
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/65674CAE2CC911F085E9B54FC4F9AE02.roa
File: 65674CAE2CC911F085E9B54FC4F9AE02.roa (raw, json)
Hash identifier: djvaSh+6rXmlAUtXgHwm0wL+dwa9UePUisMEuBiQhVA=
Subject key identifier: 6D:5C:84:13:1F:26:05:79:46:FA:AB:32:F2:41:54:CC:F0:D2:60:98
Certificate issuer: /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912
Certificate serial: 0DC6
Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/65674CAE2CC911F085E9B54FC4F9AE02.roa
Signing time: Mon 28 Sep 2026 18:35:52 +0000
ROA not before: Mon 28 Sep 2026 18:35:52 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 139623
IP address blocks: 103.93.232.0/22 maxlen: 24
103.142.158.0/23 maxlen: 23
2401:31c0::/32 maxlen: 32
2405:3cc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl
rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 17:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3526 (0xdc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912
Validity
Not Before: Sep 28 18:35:52 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abab387-7a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:73:43:fd:a7:08:a6:10:10:36:e5:3d:ea:69:
d6:97:a7:b3:24:dd:f6:fd:2a:41:54:8a:8f:83:82:
8a:56:58:75:80:d5:11:d6:57:b2:17:83:c5:55:b6:
0e:e8:2d:91:86:df:92:48:dc:ca:7c:94:bd:6d:d2:
c7:86:18:0c:cf:90:f7:f0:9a:9c:75:35:53:fa:50:
30:22:cb:80:34:3d:ad:a0:12:82:13:28:fc:9a:e6:
a0:f5:57:03:45:2d:45:5e:05:b9:a8:26:ce:05:ea:
85:62:e8:5c:ba:86:a1:18:0d:15:54:24:bd:03:fc:
2d:ba:67:19:66:48:44:79:0c:ef:7e:71:14:ee:3f:
d6:ae:13:07:8c:a1:d8:86:91:66:41:20:fc:69:34:
08:13:f7:03:91:a9:18:dc:72:fd:89:b0:3e:e9:68:
d7:50:20:07:3d:eb:53:22:5e:e0:a3:51:49:90:5a:
af:4a:55:5a:1b:b0:3f:6c:73:89:4e:8d:56:5c:b0:
09:e2:27:59:9c:c3:e8:8a:cd:ee:19:21:3a:a3:cf:
9e:2f:33:dc:28:c6:bc:17:eb:7b:54:e5:c0:10:d9:
7c:c6:c3:41:b9:70:e9:51:07:4a:df:f2:f0:a0:1a:
bd:95:d7:f3:90:0b:ea:36:c4:24:4f:97:7a:cc:b1:
e6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5C:84:13:1F:26:05:79:46:FA:AB:32:F2:41:54:CC:F0:D2:60:98
X509v3 Authority Key Identifier:
keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/65674CAE2CC911F085E9B54FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.93.232.0/22
103.142.158.0/23
IPv6:
2401:31c0::/32
2405:3cc0::/32
Signature Algorithm: sha256WithRSAEncryption
7f:06:e0:09:04:5b:eb:d0:d7:01:9b:9e:72:48:49:7e:67:e0:
46:f2:9c:c8:15:e7:74:b0:08:45:91:24:c2:7d:06:5b:1f:7e:
