:67:43:D5:EF:7A:34:6A:37:32:EA:F9:0D:AD:58:28:77:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuH3Z0PV73o0ajcy6vkNrVgod90.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/679A3A06D1F211ED8C598E75C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.24.18.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:eb:2e:f5:0c:99:b4:37:42:e5:13:92:70:d3:f1:4e:31:c1:
7a:c1:0b:28:96:75:36:71:e2:f4:45:c3:a4:20:a0:bd:cd:3d:
03:1f:50:dc:79:1d:91:bf:10:9f:a3:09:d1:0f:60:dc:8e:cd:
6a:98:b3:88:b0:b4:81:2d:b7:60:ad:04:89:dd:b5:5e:96:62:
27:9e:be:ce:3a:5b:c4:0e:20:e9:b3:2a:bf:2c:8f:6a:bc:97:
90:10:f1:03:22:cb:48:01:ee:36:59:21:64:3c:f3:46:6e:ad:
69:a4:02:a4:bf:b4:5a:cd:04:65:2a:5c:57:0a:fc:e2:d0:03:
26:35:22:6d:c6:44:9a:66:b9:52:79:6a:20:ce:c1:5d:75:f9:
40:4b:fc:37:e1:a9:95:92:aa:75:8e:b7:1f:15:dd:d2:fb:25:
61:53:21:fd:bd:46:29:fc:e5:04:8b:c2:db:f6:e9:36:48:51:
ac:d3:5c:57:95:19:30:52:1e:37:fc:c6:72:da:f6:3a:82:7a:
58:9c:7d:30:21:6a:d3:49:a9:1c:42:ca:12:f5:fa:f3:c0:5d:
26:83:b9:40:54:c0:ed:d3:75:05:e6:92:e4:72:72:93:10:c7:
a5:40:86:a6:25:a6:9c:b8:d8:97:51:de:64:c8:0e:3d:9d:06:
76:c4:8e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:19 2026 by rpki-client