
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62D88F5A1C5811F190C6BEC40A3D8C67.roa
File: 62D88F5A1C5811F190C6BEC40A3D8C67.roa (raw, json)
Hash identifier: Q7qnFWiDqTEKA+PPiY0S7tGHY73HH4ismmc6e4abmo0=
Subject key identifier: 28:00:2C:8A:A3:9D:BA:46:D6:46:C1:FD:BD:0F:4F:EB:63:4C:24:BE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E7AC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62D88F5A1C5811F190C6BEC40A3D8C67.roa
Signing time: Sun 31 May 2026 17:20:48 +0000
ROA not before: Sun 31 May 2026 17:20:48 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 142485
IP address blocks: 103.170.176.0/23 maxlen: 24
103.176.173.0/24 maxlen: 24
163.227.53.0/24 maxlen: 24
2407:b5c0::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59308 (0xe7ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:20:48 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6df0-ca52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:9a:49:a8:7b:29:55:c9:e2:11:39:14:32:
20:bb:48:38:2b:04:5d:fc:ba:79:05:e2:53:bc:e9:
af:01:ba:1b:69:26:1c:0b:72:02:36:de:2e:09:7d:
79:ec:bd:13:c1:94:45:06:b4:0d:5b:ec:69:34:66:
7e:53:7b:f1:3b:07:82:33:be:47:3e:89:7d:48:2d:
92:09:7f:0b:91:1f:4f:60:f3:c2:be:d8:9e:37:48:
01:ab:84:0a:d6:cc:b3:fa:e9:05:29:ff:e8:e2:81:
a9:22:8d:17:f5:76:04:b2:1c:af:1f:d6:c9:d1:f3:
52:1f:8b:c8:81:3f:07:97:d6:04:a8:a4:93:70:96:
b1:04:e5:40:fb:9a:02:0e:75:81:3c:5d:2d:f5:ee:
13:cd:d8:26:7f:d9:1c:7c:79:0d:c6:6a:7e:79:88:
4b:c1:02:ed:af:d4:1f:f4:e9:f1:cd:4d:22:22:ee:
99:fc:a9:73:0a:b2:4c:11:1d:a7:93:c9:f5:28:5e:
2d:5e:97:b8:fe:44:d6:55:d2:e1:23:b5:16:ba:f7:
60:f7:ac:10:f9:c4:08:34:e6:2c:93:20:fa:51:9c:
db:05:02:a6:13:6a:12:4e:4b:0a:70:23:76:3d:ba:
24:4b:26:a7:41:9d:d1:69:37:9c:06:be:5e:ba:97:
09:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:00:2C:8A:A3:9D:BA:46:D6:46:C1:FD:BD:0F:4F:EB:63:4C:24:BE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62D88F5A1C5811F190C6BEC40A3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.170.176.0/23
103.176.173.0/24
163.227.53.0/24
IPv6:
2407:b5c0::/32
Signature Algorithm: sha256WithRSAEncryption
9b:62:e6:1f:4d:bf:55:18:00:49:8d:06:c1:95:ca:10:b4:be:
c5:22:37:64:2a:42:83:66:9f:ae:2b:3e:0b:96:b3:43:b7:67:
41:db:7c:da:d1:6f:03:25:95:81:cd:41:ca:1a:05:39:25:cd:
6c:c8:d1:3e:8e:76:17:5a:63:08:df:b3:d4:a6:96:ae:b6:46:
4b:24:58:e0:46:b5:14:f8:13:e7:1e:5b:f3:a0:ae:15:75:ca:
5e:98:3e:2c:26:d2:b2:81:f9:64:20:13:30:9d:1c:8a:8b:cc:
41:af:de:95:53:e2:e2:51:4a:50:d5:25:3e:48:c8:10:5e:f9:
e9:d2:27:60:2e:c8:a7:c6:2e:d6:72:26:4e:d2:d5:a3:9b:c1:
82:d6:a0:65:f5:04:bf:37:5d:9d:c3:33:8b:6b:ad:62:77:49:
34:79:1e:4e:45:16:ff:ac:3b:e0:9d:fd:0a:59:b6:cb:8a:34:
2f:fe:66:2b:d0:43:3e:f2:66:2e:fd:12:6c:d1:82:7f:a8:86:
ea:ed:05:a2:d4:a5:6d:c4:60:59:f2:57:00:54:7c:60:c5:f0:
3d:98:66:5c:70:e3:27:46:97:12:05:f8:9f:fe:2d:16:95:da:
1a:b4:a7:c6:cc:dc:8a:8f:69:09:28:64:18:12:f9:d6:96:b7:
a9:43:48:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:41 2026 by rpki-client