
$ rpki-client -vvf rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/207B27560EE411EDA32ABE0FC4F9AE02.roa
File: 207B27560EE411EDA32ABE0FC4F9AE02.roa (raw, json)
Hash identifier: zcFRYl5Q4mNhpY1XovJ0+EC+ItNzLgWuO2FWQiHPz2A=
Subject key identifier: 23:E0:98:0B:C0:AE:EB:3B:38:1E:C3:60:7B:29:4F:D1:EB:7A:DB:B2
Certificate issuer: /CN=A912391D/serialNumber=056BEF46C7315837EBADEA41780B9E41A3FB7EA0
Certificate serial: 032B
Authority key identifier: 05:6B:EF:46:C7:31:58:37:EB:AD:EA:41:78:0B:9E:41:A3:FB:7E:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/207B27560EE411EDA32ABE0FC4F9AE02.roa
Signing time: Sat 09 May 2026 01:31:55 +0000
ROA not before: Sat 09 May 2026 01:31:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45657
IP address blocks: 103.6.105.0/24 maxlen: 24
103.99.211.0/24 maxlen: 24
103.99.224.0/24 maxlen: 24
103.99.225.0/24 maxlen: 24
203.12.45.0/24 maxlen: 24
203.166.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.crl
rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 01:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 811 (0x32b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912391D, serialNumber=056BEF46C7315837EBADEA41780B9E41A3FB7EA0
Validity
Not Before: May 9 01:31:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69fe8e8b-4049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:d7:84:13:f8:b8:80:bb:6b:56:7b:42:ec:
d6:d3:c4:47:4c:34:69:23:63:78:28:5d:9a:ca:d3:
1f:37:3b:5c:c9:d6:dc:fa:27:e5:bb:ba:34:e8:2b:
11:da:14:b1:76:43:ec:b3:b4:71:18:65:0d:b6:e6:
91:ab:80:b6:36:f8:e7:22:02:b9:f5:fc:d4:38:de:
bf:04:63:16:19:6f:95:9f:0b:10:77:70:07:e9:d0:
72:33:eb:1a:f6:7e:da:ce:4a:f4:14:c3:e8:cf:ae:
a6:74:a7:2b:90:f0:f2:b2:5d:03:6d:d7:19:18:37:
92:0e:75:02:9d:7d:1e:b0:9e:62:ed:18:56:96:17:
c3:95:33:32:a2:10:53:57:fd:fc:e2:55:6b:f7:76:
a2:fd:c2:3d:8f:d2:22:c8:4f:0a:ea:38:63:6d:85:
0d:84:8e:ac:33:85:3b:7c:d4:73:55:a0:32:e5:a3:
f2:9f:d5:73:ee:00:89:e2:e0:75:5b:78:8c:3f:3c:
58:d7:9b:cc:51:dd:74:d6:29:63:0b:68:ba:a5:61:
fa:8d:35:73:c6:15:4c:f4:82:22:75:c8:1f:14:a2:
9b:66:4e:a9:ac:e8:87:14:e0:09:06:8d:f1:7e:67:
bf:7f:62:10:06:83:db:0f:c9:43:25:6a:db:4c:df:
a1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E0:98:0B:C0:AE:EB:3B:38:1E:C3:60:7B:29:4F:D1:EB:7A:DB:B2
X509v3 Authority Key Identifier:
keyid:05:6B:EF:46:C7:31:58:37:EB:AD:EA:41:78:0B:9E:41:A3:FB:7E:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/207B27560EE411EDA32ABE0FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.6.105.0/24
103.99.211.0/24
103.99.224.0/23
203.12.45.0/24
203.166.219.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:6b:b3:9c:d1:80:0b:e6:cb:11:dd:31:5e:99:3a:a5:88:47:
10:8a:1d:5e:d9:a2:ef:77:56:5c:bb:81:e3:08:c8:6e:ca:19:
dc:93:ba:9f:5f:28:bf:ed:de:34:6b:d2:27:98:3b:6a:9a:5e:
39:e3:d5:e4:13:52:69:9a:a3:67:33:dc:03:c0:f2:62:39:0d:
d7:62:d6:65:c0:14:d7:5e:25:01:ac:dd:87:1c:b5:ea:2b:42:
80:62:57:74:58:ee:c3:5b:7d:68:f6:bf:5c:a3:c7:b3:c5:0b:
0e:02:47:1d:75:57:53:34:ce:62:0c:a6:bd:41:5b:32:d0:dc:
9a:a4:1a:46:fc:e0:04:c1:ab:a0:72:ac:15:e7:40:82:a9:e6:
19:a0:70:49:b8:33:ea:bb:05:7c:fe:5d:ed:5d:35:19:22:fb:
98:42:42:59:0b:24:14:5a:a1:aa:76:f9:c6:d8:c0:f5:c0:0d:
11:0c:0a:16:65:ee:d7:6b:cd:d1:cd:d9:53:53:fb:34:cc:86:
fd:0b:93:ba:f9:fb:d9:55:ee:e4:02:2d:4f:94:61:03:8c:33:
18:9c:62:9a:14:3b:35:3a:4d:55:42:61:b0:bd:3c:81:76:d9:
9d:65:61:1a:57:a1:62:16:97:54:2c:9d:d8:5f:23:c5:43:0a:
22:34:26:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:33:22 2026 by rpki-client