
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/D663158A6E2C11EEBFE28628C4F9AE02.roa
File: D663158A6E2C11EEBFE28628C4F9AE02.roa (raw, json)
Hash identifier: q+XSi1s238dMGhuwUgaHufUBQNrf/5iPlR0JXsxUO7Y=
Subject key identifier: 62:00:AD:2F:95:C6:57:A8:B1:C5:E3:10:A6:C7:8B:86:1F:53:C4:85
Certificate issuer: /CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83
Certificate serial: 0213
Authority key identifier: 10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/D663158A6E2C11EEBFE28628C4F9AE02.roa
Signing time: Wed 29 Jul 2026 04:53:04 +0000
ROA not before: Wed 29 Jul 2026 04:53:04 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 4764
IP address blocks: 103.61.97.0/24 maxlen: 24
103.61.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl
rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 02:41:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 531 (0x213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B813, serialNumber=107618E36C91DBED0C8745295D0149842787AF83
Validity
Not Before: Jul 29 04:53:04 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a698730-3088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:ef:92:46:c8:80:bc:14:25:c3:41:f6:e2:
c9:0b:7c:cc:b4:5b:cc:11:71:c3:e0:01:36:2b:33:
cf:45:bf:42:45:c0:5a:5b:d3:e6:91:53:7b:68:81:
ee:f7:4a:97:7a:ca:8f:af:39:c4:9f:52:a6:70:c1:
48:8c:61:15:74:29:79:6b:84:36:fc:a0:31:66:5c:
31:aa:10:79:05:9d:eb:89:71:08:f4:f3:3f:b5:ce:
75:70:88:e3:3a:41:15:78:ea:75:76:c2:82:e9:69:
89:80:96:f0:e8:73:c7:38:d6:5c:f5:ea:58:4b:df:
80:79:f1:72:c2:02:4f:f2:f6:df:99:13:33:ea:72:
af:08:f8:b9:8c:ac:b0:00:c8:3b:be:f2:88:0d:7a:
0c:dd:33:36:ab:6a:10:6f:c6:c8:1a:c1:18:bb:4b:
94:8a:db:89:a1:99:34:d2:43:61:ef:32:42:89:e0:
a4:00:e7:2a:bc:78:be:6e:8d:f5:b7:19:46:07:96:
ae:95:d4:80:0d:f5:63:a6:28:29:cd:ae:dd:2c:db:
43:86:a7:9d:e4:4b:be:19:32:50:37:dc:4a:46:bc:
61:93:4d:75:63:d7:ce:98:11:e9:80:b1:5d:84:87:
49:64:b3:5e:b2:9e:09:1d:25:09:a8:be:71:5b:28:
3f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:00:AD:2F:95:C6:57:A8:B1:C5:E3:10:A6:C7:8B:86:1F:53:C4:85
X509v3 Authority Key Identifier:
keyid:10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/D663158A6E2C11EEBFE28628C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.61.97.0/24
103.61.99.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:31:e8:13:f0:14:ef:4a:85:8b:0c:af:42:7e:65:5b:d9:39:
68:24:14:35:78:43:a6:f7:78:7d:e7:41:7e:22:de:f0:12:c1:
4e:fa:f8:24:d9:fc:0c:96:44:a8:12:de:7f:6c:8a:99:29:f9:
6d:ad:90:50:a3:53:ac:f7:2a:b8:32:d8:5d:cb:d0:77:64:0a:
b2:32:c7:17:5c:9c:a2:d6:f2:e1:ff:68:fd:34:21:73:1f:af:
10:7f:dc:3b:b6:9b:45:95:c8:38:59:f9:c7:96:8d:7a:5a:dd:
42:78:99:ee:01:84:68:05:78:cb:4f:8e:8d:e0:35:a3:0d:85:
fe:10:d7:9a:3a:61:32:c9:48:40:5b:73:7d:9f:03:7f:54:ea:
70:15:b4:6c:55:00:c2:6e:96:19:85:f3:d4:5f:46:03:d7:6f:
a0:20:a0:f0:53:96:b6:8f:1f:11:b9:10:2a:cb:5f:bd:8e:10:
8b:04:59:7f:64:da:5b:fc:1b:85:07:6c:14:0d:ce:08:c7:08:
b7:b3:fb:64:84:99:51:2d:5b:5d:c7:5d:f7:29:7f:09:c7:18:
c0:e9:1a:fb:aa:72:34:3b:79:77:60:49:77:a9:e6:6c:92:cb:
ff:f4:8a:56:6a:28:ab:1e:ca:c4:39:f2:58:2e:39:16:50:34:
ec:76:96:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:44:10 2026 by rpki-client