
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/63C2AF74D99E11F0A31734B566D3641D.roa
File: 63C2AF74D99E11F0A31734B566D3641D.roa (raw, json)
Hash identifier: 63YdLXndxb2ZNy3UKl9Em7+7aoRcbOsCAOFA6tKDt14=
Subject key identifier: 0F:C4:0D:CF:8C:FF:D7:78:0C:89:39:DE:60:F5:D8:EC:60:46:1B:5B
Certificate issuer: /CN=A91FEDE7/serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866
Certificate serial: 63
Authority key identifier: E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/63C2AF74D99E11F0A31734B566D3641D.roa
Signing time: Fri 05 Jun 2026 08:40:52 +0000
ROA not before: Fri 05 Jun 2026 08:40:52 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 152194
IP address blocks: 43.243.72.0/22 maxlen: 22
43.243.72.0/24 maxlen: 24
43.243.73.0/24 maxlen: 24
43.243.74.0/24 maxlen: 24
43.243.75.0/24 maxlen: 24
103.230.228.0/22 maxlen: 24
2405:fcc0::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl
rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:09:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEDE7, serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866
Validity
Not Before: Jun 5 08:40:52 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a228b94-8f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:35:b5:5d:8e:91:e6:93:75:2c:4c:c4:8f:f7:
5e:62:b3:b9:af:92:6f:e5:cd:64:38:b9:4d:ac:6e:
51:31:54:7c:21:db:52:cc:28:5f:0a:fc:af:c1:25:
c0:79:ed:00:f1:51:e8:64:7e:3b:53:0c:21:03:e2:
74:7a:58:fc:1a:00:ff:4d:a6:55:4d:af:5f:4d:d5:
9f:e9:e1:4e:18:5b:39:96:3a:b0:34:66:0f:f3:3a:
07:9e:41:10:fd:da:a8:b7:55:bb:58:7e:bc:a9:7c:
20:9e:db:29:9a:71:66:87:c4:85:17:4e:a8:46:91:
4f:db:b4:6a:6c:69:84:ec:7b:11:aa:30:82:8b:b3:
6b:dd:a9:a7:7e:95:35:63:a0:ec:c2:89:2b:19:09:
d1:ec:6d:51:04:8f:54:6d:b9:d2:7a:8c:50:fb:16:
d0:77:cf:e0:c5:e2:fc:67:98:cd:27:a5:f8:c4:46:
c7:f8:db:47:cb:56:b3:77:96:2c:3c:7b:44:86:8c:
1e:32:7f:24:df:5e:b6:d3:9f:0b:69:2f:5d:d1:49:
d8:f4:2d:7d:a2:64:2f:2e:1d:14:4b:e0:b4:3a:4d:
68:78:e7:14:d3:96:73:95:f4:2d:a9:52:a6:6b:15:
3c:a4:73:6c:41:4e:85:8c:3e:44:5f:ee:c7:93:cc:
6f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C4:0D:CF:8C:FF:D7:78:0C:89:39:DE:60:F5:D8:EC:60:46:1B:5B
X509v3 Authority Key Identifier:
keyid:E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/63C2AF74D99E11F0A31734B566D3641D.roa
sbgp-ipAddrBlock: critical
IPv4:
43.243.72.0/22
103.230.228.0/22
IPv6:
2405:fcc0::/32
Signature Algorithm: sha256WithRSAEncryption
