
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/64720824EF6611EB9A7EFE0EC4F9AE02.roa
File: 64720824EF6611EB9A7EFE0EC4F9AE02.roa (raw, json)
Hash identifier: LL0n4MdM8xP/nWYSFwrtL/Mk/fArB+tqMpKJaeazPNc=
Subject key identifier: 60:92:EC:CF:5E:E5:D8:62:99:2E:89:A3:6D:D6:DF:12:15:77:A8:13
Certificate issuer: /CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A
Certificate serial: 05E9
Authority key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/64720824EF6611EB9A7EFE0EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:58:26 +0000
ROA not before: Fri 14 Nov 2025 22:13:43 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 9790
IP address blocks: 103.252.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl
rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 22:34:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1513 (0x5e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E0B2, serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A
Validity
Not Before: Nov 14 22:13:43 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a45412-058a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:76:4e:90:57:87:d1:4e:fd:65:f2:bb:30:08:
94:fa:88:ac:7b:8f:f2:64:70:37:a2:83:85:18:2f:
d0:54:c4:fe:e3:c9:2b:51:a4:0d:fc:7a:9b:07:a2:
97:ed:c6:c5:c6:07:fc:62:87:a0:ea:8e:7f:14:b0:
42:4c:ef:5e:c7:71:fc:40:29:17:57:bb:b9:c5:0e:
b8:84:47:79:be:f9:54:a6:a6:b9:90:53:0f:c4:58:
1d:b5:91:98:37:2c:d8:34:49:33:75:cb:da:b8:2e:
b4:bc:7a:09:55:e6:a0:79:fc:19:ba:50:dd:1d:4c:
2c:35:30:32:93:0a:22:e0:b3:c1:bb:69:42:a5:b4:
0f:97:e4:fb:75:9f:c4:c4:f4:31:80:da:cc:6f:bd:
d6:b7:78:61:79:25:cd:33:56:60:2d:93:0f:2b:f2:
09:30:6a:0e:39:80:80:2a:5e:9d:8b:c2:f0:68:1a:
56:a5:c7:9a:73:78:6c:fe:e4:e5:e4:2a:bd:ed:26:
66:48:10:fd:df:fb:2b:50:d9:12:bf:a4:7c:3b:3e:
42:55:ac:f1:ec:6b:bf:b7:dd:e8:e8:0b:dc:5c:50:
ed:97:8f:a6:2f:41:97:e3:33:55:c8:bf:d6:69:b0:
59:8c:13:6b:69:77:37:83:da:ce:1e:86:9d:80:b3:
37:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:92:EC:CF:5E:E5:D8:62:99:2E:89:A3:6D:D6:DF:12:15:77:A8:13
X509v3 Authority Key Identifier:
keyid:0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/64720824EF6611EB9A7EFE0EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.252.247.0/24
Signature Algorithm: sha256WithRSAEncryption
be:f9:44:60:7c:20:29:65:f7:6c:c3:66:58:48:d9:6d:f6:cf:
28:d6:f2:d6:f9:db:f5:31:03:3f:e4:12:17:d5:2e:79:6d:3b:
0e:75:33:1f:74:b3:63:f5:4b:0d:72:9e:ad:7f:70:c7:c7:f1:
43:cb:ec:fa:20:1e:a5:b7:67:14:f0:9a:98:31:13:73:40:50:
07:fd:b6:ca:64:1a:65:6c:d4:8b:d2:32:df:48:8c:6f:86:1e:
28:4f:5f:c7:42:75:f6:34:ae:5b:9c:44:8a:69:3a:40:2c:0a:
0a:55:a5:51:1d:6c:dd:ea:62:ab:ac:de:a3:a8:72:5f:d6:36:
16:75:ee:22:55:27:fb:4d:95:bc:39:27:d1:2d:19:fe:cb:52:
c1:69:44:81:55:50:2f:2f:28:5f:91:32:2f:ed:99:49:e6:2c:
8f:8e:09:70:6e:65:3c:a9:19:3f:0e:1a:d7:51:be:5d:25:9d:
ad:3c:36:4f:54:e8:ea:61:f8:be:f0:d0:20:2f:66:c9:9b:2e:
6d:64:d6:95:7d:ca:dd:68:26:ec:f6:12:c8:92:f2:99:49:4a:
be:57:a3:3f:73:36:7e:9f:57:70:be:62:6a:54:3f:bb:9d:8c:
e2:f5:f7:cc:05:ef:d2:ff:7a:4e:2f:cd:36:ea:82:03:9f:1a:
c6:8d:4e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:17:22 2026 by rpki-client