
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/C7FAB578FEEC11EFB40D667FC4F9AE02.roa
File: C7FAB578FEEC11EFB40D667FC4F9AE02.roa (raw, json)
Hash identifier: KytT7CwlQe11jWfAsLPRMxvbGLLkhLmlX/I5QLbz6lk=
Subject key identifier: 38:73:10:4B:AB:70:78:1B:94:B6:79:73:EE:6D:1C:22:7D:CF:D6:A2
Certificate issuer: /CN=A911A7D2/serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC
Certificate serial: E2
Authority key identifier: B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/C7FAB578FEEC11EFB40D667FC4F9AE02.roa
Signing time: Wed 13 May 2026 07:39:13 +0000
ROA not before: Wed 13 May 2026 07:39:12 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 398704
IP address blocks: 103.167.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl
rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A7D2, serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC
Validity
Not Before: May 13 07:39:12 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a042aa0-12f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:56:86:fa:d1:b0:9d:2d:98:8c:5f:cd:2f:
4f:bd:7e:12:e4:aa:78:63:da:99:da:30:2b:90:55:
63:a5:60:90:08:18:f3:ac:05:90:93:2c:88:a2:9f:
e2:2e:a4:b4:2c:18:10:54:e3:8c:e0:ae:95:0e:fe:
cb:53:17:2a:61:3b:5f:86:bf:a4:e9:d9:90:68:b3:
ea:66:96:32:60:10:41:97:b9:e9:a6:ba:03:2d:d8:
e6:49:24:94:46:ed:5f:45:67:e9:fa:b8:b6:6f:e1:
ac:2e:ec:94:0b:9b:be:26:00:55:d9:aa:94:58:da:
fb:21:7c:9a:77:9f:da:43:b8:e0:09:c7:08:ab:14:
05:8a:49:0b:6a:48:d5:e6:c9:6f:82:c9:84:0c:5f:
a2:64:2e:e2:4a:60:78:f2:9b:a8:55:4e:04:c4:e2:
3e:62:7f:7c:f2:04:07:32:6f:02:7b:ec:3a:65:26:
b6:92:d4:4e:b5:ac:33:d2:2d:8a:db:43:3e:ec:d8:
04:8e:66:97:30:fa:d2:80:8a:8b:d5:82:dd:d6:ff:
b8:69:54:8b:47:dd:a3:83:f2:19:eb:9f:bb:fc:14:
95:61:47:70:97:e2:c2:54:38:1a:29:c0:fb:2a:49:
06:7f:6f:96:02:76:52:1c:ee:82:ae:1e:00:68:e4:
d1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:73:10:4B:AB:70:78:1B:94:B6:79:73:EE:6D:1C:22:7D:CF:D6:A2
X509v3 Authority Key Identifier:
keyid:B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/C7FAB578FEEC11EFB40D667FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.60.0/23
Signature Algorithm: sha256WithRSAEncryption
74:c6:63:1a:d7:e9:90:98:6a:9c:22:25:79:66:f5:be:25:90:
50:df:46:c9:21:68:84:c8:99:2a:fd:25:02:37:1f:ed:46:5d:
9d:5f:4d:e0:e1:db:a9:c3:5d:10:92:24:72:fc:7d:c2:6f:d6:
f4:63:82:f9:cd:20:cf:e2:f1:e0:b0:42:f4:88:70:57:43:fe:
7d:2b:7a:fb:66:e4:27:c0:31:4a:b1:e4:f8:18:ee:76:10:cb:
bd:bf:a1:cb:ad:1f:20:11:98:e5:64:6d:59:ab:96:91:0b:e3:
cb:7d:be:7d:bf:77:6e:ae:d6:4a:eb:7c:4a:6d:78:d4:9a:2c:
84:3d:8e:f9:7a:60:6d:81:76:3f:78:bf:6c:cd:e8:09:8e:2a:
c7:5c:eb:b3:5f:04:d7:cf:79:05:36:d4:95:96:82:15:49:c0:
e9:e0:57:25:94:13:54:66:0c:38:d8:7c:b9:bb:d7:b3:55:bd:
8c:a4:6d:45:ae:42:ac:a2:24:c1:33:a8:76:3c:a1:55:84:3a:
3e:0e:10:42:2e:bd:5a:ec:cd:cc:b6:ad:e5:df:5c:7b:4d:6a:
4d:57:32:4e:ad:ba:71:da:e4:36:90:97:2a:89:09:a3:87:da:
22:b6:54:eb:96:c3:c8:82:a1:44:5b:7e:b7:6c:7d:d9:c5:c6:
aa:d9:63:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:38:13 2026 by rpki-client