93:f3:ae:29:fc:6b:6e:43:80:9f:6b:9e:cc:68:5e:f6:31:0e:
45:1c:aa:11:c3:f8:f4:58:cd:1a:f7:ff:fb:ed:6a:cb:5a:2c:
c0:09:fa:2d:5c:19:77:9d:4b:c5:2d:d8:ac:54:a6:df:50:b6:
58:85:a0:6b:f5:16:85:96:5c:1c:00:ab:d1:9a:f5:fc:f8:a7:
c1:06:f4:85:1a:7a:b5:5c:69:86:ff:e3:51:dd:ad:d5:d9:56:
17:f0:d7:f0:b5:1d:fa:5b:97:ef:30:8f:40:6c:09:49:6d:c6:
3b:e9:64:bb:9c:04:7c:2b:2e:d0:25:e1:5a:2c:c9:84:a9:cf:
0e:dd:b4:fa:ef:6a:b5:cb:90:ac:d9:01:b6:4e:a3:8d:ee:13:
82:ad:83:d2:06:75:d0:78:02:ab:d8:34:cb:1e:a2:b5:54:d3:
0c:ab:0b:09:40:ee:09:e2:46:7d:2c:f4:64:4f:47:a3:70:30:
bd:b1:fe:ab:c4:da:f2:fd:d2:15:34:12:35:8e:cc:45:8a:41:
92:cc:64:81:e2:85:5f:82:3b:af:5b:70:da:fa:42:c6:db:dc:
7a:ba:ab:12
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgICDcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTMzN0YxMTAvBgNVBAUTKDMzNzQwNjIyREY4NkIzQkZFN0JGNEFCRDVERjEzNjE1
ODdGMDM5MTIwHhcNMjYwOTI4MTgzNTUyWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJhYjM4Ny03YThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3nND/acIphAQNuU96mnWl6ezJN32/SpBVIqPg4KKVlh1gNUR1leyF4PFVbYO
6C2Rht+SSNzKfJS9bdLHhhgMz5D38JqcdTVT+lAwIsuAND2toBKCEyj8muag9VcD
RS1FXgW5qCbOBeqFYuhcuoahGA0VVCS9A/wtumcZZkhEeQzvfnEU7j/WrhMHjKHY
hpFmQSD8aTQIE/cDkakY3HL9ibA+6WjXUCAHPetTIl7go1FJkFqvSlVaG7A/bHOJ
To1WXLAJ4idZnMPois3uGSE6o8+eLzPcKMa8F+t7VOXAENl8xsNBuXDpUQdK3/Lw
oBq9ldfzkAvqNsQkT5d6zLHm5QIDAQABo4ICfDCCAngwHQYDVR0OBBYEFG1chBMf
JgV5RvqrMvJBVMzw0mCYMB8GA1UdIwQYMBaAFDN0BiLfhrO/579KvV3xNhWH8DkS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM3Ri8xRTE3RTAxQ0Yy
NTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3X252MHE5WGZFMkZZZndP
UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL00zUUdJdC1HczdfbnYwcTlYZkUyRllmd09SSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTMzN0YvMUUxN0UwMUNGMjU0MTFFOUFEM0JGQjYxQzRGOUFFMDIvNjU2NzRDQUUy
Q0M5MTFGMDg1RTlCNTRGQzRGOUFFMDIucm9hMDsGCCsGAQUFBwEHAQH/BCwwKjAS
BAIAATAMAwQCZ13oAwQBZ46eMBQEAgACMA4DBQAkATHAAwUAJAU8wDANBgkqhkiG
9w0BAQsFAAOCAQEAfwbgCQRb69DXAZueckhJfmfgRvKcyBXndLAIRZEkwn0GWx9+
k/OuKfxrbkOAn2uezGhe9jEORRyqEcP49FjNGvf/++1qy1oswAn6LVwZd51LxS3Y
rFSm31C2WIWga/UWhZZcHACr0Zr1/PinwQb0hRp6tVxphv/jUd2t1dlWF/DX8LUd
+luX7zCPQGwJSW3GO+lku5wEfCsu0CXhWizJhKnPDt20+u9qtcuQrNkBtk6jje4T
gq2D0gZ10HgCq9g0yx6itVTTDKsLCUDuCeJGfSz0ZE9Ho3AwvbH+q8Ta8v3SFTQS
NY7MRYpBksxkgeKFX4I7r1tw2vpCxtvcerqrEg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 23:04:36 2026 by rpki-client