
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/862720F4031611EB9086351AC4F9AE02.roa
File: 862720F4031611EB9086351AC4F9AE02.roa (raw, json)
Hash identifier: YvqKvx4cjRnhlZaI1S3sScE7QoTWubRxZZoRYNXtv9s=
Subject key identifier: 40:0F:A0:06:0A:74:FD:74:D5:B4:9E:74:65:73:A2:98:5B:B6:12:24
Certificate issuer: /CN=A913DD6A/serialNumber=BB9D5D50F75581972FC3AF1C6CE6AFCF57CFB93F
Certificate serial: 0908
Authority key identifier: BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/862720F4031611EB9086351AC4F9AE02.roa
Signing time: Sun 02 Aug 2026 21:40:27 +0000
ROA not before: Sun 02 Aug 2026 21:40:27 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 63931
IP address blocks: 103.47.246.0/23 maxlen: 24
103.204.104.0/23 maxlen: 24
192.140.248.0/22 maxlen: 24
2402:1280::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl
rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2312 (0x908)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DD6A, serialNumber=BB9D5D50F75581972FC3AF1C6CE6AFCF57CFB93F
Validity
Not Before: Aug 2 21:40:27 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a6fb94b-a4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:04:76:13:a4:fd:e7:99:07:82:01:7c:84:
f7:a7:6b:04:68:0b:eb:90:d1:a3:3f:31:6c:b1:96:
a6:13:d2:12:27:9e:05:7e:94:ed:2a:89:90:73:23:
63:93:e4:7f:47:60:cd:c3:2b:d3:31:a9:17:4f:41:
f1:b1:29:93:6c:6e:c6:21:0f:37:48:a1:40:fc:97:
80:45:51:b7:3e:95:c2:1b:bf:46:6d:6a:d6:7d:51:
c1:bc:bd:39:1d:5e:24:6d:8c:3a:4b:d3:b1:0a:8e:
24:69:24:cd:30:36:39:69:54:7d:f7:64:42:aa:e3:
69:36:5a:51:52:ef:b1:a5:13:94:45:af:68:9b:5e:
a0:ff:54:ab:65:f6:ba:0f:7f:22:c1:26:a9:64:b8:
47:cd:54:7b:d0:d8:fb:ab:95:1a:33:44:e5:78:37:
07:68:2a:ac:01:ed:da:55:ed:ea:c6:89:be:d5:a8:
70:9d:13:d8:0b:f3:69:4a:ff:b3:2c:a6:f5:d1:f9:
7f:f5:a2:f0:5b:b0:44:99:19:74:c3:4b:f3:65:d4:
12:b5:2d:fd:6f:29:50:6b:3f:7c:54:13:7b:64:b1:
86:ed:96:28:d4:a2:fe:3e:1b:6a:06:c6:bc:c0:77:
24:01:b1:6d:60:c1:fb:cf:67:16:ec:78:84:9b:52:
1e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0F:A0:06:0A:74:FD:74:D5:B4:9E:74:65:73:A2:98:5B:B6:12:24
X509v3 Authority Key Identifier:
keyid:BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/862720F4031611EB9086351AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.47.246.0/23
103.204.104.0/23
192.140.248.0/22
IPv6:
2402:1280::/32
Signature Algorithm: sha256WithRSAEncryption
96:c6:b0:65:8b:cf:0a:0e:8d:ab:30:8f:ac:cc:39:d9:8a:c0:
c7:78:c5:6a:98:b9:db:f5:89:4f:b7:85:02:cc:03:22:8a:5e:
1e:b0:5d:f2:cf:bc:30:65:a4:de:54:ef:c3:14:05:c1:a9:84:
4c:45:fc:72:bd:08:c1:a5:e9:39:a2:3b:1e:8f:7c:2d:bb:d2:
61:99:56:2f:5c:d6:10:39:1c:b5:6e:70:2f:f3:da:a5:b9:08:
3d:96:c8:63:76:94:9a:1f:94:5d:cc:7f:ce:d8:77:d6:66:11:
72:a8:03:b8:a0:92:b2:24:f1:45:a0:24:f2:31:09:bc:26:bb:
10:e4:04:78:41:28:7d:c8:fe:98:da:13:5e:3c:f8:4f:77:93:
c1:a7:47:2f:43:32:a6:c6:72:09:a4:e5:11:17:bc:7e:40:d8:
e5:b8:cb:d0:6f:34:90:0a:d4:03:75:a5:6f:74:f1:64:89:9e:
8b:eb:c2:34:15:76:1b:14:32:7a:40:63:86:97:06:9f:cd:5b:
c9:2b:d9:ec:99:89:99:9a:58:b7:72:a7:c3:20:32:7a:13:dc:
86:b1:e5:60:e3:0a:10:87:6e:2e:26:2a:0f:76:7c:f3:c6:cd:
58:0f:b2:fa:51:18:48:82:fc:57:3a:fc:25:16:f5:06:28:b5:
3f:dd:c7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:48 2026 by rpki-client