52:93:3c:31:55:8a:72:dc:cc:a6:45:42:1c:f2:06:77:95:9f:
87:06:da:58:e5:c5:c4:df:3e:51:d9:ec:d9:4f:d5:db:13:ca:
38:bd:fc:dd:ce:bb:6f:83:ca:6a:81:b7:aa:84:9a:a4:af:ee:
6d:5c:e2:c7:b2:7d:e0:02:a8:e1:1e:f8:25:77:c9:84:57:6e:
af:e2:61:47:41:e8:c3:8e:3a:c2:cd:c2:0a:09:82:29:95:f9:
12:23:ae:1a:52:3f:2f:6f:86:37:0c:df:ea:24:33:ed:f6:1d:
a4:cc:ed:eb:f0:e2:30:b5:7a:54:6c:af:67:92:21:e1:6d:c6:
00:6d:35:be:ef:99:3a:d6:f6:49:22:23:f3:a1:67:34:a6:3f:
7d:04:41:86:fc:e7:ac:a5:de:af:ff:82:62:af:42:90:9b:31:
58:ff:8b:43:e5:77:50:1d:ec:e8:f4:61:a2:44:7d:fb:c8:24:
c6:39:6f:a1:78:55:10:b4:f1:fb:b6:95:45:53:c3:28:28:8e:
a7:0f:e2:ed:59:73:10:ea:5f:d2:f0:6a:66:a8:4a:31:16:04:
dc:25:75:5c:87:f0:7c:5f:c5:86:d5:d2:bd:90:30:2a:fb:6a:
ff:e5:10:11:30:73:fb:0c:40:24:2f:32:28:54:70:1b:56:30:
29:95:8f:76
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
RURFNzExMC8GA1UEBRMoRTFDNTlGQTVBNkJDODc2RjdDRTRBNDZDQUFBRTYwNjA0
RjA1MTg2NjAeFw0yNjA2MDUwODQwNTJaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMjI4Yjk0LThmMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCUNbVdjpHmk3UsTMSP915is7mvkm/lzWQ4uU2sblExVHwh21LMKF8K/K/BJcB5
7QDxUehkfjtTDCED4nR6WPwaAP9NplVNr19N1Z/p4U4YWzmWOrA0Zg/zOgeeQRD9
2qi3VbtYfrypfCCe2ymacWaHxIUXTqhGkU/btGpsaYTsexGqMIKLs2vdqad+lTVj
oOzCiSsZCdHsbVEEj1RtudJ6jFD7FtB3z+DF4vxnmM0npfjERsf420fLVrN3liw8
e0SGjB4yfyTfXrbTnwtpL13RSdj0LX2iZC8uHRRL4LQ6TWh45xTTlnOV9C2pUqZr
FTykc2xBToWMPkRf7seTzG/5AgMBAAGjggJ1MIICcTAdBgNVHQ4EFgQUD8QNz4z/
13gMiTneYPXY7GBGG1swHwYDVR0jBBgwFoAU4cWfpaa8h2985KRsqq5gYE8FGGYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFREU3L0U3RkQzMDU4RDk5
RDExRjBCQkU3ODM5OTY2RDM2NDFELzRjV2ZwYWE4aDI5ODVLUnNxcTVnWUU4RkdH
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNGNXZnBhYThoMjk4NUtSc3FxNWdZRThGR0dZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RURFNy9FN0ZEMzA1OEQ5OUQxMUYwQkJFNzgzOTk2NkQzNjQxRC82M0MyQUY3NEQ5
OUUxMUYwQTMxNzM0QjU2NkQzNjQxRC5yb2EwNAYIKwYBBQUHAQcBAf8EJTAjMBIE
AgABMAwDBAIr80gDBAJn5uQwDQQCAAIwBwMFACQF/MAwDQYJKoZIhvcNAQELBQAD
ggEBAFKTPDFVinLczKZFQhzyBneVn4cG2ljlxcTfPlHZ7NlP1dsTyji9/N3Ou2+D
ymqBt6qEmqSv7m1c4seyfeACqOEe+CV3yYRXbq/iYUdB6MOOOsLNwgoJgimV+RIj
rhpSPy9vhjcM3+okM+32HaTM7evw4jC1elRsr2eSIeFtxgBtNb7vmTrW9kkiI/Oh
ZzSmP30EQYb856yl3q//gmKvQpCbMVj/i0Pld1Ad7Oj0YaJEffvIJMY5b6F4VRC0
8fu2lUVTwygojqcP4u1ZcxDqX9LwamaoSjEWBNwldVyH8HxfxYbV0r2QMCr7av/l
EBEwc/sMQCQvMihUcBtWMCmVj3Y=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:38:40 2026 by rpki-client