
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/062FA86A6BEF11ECBF4E737EC4F9AE02.roa
File: 062FA86A6BEF11ECBF4E737EC4F9AE02.roa (raw, json)
Hash identifier: XiNDevR/WSIEpdA+D9GYGr6FWNCFK1onow/o0V+u/64=
Subject key identifier: E8:C2:10:A9:72:3F:9A:64:6C:70:F9:EA:0B:2A:F3:5A:DD:EA:7B:E1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D6A2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/062FA86A6BEF11ECBF4E737EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:45:10 +0000
ROA not before: Thu 08 May 2025 16:21:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149190
IP address blocks: 103.172.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54946 (0xd6a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:21:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c176-091e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3b:0f:2e:02:76:c5:4f:90:ec:8d:fd:c8:3a:
69:77:3f:ae:ae:e2:61:c5:09:c9:8f:c5:f4:1f:96:
d8:2b:61:8f:f9:82:9a:9c:83:a8:e4:bd:ef:00:f0:
f8:93:2b:4c:74:a7:d0:05:1d:17:d9:3e:07:60:9e:
9c:31:74:7a:0e:b5:a4:c5:cc:a5:4e:28:f9:a4:eb:
43:ac:47:f1:35:42:ff:40:d5:c0:a5:2d:f3:22:39:
1d:01:c3:fe:8f:45:f6:8c:78:9f:f6:f1:22:86:7c:
39:c3:6e:4e:ea:85:bd:10:80:fb:11:82:26:6d:63:
89:85:bc:d0:44:99:fc:0e:30:56:af:b5:6f:ff:b0:
ec:b2:14:9e:8f:ad:35:8d:92:c7:dc:6a:39:00:b9:
5b:19:e1:ac:a1:ee:99:dc:b0:ea:41:af:19:41:ce:
09:f0:a7:17:90:9e:f9:26:7e:db:fa:13:cd:a6:df:
f4:07:67:97:ab:bd:5d:91:4d:d1:ec:ab:54:5d:ea:
38:f2:d4:c8:4b:43:49:4a:0d:b6:6a:da:f7:7d:98:
c7:5d:30:18:fb:66:db:81:ab:26:e4:2f:31:7c:f0:
63:e7:56:5c:a1:b3:b1:05:a2:b7:9e:c2:78:ae:d8:
1f:b3:03:5f:c8:38:06:db:ed:9f:d7:a7:16:7c:46:
33:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C2:10:A9:72:3F:9A:64:6C:70:F9:EA:0B:2A:F3:5A:DD:EA:7B:E1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/062FA86A6BEF11ECBF4E737EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.172.201.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:6b:02:f0:90:78:81:15:77:eb:e8:69:a3:28:cf:87:1f:c8:
44:da:83:17:2b:e9:83:78:5f:1f:a7:66:c6:32:86:7a:0a:7a:
c8:c6:d0:87:8b:90:fb:ab:08:57:45:d6:da:a6:16:a4:52:8b:
fb:ee:d3:d7:c8:62:0a:5d:76:cd:a7:57:a7:6e:ec:bb:90:ad:
65:e0:fc:5a:1f:8f:ad:df:2d:3d:2d:1b:33:dc:1d:98:3a:1e:
e4:67:9e:35:12:63:4a:fb:fb:e5:0c:3d:47:78:65:98:94:5e:
12:4c:0e:86:71:7b:14:f1:eb:64:eb:9b:15:09:bb:4d:c4:3e:
88:48:a2:3c:30:31:af:68:61:ae:3e:5b:ec:df:42:e8:fb:cf:
ca:7e:de:64:a0:74:63:9d:82:ab:41:c4:76:a0:c1:98:87:d7:
6a:e2:98:bb:70:9a:29:7f:be:ac:67:87:6b:c1:03:a8:4c:b2:
fd:f3:bb:a8:9f:8b:2a:93:86:77:3d:f8:7a:3c:84:c0:70:2d:
6e:a3:27:3a:5e:e1:b7:f5:8f:e9:3c:ac:10:22:7c:71:77:b4:
1b:aa:31:71:39:0e:d5:05:47:5b:db:23:e5:9c:f1:a9:8e:e5:
e1:6c:53:51:fa:81:be:16:5d:2d:71:bf:85:c7:26:a9:44:04:
ad:23:b3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:52 2026 by rpki-client