
$ rpki-client -vvf rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/87818166020D11EF916F0D65C4F9AE02.roa
File: 87818166020D11EF916F0D65C4F9AE02.roa (raw, json)
Hash identifier: ukK7iOSEvHJSNcOsQqUAWHLTwS72w5u6yK/hcadnomk=
Subject key identifier: 7C:96:BF:C3:E8:0E:8E:D6:58:56:08:CE:80:82:46:CA:16:0B:F2:9C
Certificate issuer: /CN=A919690C/serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636
Certificate serial: 0A25
Authority key identifier: 2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/87818166020D11EF916F0D65C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:10:48 +0000
ROA not before: Wed 30 Apr 2025 19:59:21 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 198247
IP address blocks: 103.85.129.0/24 maxlen: 24
119.160.236.0/24 maxlen: 24
119.160.237.0/24 maxlen: 24
119.160.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl
rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2597 (0xa25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919690C, serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636
Validity
Not Before: Apr 30 19:59:21 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a47318-887f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:50:de:27:d2:af:03:08:43:5a:42:00:b4:24:
2b:39:68:5e:fa:02:94:20:46:85:76:6b:92:cb:26:
c1:99:cc:06:a3:25:65:2b:55:83:be:48:f1:83:d8:
ec:f2:de:27:bd:d8:2e:71:6e:e8:74:1c:14:75:00:
e9:29:9f:c2:2f:f8:91:e8:2c:b7:25:7a:21:5b:1e:
2d:16:2a:d6:c0:40:70:2f:e5:ea:57:42:2e:f3:4a:
49:99:38:bd:ae:26:a3:75:b1:2d:70:a0:aa:c4:79:
24:68:a9:32:87:f2:d1:b6:4b:31:11:7f:1f:1f:18:
34:e5:f3:00:52:ac:72:20:67:f8:52:6a:09:f3:af:
5b:ae:99:7f:94:01:55:99:f7:07:1b:c7:11:c2:ba:
73:b2:54:4d:a2:52:3b:22:38:7b:5a:7e:b6:f7:65:
06:8e:80:47:e4:bc:3f:0a:37:59:68:1b:f3:48:9a:
44:1c:89:c0:99:7a:27:12:09:11:bd:61:e0:4f:f0:
eb:2a:d0:da:bd:87:e9:f9:75:91:7a:82:58:f4:d0:
d6:2c:40:c4:4a:7e:23:b1:05:3d:b0:95:db:d3:b8:
fb:e6:e5:68:24:31:ee:50:2a:34:66:24:ed:20:ac:
12:37:84:25:a3:2d:ea:b4:93:e3:47:0a:7b:69:6f:
2e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:96:BF:C3:E8:0E:8E:D6:58:56:08:CE:80:82:46:CA:16:0B:F2:9C
X509v3 Authority Key Identifier:
keyid:2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/87818166020D11EF916F0D65C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.85.129.0/24
119.160.236.0-119.160.238.255
Signature Algorithm: sha256WithRSAEncryption
b9:d1:58:71:d9:2a:61:1c:cc:db:14:0d:d7:2c:17:49:0c:f0:
34:fd:77:8b:09:ac:37:c3:9a:62:fe:01:ea:d0:f6:1f:b3:ca:
6d:44:6d:79:62:d5:71:06:3f:60:d2:ff:93:18:77:8b:b7:a0:
36:8b:0f:53:10:6a:b3:79:71:a2:a5:b6:12:41:14:73:c2:27:
9b:45:7d:2a:71:28:2f:2c:9f:33:74:24:b6:b7:66:3e:29:b4:
0f:c2:e3:7c:e8:52:c3:16:7b:96:ee:b6:db:d6:56:86:83:ef:
f1:a9:7e:c0:66:27:8b:b5:5c:ac:a6:27:15:07:3a:78:79:52:
95:ca:1a:35:58:3f:50:9f:ba:22:58:0d:68:84:c6:4d:0c:59:
c1:44:6a:58:3d:71:d7:aa:53:67:f4:53:2b:49:a1:b0:0d:78:
2f:80:9e:5d:06:96:a0:9e:b8:73:c6:34:70:99:1c:e9:ff:6d:
94:a2:53:6f:2a:fc:27:cc:7a:92:f7:a5:b7:d9:78:ad:ad:69:
68:e1:3a:f1:88:bc:3b:4f:07:2b:c5:67:ef:22:e5:56:36:6b:
6d:e3:c5:de:0c:b8:8c:fa:50:99:37:08:3e:07:85:47:68:eb:
85:42:6b:1c:2c:d9:23:8a:18:72:e2:59:93:d7:6d:fb:5a:b5:
7a:32:c5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:47 2026 by rpki-client