
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/44942606EA0A11F09D7A92E76F6F56BC.roa
File: 44942606EA0A11F09D7A92E76F6F56BC.roa (raw, json)
Hash identifier: EeLJby/8EluYAUfNa1xVSHc8kon4tRGoZL1/tkyFn7k=
Subject key identifier: 80:0A:D6:4B:72:F0:1D:BE:77:38:9D:EC:F8:89:07:B9:12:E9:42:D7
Certificate issuer: /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Certificate serial: 0BC4
Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/44942606EA0A11F09D7A92E76F6F56BC.roa
Signing time: Sun 01 Mar 2026 18:06:58 +0000
ROA not before: Mon 05 Jan 2026 07:47:46 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 197537
IP address blocks: 103.6.20.0/24 maxlen: 24
103.6.21.0/24 maxlen: 24
103.6.22.0/24 maxlen: 24
103.6.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Mar 2026 15:05:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3012 (0xbc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Validity
Not Before: Jan 5 07:47:46 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a48042-a721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:35:5e:88:38:90:b8:32:9b:c4:ca:52:0c:5a:
ca:20:b0:bd:a2:bf:b4:62:b5:29:b7:b2:a3:41:72:
ef:4d:20:88:e8:94:a2:75:de:79:5e:24:4a:06:2f:
0e:4a:fa:12:ce:6e:57:0a:a7:6c:36:f7:80:50:61:
69:91:e1:77:8b:3e:6d:f1:a4:6c:c6:b2:82:8f:4e:
9b:8b:46:67:9e:70:c8:2d:cd:80:67:97:1c:9c:65:
1e:4b:e4:30:ed:9b:d6:38:77:45:9d:91:35:8b:eb:
ff:57:bf:cf:16:45:43:af:5e:45:a5:48:b1:04:47:
3b:62:3a:4b:33:f5:54:78:4a:56:b6:bc:ef:4c:9b:
5f:4a:c9:73:bb:b4:83:de:85:cf:4a:d3:0a:a0:cf:
14:7a:f3:ad:ad:86:57:45:c7:87:e1:7c:58:d0:1f:
26:19:34:f1:9c:e9:95:07:28:98:66:a4:1c:d1:0d:
1c:e3:8e:70:b4:3e:35:14:68:dc:41:69:83:e5:40:
da:6b:ea:41:bd:f2:fc:97:5c:a3:0b:39:6d:e7:69:
f3:c3:e1:25:a5:37:1c:04:52:98:00:02:e4:cb:e0:
95:39:d0:3b:5d:a5:d9:06:91:44:6f:4a:6f:62:17:
3a:03:35:06:4c:65:46:d3:1e:6d:1d:dc:9b:36:df:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0A:D6:4B:72:F0:1D:BE:77:38:9D:EC:F8:89:07:B9:12:E9:42:D7
X509v3 Authority Key Identifier:
keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/44942606EA0A11F09D7A92E76F6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.6.20.0/22
Signature Algorithm: sha256WithRSAEncryption
80:0d:79:5a:02:a2:36:28:d6:b8:2f:57:1f:67:d8:48:f1:f7:
ff:f7:24:ff:1e:2a:aa:3d:c3:ba:28:f9:5d:4b:00:1e:b9:0c:
fa:70:82:6e:45:04:57:cc:b0:45:56:51:43:66:1c:41:ee:3d:
26:37:f4:13:b8:2f:17:63:ac:7d:bd:ce:da:d9:61:d0:b2:4b:
94:b7:35:1d:d1:85:80:29:3a:be:14:c5:ce:35:c1:cc:8e:d2:
2b:d6:fc:0f:d9:78:a2:61:16:27:4d:27:31:17:0e:ea:f2:c2:
7c:e1:20:b5:8f:0f:6f:1a:44:e3:d0:f0:3f:64:32:f2:43:76:
6b:11:c4:9b:60:88:87:9e:bd:a8:8e:68:49:ca:be:20:6b:d1:
8e:38:1c:e4:7a:f7:4b:0c:56:a4:9d:ad:77:ce:d1:0d:f8:77:
be:36:54:7c:d9:d5:49:3d:61:c6:9a:27:67:17:11:f1:0b:1d:
71:17:86:bb:fb:0e:a9:00:81:41:9e:5a:39:61:86:63:d9:53:
27:fe:04:5f:3d:66:04:66:3c:ff:c3:75:6d:52:dd:ae:fb:d0:
c2:7b:38:a7:ca:dc:ab:f6:1f:97:af:bf:12:3d:f9:7e:ee:4c:
46:70:e8:6f:92:d8:1a:24:39:e5:9f:cc:24:92:bc:07:1c:dc:
88:a6:5c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:55:53 2026 by rpki-client