
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/9F5F74265D7511F18F235C80C1833773.roa
File: 9F5F74265D7511F18F235C80C1833773.roa (raw, json)
Hash identifier: 0fZccuokxMBdsDfqfz3v6IokDESdGPotG9nJBoFw7Zw=
Subject key identifier: 7A:AE:67:AE:DB:97:23:28:0E:B9:70:3E:16:D9:51:3E:65:DA:14:D3
Certificate issuer: /CN=A919C8C4/serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9
Certificate serial: 0960
Authority key identifier: 93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/9F5F74265D7511F18F235C80C1833773.roa
Signing time: Mon 01 Jun 2026 04:51:59 +0000
ROA not before: Mon 01 Jun 2026 04:51:59 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 58411
IP address blocks: 103.210.240.0/24 maxlen: 24
103.210.242.0/24 maxlen: 24
103.210.243.0/24 maxlen: 24
160.20.60.0/24 maxlen: 24
160.20.61.0/24 maxlen: 24
160.20.62.0/24 maxlen: 24
160.20.63.0/24 maxlen: 24
2407:3a40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl
rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:09:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2400 (0x960)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C8C4, serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9
Validity
Not Before: Jun 1 04:51:59 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a1d0fef-ed40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:31:69:ec:f4:62:68:ca:05:2f:0c:2b:53:
4d:54:be:96:93:ef:e6:85:8f:c9:ab:5d:b2:9c:d0:
2b:c6:e6:61:12:ce:d6:4e:10:fb:b9:1e:ff:fc:71:
38:38:59:7e:1c:0c:f3:aa:3e:82:a7:65:a9:66:bd:
3a:b0:0a:dc:cb:6e:5a:fb:46:bf:8a:68:3d:bb:84:
18:c0:d2:31:d9:14:12:34:e9:03:5a:89:69:f7:2d:
55:93:92:47:6b:88:0e:1c:8f:a4:3e:96:66:ea:9c:
9d:53:17:f7:61:10:ed:f6:f3:7c:03:0d:e8:b6:84:
d6:b9:c9:ec:d6:00:8a:55:f7:72:ba:08:e8:c9:ac:
0b:17:55:18:75:f2:5d:a3:f0:c5:e0:b7:c1:7a:9a:
ec:bc:a6:83:29:cd:26:ee:b5:59:7e:ce:d4:9f:b3:
5f:7c:9b:61:2e:31:f4:b0:00:0d:e3:94:ab:94:12:
17:a9:f7:bf:2a:a1:ec:96:66:34:05:60:db:e0:3f:
f7:ef:47:e6:11:54:d1:6a:86:e1:5d:15:40:cc:89:
b4:2b:f4:ca:be:ca:a3:a2:82:17:45:ae:19:49:b8:
cd:18:d7:db:4e:fc:d0:af:db:64:e2:3a:d3:7f:0e:
81:16:27:22:55:b5:b9:d1:8b:eb:fc:68:79:71:21:
f0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AE:67:AE:DB:97:23:28:0E:B9:70:3E:16:D9:51:3E:65:DA:14:D3
X509v3 Authority Key Identifier:
keyid:93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/9F5F74265D7511F18F235C80C1833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.210.240.0/24
103.210.242.0/23
160.20.60.0/22
IPv6:
2407:3a40::/32
Signature Algorithm: sha256WithRSAEncryption
bb:1e:0e:c9:e1:d6:ff:e3:89:0f:55:f8:b9:c2:e1:d0:5a:a6:
fe:09:ea:39:de:e2:7c:90:26:56:d7:bd:64:08:e7:45:ee:fa:
08:59:c6:4f:50:4b:8e:28:d1:e6:22:c3:5e:c5:c6:4a:6d:91:
44:9d:5e:46:ef:e3:89:6a:cd:bf:df:69:a9:6f:ad:c0:77:a3:
07:45:25:17:3e:0c:02:ad:ef:72:7b:fd:51:b0:fb:e5:31:63:
79:65:91:ec:07:a4:d8:13:45:30:61:16:71:da:f0:bf:74:19:
24:22:1f:de:96:31:39:ee:7d:0b:0c:fc:6a:11:77:06:0d:47:
c1:12:69:4a:b4:c9:1e:e2:0c:f1:04:3a:12:25:1f:55:62:78:
02:b8:8b:42:c8:10:e1:61:4d:a4:e2:3e:72:88:6e:ae:13:88:
61:14:b8:cd:36:6b:e7:9e:c8:b4:73:65:0c:f2:6d:23:86:5c:
a0:2a:df:a7:d7:ed:be:f4:a7:30:c5:31:ff:3a:3b:f1:ce:cc:
70:b2:e5:df:9d:a0:41:e3:15:c5:b6:f4:0b:ef:f4:53:40:43:
0d:3e:7c:ff:6f:2f:5b:28:b0:d4:ba:39:9d:00:fb:28:50:a3:
6d:84:4d:d5:fb:dc:ea:67:a6:b5:c2:2b:c9:78:f4:72:c0:9d:
a0:24:e2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:16:44 2026 by rpki-client