
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/D6D22DBC53CD11EA9301951AC4F9AE02.roa
File: D6D22DBC53CD11EA9301951AC4F9AE02.roa (raw, json)
Hash identifier: runmHBxR1tD48gkbVs4lorKzW7FMtqLJ5VaCHiE1PLM=
Subject key identifier: F8:6A:36:FB:31:71:71:F5:4D:47:7C:45:CA:CD:D0:CE:E2:8C:C2:F7
Certificate issuer: /CN=A919C82F/serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7
Certificate serial: 0B43
Authority key identifier: BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/D6D22DBC53CD11EA9301951AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:46:20 +0000
ROA not before: Mon 02 Jun 2025 19:43:34 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 137934
IP address blocks: 103.117.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl
rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:22:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2883 (0xb43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C82F, serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7
Validity
Not Before: Jun 2 19:43:34 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4270c-cd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4b:6d:af:b8:72:ab:ef:f5:eb:be:bf:19:0b:
57:c5:0d:20:40:54:24:2f:3b:06:42:83:b4:63:9d:
2c:cd:2d:11:59:45:23:04:69:d0:83:39:5b:cc:c8:
f6:08:fc:be:dd:4d:e9:ff:83:78:fd:d1:93:67:0c:
6a:33:fe:91:77:99:d2:09:f0:4a:49:a4:cb:f1:d1:
92:f9:d0:1d:72:95:af:b0:c3:97:7f:f6:5d:f8:b7:
eb:88:38:da:55:77:b9:7f:0a:d4:f6:38:f5:12:29:
4e:04:27:ad:3e:f2:6f:93:81:4e:8f:44:17:3a:2b:
75:36:db:3e:8a:af:6f:39:99:a5:d0:7c:f0:d4:60:
c2:ff:28:dd:15:2d:06:3f:5a:77:85:b0:e7:1d:86:
bc:9b:3b:8f:57:53:a8:0d:a3:c1:d5:43:7d:67:63:
75:da:ae:18:34:38:f6:4e:01:bf:f4:a8:62:d0:c4:
5c:7d:e6:c9:f4:4b:46:01:0c:7a:2b:64:0a:66:cb:
fa:20:9a:17:0e:2e:c4:c6:47:25:a1:03:df:c4:e4:
f7:28:0d:c0:86:23:90:3b:7d:1c:47:a9:9c:09:61:
a7:94:7c:77:7c:92:0e:df:9c:c1:8c:ba:0b:77:73:
74:f9:2c:cd:fe:5a:4b:f1:e2:0b:a0:13:31:7b:dd:
fb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6A:36:FB:31:71:71:F5:4D:47:7C:45:CA:CD:D0:CE:E2:8C:C2:F7
X509v3 Authority Key Identifier:
keyid:BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/D6D22DBC53CD11EA9301951AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.117.142.0/23
Signature Algorithm: sha256WithRSAEncryption
70:63:27:8b:eb:c2:3c:31:65:19:35:fb:a0:3e:96:a6:15:14:
3b:a5:01:cf:22:1e:72:f0:5b:fe:56:93:1d:55:1d:af:14:8d:
4f:c0:16:09:25:f2:6f:c1:cd:fb:a7:82:ab:93:f8:63:61:d8:
df:08:23:f2:e3:22:6e:cf:67:ed:e6:31:4e:2d:6e:09:f4:0f:
e9:06:4e:0c:9f:a6:26:0d:c7:ab:e6:4a:17:ba:d8:22:87:3c:
14:d0:e4:b5:90:85:67:84:2f:63:5b:e4:28:51:85:63:a0:2e:
5e:3e:a2:53:6b:a4:d4:b3:a6:37:63:19:3a:52:74:11:3a:8b:
e1:a1:2e:e9:2a:e0:6f:a6:3b:b1:cd:3f:ce:3d:7f:18:44:08:
a7:44:01:20:53:e3:7e:50:07:77:bb:99:95:e5:ad:05:01:9c:
32:d2:98:9a:7f:30:1b:00:4f:e5:36:d6:b8:59:3e:72:a5:f4:
9e:08:fd:9a:ca:e2:b9:52:2b:b4:88:a9:9c:06:19:e8:38:69:
8a:d4:a1:36:3e:91:c1:3d:a6:40:9b:ed:5c:d2:aa:3d:02:f6:
48:00:04:bb:04:a5:f6:37:7a:1c:3a:09:f4:07:b3:af:83:f3:
6a:eb:cd:e3:1c:20:51:f1:0d:f4:ee:84:13:d2:74:72:f0:2b:
88:ee:2c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:08:46 2026 by rpki-client