
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/D6CC557C6E2C11EEBFE28628C4F9AE02.roa
File: D6CC557C6E2C11EEBFE28628C4F9AE02.roa (raw, json)
Hash identifier: P99mvWZlY8P1geIzs7ku9n4rnRGbQWllNHbE+mokqck=
Subject key identifier: 34:E1:0F:13:CC:2E:DC:C7:8E:1E:85:FA:83:CC:0C:02:D5:2D:E7:AE
Certificate issuer: /CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83
Certificate serial: 0214
Authority key identifier: 10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/D6CC557C6E2C11EEBFE28628C4F9AE02.roa
Signing time: Wed 29 Jul 2026 04:53:06 +0000
ROA not before: Wed 29 Jul 2026 04:53:06 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 55884
IP address blocks: 103.61.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl
rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 02:41:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 532 (0x214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B813, serialNumber=107618E36C91DBED0C8745295D0149842787AF83
Validity
Not Before: Jul 29 04:53:06 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a698732-ac4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:7c:bb:d6:c1:5c:ab:0b:83:20:f9:18:8e:
ab:1e:dd:f2:a4:d9:75:de:5b:bb:7b:99:66:64:64:
e0:61:75:cb:e9:e0:31:24:0d:f6:3f:17:3f:78:6e:
19:a2:c3:d9:61:dd:31:1a:97:84:fb:a9:14:6b:5d:
3e:e2:a7:de:bf:39:9a:2e:fc:15:8c:d1:40:aa:17:
23:e9:1d:88:4f:68:13:e9:5d:e5:99:2a:df:b9:ff:
2b:b4:e3:b7:1b:fa:d7:12:f5:9f:c4:4a:22:cb:87:
9c:76:5a:e5:4e:b4:57:18:22:f5:1e:82:24:50:d1:
dc:32:0c:e6:94:2a:39:9a:be:85:c6:51:53:e0:ea:
d8:bf:f5:53:bb:a4:31:ba:e3:06:08:9f:91:e9:51:
7d:36:d5:25:7c:52:d9:a4:55:24:dc:a7:bb:9d:87:
40:64:c7:89:27:32:f4:ea:70:01:b7:88:69:e6:54:
f9:d2:fa:f1:9f:f6:7d:17:99:91:e4:b2:53:bd:68:
73:0f:62:d6:db:76:1f:ad:58:4b:37:0c:59:fd:81:
29:a1:9d:ad:38:bd:3c:1b:6e:49:d0:bb:e0:cc:02:
ee:08:e3:18:e2:03:c4:01:70:a7:00:1a:2a:a1:17:
52:7d:af:b5:3d:6b:e1:27:6a:23:30:be:c3:14:cb:
92:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E1:0F:13:CC:2E:DC:C7:8E:1E:85:FA:83:CC:0C:02:D5:2D:E7:AE
X509v3 Authority Key Identifier:
keyid:10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/D6CC557C6E2C11EEBFE28628C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.61.96.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:da:ed:08:7b:e8:f8:c9:fd:43:51:b6:7b:87:f4:23:4b:08:
04:5c:37:45:ee:7a:68:37:cf:e2:6b:2d:36:09:0b:7f:62:0f:
12:34:78:46:9f:3f:d3:44:96:74:fd:1d:0a:88:70:f1:0a:06:
80:62:8b:5f:5f:3b:2a:7b:9a:2a:56:0c:b6:11:c3:c0:9d:16:
1d:88:31:e7:f9:7f:ee:b6:8e:57:a7:92:85:6b:e2:7c:54:d2:
a6:d0:74:a5:36:95:e9:f9:25:90:3e:d9:03:06:04:c9:72:b4:
1e:f0:47:f6:ba:08:a0:c9:1f:28:4d:22:c2:01:b0:10:f3:50:
97:75:6c:56:7e:88:c9:99:67:49:52:69:12:0a:63:33:b7:ff:
40:d9:31:e2:11:d5:6c:4b:34:ea:6a:6e:c9:ff:90:01:8b:42:
c7:de:17:50:f5:66:02:c3:29:f8:9d:83:c8:4f:6d:5a:55:fe:
c6:2a:cf:2a:5a:10:02:93:5a:5e:2b:4a:73:27:e3:99:64:f8:
eb:d4:25:8c:38:d6:9d:43:d5:8c:8e:5f:5b:2d:dc:ce:6a:f3:
72:68:4a:aa:96:7c:d4:27:b5:7d:2f:1e:5b:0a:11:74:ff:61:
76:70:ba:75:15:c2:07:36:b7:f4:93:75:ca:a8:4e:ec:b5:91:
85:d9:e6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:19:02 2026 by rpki-client