
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/602678F8252A11EEA290E91FC4F9AE02.roa
File: 602678F8252A11EEA290E91FC4F9AE02.roa (raw, json)
Hash identifier: axIru7MKX6ecXQsiWBKjZkKaXNLS528jv/SfOGQ616U=
Subject key identifier: 0C:EA:ED:0D:CF:3C:59:DD:92:E7:09:3D:58:7A:6C:29:73:E6:36:15
Certificate issuer: /CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E
Certificate serial: 0243
Authority key identifier: DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/602678F8252A11EEA290E91FC4F9AE02.roa
Signing time: Sat 01 Aug 2026 04:51:59 +0000
ROA not before: Sat 01 Aug 2026 04:51:59 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 136928
IP address blocks: 103.215.186.0/24 maxlen: 24
2001:df2:9140::/48 maxlen: 52
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl
rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 02:59:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 579 (0x243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116351, serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E
Validity
Not Before: Aug 1 04:51:59 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a6d7b6f-a84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:87:58:0c:5f:3c:90:03:3c:f9:1c:02:94:3d:
62:e6:0d:3e:d9:f4:61:9b:92:13:32:5b:a0:e9:9c:
76:ce:f2:de:0d:c7:a0:32:8c:14:e7:84:93:e8:ca:
ae:d4:ba:79:2e:5b:3e:f0:46:3c:98:b7:91:4d:42:
7e:02:a3:d8:8b:04:b6:02:74:2b:30:bb:5d:d3:7d:
57:39:58:35:0f:2b:6d:17:6b:e6:51:fd:ea:11:83:
70:58:aa:90:ef:1a:14:f9:84:66:8a:e5:36:e1:93:
e0:cf:6f:b0:7a:a4:5d:cf:1c:37:53:0f:4d:38:7f:
2e:05:00:42:08:c0:18:a5:44:d1:50:aa:74:87:46:
15:65:b7:80:bd:51:69:aa:ee:9c:7d:57:27:c6:ff:
3a:89:8e:33:ce:11:31:fc:74:02:7a:d8:af:25:3f:
81:3d:80:f8:b2:8d:ee:8e:ef:c3:aa:43:5a:55:70:
02:c5:07:81:1a:9f:f5:61:ca:93:15:fd:3c:6c:6d:
db:47:2d:b8:97:1a:73:3d:86:5c:fa:94:30:a2:d8:
46:0c:f5:44:ea:65:f4:68:fb:8b:df:7c:55:29:c5:
f6:18:81:90:99:c9:0a:c3:8d:77:e4:a8:82:c4:62:
91:84:81:83:00:77:eb:d4:fd:e1:dc:be:cb:00:b6:
b6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EA:ED:0D:CF:3C:59:DD:92:E7:09:3D:58:7A:6C:29:73:E6:36:15
X509v3 Authority Key Identifier:
keyid:DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/602678F8252A11EEA290E91FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.215.186.0/24
IPv6:
2001:df2:9140::/48
Signature Algorithm: sha256WithRSAEncryption
0a:20:47:04:d3:c7:d8:29:39:3a:f7:50:6b:d9:4b:b4:cb:c7:
9c:04:1d:20:69:05:29:04:60:19:d6:e6:0c:ce:a9:75:01:b2:
08:fb:c6:3a:33:4d:da:d0:9b:be:49:f9:66:42:f0:31:02:64:
60:3f:d0:db:8d:e8:ef:f4:97:5f:09:91:e8:25:b5:1a:56:37:
81:d7:44:20:b1:5c:af:7e:58:9c:9b:bb:f0:40:f5:c1:ec:aa:
80:49:48:0d:9e:74:fa:e5:5f:c8:21:13:a4:f6:ff:41:55:24:
aa:dc:8c:7d:bb:49:86:b5:a0:d2:fc:c8:ef:aa:1e:57:17:2c:
82:d0:64:72:a6:d3:a0:14:0d:2b:8c:35:11:78:63:6d:0e:af:
6f:c2:66:0a:66:bd:55:5c:f7:39:a4:0d:7f:77:16:a5:7b:fd:
2a:76:20:9c:9a:6b:ed:a0:f0:70:42:c8:78:38:1c:e2:2a:ab:
b0:4a:ba:6d:55:15:0e:cc:f0:3f:0e:d0:07:b7:b0:35:2d:97:
97:6f:db:1d:ec:0d:bb:4a:7f:21:70:b1:c6:a3:fc:58:8f:63:
86:d5:b6:83:11:7c:45:a1:f4:34:d2:a5:46:35:78:96:66:d6:
96:79:39:25:2e:a7:c8:1f:c0:e6:72:97:ad:17:44:ea:38:69:
6c:53:7f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:15:02 2026 by rpki-client