
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/06EFF1D07D4B11EBA736017DC4F9AE02.roa
File: 06EFF1D07D4B11EBA736017DC4F9AE02.roa (raw, json)
Hash identifier: NGP8ke2DkEB3hYpbUVG6UTVU7Lf4hrBe8aQecdq/b3Q=
Subject key identifier: 11:90:D9:AC:F8:65:91:67:E8:02:42:68:14:77:81:3B:89:B1:C5:38
Certificate issuer: /CN=A919FE97/serialNumber=F906D97F7AA87C86DA99039D236ECDB51D231F7A
Certificate serial: 0703
Authority key identifier: F9:06:D9:7F:7A:A8:7C:86:DA:99:03:9D:23:6E:CD:B5:1D:23:1F:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/06EFF1D07D4B11EBA736017DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:43:22 +0000
ROA not before: Wed 02 Apr 2025 22:53:39 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 45780
IP address blocks: 103.208.184.0/22 maxlen: 24
137.59.188.0/24 maxlen: 24
137.59.189.0/24 maxlen: 24
137.59.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.crl
rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1795 (0x703)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FE97, serialNumber=F906D97F7AA87C86DA99039D236ECDB51D231F7A
Validity
Not Before: Apr 2 22:53:39 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3fc2a-f86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8f:5e:b4:2b:a9:dd:88:d2:6b:de:70:fc:98:
f8:0b:f5:0e:84:b8:cf:cb:91:fd:f4:a2:69:d0:e9:
49:a2:74:67:c9:ec:17:b6:e8:4f:46:bf:2a:db:b6:
d1:70:6c:ed:96:2c:f0:93:aa:00:bc:0c:50:57:f7:
bc:2d:da:08:07:7d:97:ca:f4:48:b9:45:32:01:37:
59:2a:76:f7:26:7f:e8:bf:92:0b:99:0e:a3:d6:25:
57:52:95:1a:17:bb:97:ad:c2:2c:99:48:f4:df:04:
d6:e2:d5:c1:1a:d0:7e:f1:64:82:66:cd:5e:72:21:
50:2d:22:52:e7:73:fc:9b:cb:6c:7a:a9:3b:55:c5:
87:e1:67:09:04:41:67:2e:53:df:2c:08:7b:ae:14:
34:93:ad:c5:d9:a4:ba:dd:d9:5c:a9:da:18:32:e1:
fe:61:2d:54:ba:bb:82:c6:a2:57:4a:f2:1a:88:72:
26:5b:55:95:2c:a8:8a:d8:a1:13:ff:a5:aa:a1:c2:
3f:91:68:c9:68:b8:97:f6:80:e2:84:ec:8e:f0:11:
5d:bd:62:d3:cd:f3:ae:21:59:d7:cb:dd:14:cd:c6:
70:f8:2d:33:5b:45:ae:1e:32:7f:ca:7d:70:8a:6a:
fe:03:79:48:6b:92:40:36:da:f6:ce:c8:45:cf:af:
43:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:90:D9:AC:F8:65:91:67:E8:02:42:68:14:77:81:3B:89:B1:C5:38
X509v3 Authority Key Identifier:
keyid:F9:06:D9:7F:7A:A8:7C:86:DA:99:03:9D:23:6E:CD:B5:1D:23:1F:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/06EFF1D07D4B11EBA736017DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.208.184.0/22
137.59.188.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:44:01:0d:9f:c5:61:c7:a3:73:c4:53:5d:c9:d0:3c:cd:11:
e6:49:ed:4c:81:13:1b:33:84:24:89:2c:bb:a1:35:d1:f3:ea:
4d:02:e2:01:91:fe:de:2e:77:d9:bc:f3:76:d7:76:3c:20:f5:
04:e7:f3:6b:be:14:e9:cb:ff:39:44:1c:c2:d6:cc:28:ba:21:
2c:33:c0:f6:0c:fe:72:cf:a0:b7:ad:42:1d:7c:8b:a1:23:ba:
35:1b:78:4c:5f:5c:c4:25:ce:0f:b9:08:3c:18:7f:00:5f:a9:
94:39:0f:69:90:50:77:50:81:9b:95:84:1d:db:1c:74:dd:b1:
09:ea:dc:73:73:c6:b3:b2:bd:94:93:4f:5f:0d:c4:62:2b:8e:
52:30:16:ee:bd:6d:1a:8e:c0:e6:e9:c5:ad:74:c6:bc:59:e7:
3e:70:8b:54:de:a7:e9:31:9f:0d:2d:75:64:ea:a3:ca:42:0b:
26:c2:52:ec:0f:a4:44:28:5e:57:18:99:c0:9c:d4:45:de:a2:
da:34:53:90:1f:47:72:b3:1a:db:9c:2c:2f:ca:90:ca:41:e3:
b9:de:f1:8a:36:05:3a:1f:db:1b:3f:43:ad:e7:93:20:e1:95:
23:66:23:24:25:4d:39:50:b6:55:dd:39:3a:69:f8:e5:85:7c:
ad:c4:a3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:05 2026 by rpki-client