
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/9CB879ECC7B511ED9411183FC4F9AE02.roa
File: 9CB879ECC7B511ED9411183FC4F9AE02.roa (raw, json)
Hash identifier: LIdhf9ay4v6pNkqEXLVs+I0RR4BOPrXO+QQVxcMgeeE=
Subject key identifier: 58:18:F9:BC:8E:78:F0:09:E4:A0:1E:3D:F9:E2:AE:A5:FA:EC:B6:18
Certificate issuer: /CN=A917C36A/serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69
Certificate serial: 0274
Authority key identifier: 47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/9CB879ECC7B511ED9411183FC4F9AE02.roa
Signing time: Sat 27 Jun 2026 03:32:47 +0000
ROA not before: Sat 27 Jun 2026 03:32:47 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 134346
IP address blocks: 103.60.252.0/24 maxlen: 24
103.60.253.0/24 maxlen: 24
103.60.254.0/24 maxlen: 24
103.60.255.0/24 maxlen: 24
203.57.34.0/24 maxlen: 24
203.57.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl
rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 02:51:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 628 (0x274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C36A, serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69
Validity
Not Before: Jun 27 03:32:47 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a3f445f-04bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:f1:34:1b:b8:ce:7c:8c:79:c9:e8:16:5a:
3e:44:7b:54:b4:91:40:a0:e1:4b:02:91:2e:3e:5c:
e3:f2:fd:22:06:9c:81:0c:2b:bb:6c:f4:8e:2b:49:
c0:cc:ea:e1:78:b9:e3:e7:0e:f4:4f:f4:cb:ed:ba:
4b:c7:3e:78:f1:f6:f3:4a:91:41:85:6b:74:79:a8:
f9:53:82:e4:68:47:00:a9:26:56:ca:fd:c4:c9:5d:
21:bc:88:d9:3b:71:51:ed:28:2f:21:d8:61:2d:dc:
fd:1f:f6:30:1b:18:24:df:2a:e2:68:f2:43:13:f7:
b4:b9:ac:a9:18:2b:41:87:c6:37:42:56:d3:18:c6:
5f:6f:7e:59:74:ee:ff:8d:00:68:81:bc:3e:0e:a4:
ee:dd:c8:24:5c:00:8a:50:c4:6f:f9:9b:51:b7:e5:
55:bb:3c:3a:42:b0:50:1d:3e:8d:f8:97:8f:52:54:
e4:ea:a0:f3:cc:f0:b7:c8:01:87:c3:62:55:08:78:
7c:70:c0:45:9e:6a:d4:ab:df:0d:9b:86:94:8f:75:
12:63:eb:06:7c:18:b5:be:8f:ab:ab:9a:57:2d:0f:
3e:18:e3:40:76:36:d4:cf:df:e2:59:32:ff:c7:1e:
c2:da:a6:b6:90:8a:25:83:46:b0:91:1e:a5:cf:1c:
50:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:18:F9:BC:8E:78:F0:09:E4:A0:1E:3D:F9:E2:AE:A5:FA:EC:B6:18
X509v3 Authority Key Identifier:
keyid:47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/9CB879ECC7B511ED9411183FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.60.252.0/22
203.57.34.0/23
Signature Algorithm: sha256WithRSAEncryption
62:ee:8d:61:0e:12:67:21:23:3c:fb:c1:1c:5c:a0:2f:6f:96:
fc:2f:20:d3:1a:7e:42:86:66:ea:8e:db:b9:79:b1:52:c5:bd:
98:5a:4a:8e:85:73:7d:0e:61:90:08:93:fc:dc:4f:37:6b:6c:
61:0c:e4:d2:50:e4:35:33:5e:b4:77:99:16:b6:35:2f:06:f7:
be:58:63:d4:ad:84:05:a0:c1:9b:15:8b:d9:59:1a:64:47:26:
5a:24:59:ae:4b:65:27:73:02:05:82:7d:7c:24:a7:6e:f8:cc:
6f:f4:fa:6f:35:f0:9a:bf:73:39:fc:bc:77:2a:84:0d:72:f4:
5a:0a:47:f9:20:88:c2:43:6c:c1:49:2b:a2:7e:7e:8e:b2:55:
c6:ff:02:89:ae:02:0d:6d:56:ad:c6:9f:f8:04:4d:c1:97:6a:
5b:dc:ee:35:19:94:b3:60:03:0d:59:2e:d1:b9:47:7e:41:c4:
90:0e:0e:b2:95:bb:12:b9:43:89:ce:33:d4:b5:5b:0e:56:d5:
bf:71:a5:b8:d8:45:7a:9a:bd:e4:b7:44:d0:59:65:61:63:22:
be:e5:c9:39:2b:5b:f1:51:4b:94:8f:47:1f:9b:6e:75:d9:bc:
37:f2:75:ae:2a:ff:1e:d3:a0:9e:75:2a:5e:fa:6e:b4:53:44:
a5:88:e5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:18:02 2026 by rpki-client