
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/D1D880A6C4FB11EEA30ECF34C4F9AE02.roa
File: D1D880A6C4FB11EEA30ECF34C4F9AE02.roa (raw, json)
Hash identifier: MByRbKBm+JUM4LT1eboClzkfZWMq5pWfRvnvdbt+Df4=
Subject key identifier: 64:A5:00:D7:60:B1:6E:3D:90:2D:CC:FC:34:17:8A:41:4D:EF:25:F1
Certificate issuer: /CN=A9118689/serialNumber=63FC2F5DE094C8396DC8BC9744ED682FF4B23881
Certificate serial: 018E
Authority key identifier: 63:FC:2F:5D:E0:94:C8:39:6D:C8:BC:97:44:ED:68:2F:F4:B2:38:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/D1D880A6C4FB11EEA30ECF34C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:40:05 +0000
ROA not before: Fri 31 Oct 2025 04:48:36 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 151977
IP address blocks: 103.67.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl
rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:39:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118689, serialNumber=63FC2F5DE094C8396DC8BC9744ED682FF4B23881
Validity
Not Before: Oct 31 04:48:36 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a5a145-662e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:66:8e:d9:50:59:19:c3:3f:a2:c0:7a:d4:e3:
e7:2b:72:a3:e8:92:08:c9:5a:61:19:1b:28:40:8b:
70:8b:84:ee:4f:e3:27:e3:ee:db:d4:67:9e:c6:ee:
3e:5d:6c:44:ee:ff:9d:51:87:7d:0b:0d:6a:7f:ca:
03:1d:de:c6:c4:7f:59:33:e0:2b:a8:9b:f1:7c:87:
44:0f:26:d4:08:96:02:d7:72:60:11:ef:f9:6c:48:
b2:09:60:4f:fe:58:ab:7b:7f:2c:ae:0a:e3:19:7c:
1f:a6:23:b6:11:47:3b:0d:ec:53:71:ae:b5:b6:48:
5a:b8:1b:62:9c:9a:f9:47:a2:75:cc:30:5a:60:28:
d4:aa:bd:0c:02:dd:dd:f6:c9:4b:04:50:27:a4:75:
43:42:c8:38:b5:d2:ad:d9:6f:b6:20:1a:30:67:91:
23:d8:25:29:18:f5:7a:f0:54:18:99:bf:58:be:4e:
13:b4:c1:f1:44:3f:41:e7:ab:90:eb:cb:e3:2e:88:
e5:93:4d:5c:7a:31:cb:f9:31:8b:eb:e9:5c:1a:08:
77:60:5c:c3:73:b3:b6:f8:7a:e5:0e:3a:a3:44:c4:
84:42:f9:00:d5:86:86:ed:43:e1:5b:f7:ed:a9:de:
d1:ce:e7:eb:d3:b8:7c:b0:f3:04:1f:5c:49:ad:d5:
ed:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A5:00:D7:60:B1:6E:3D:90:2D:CC:FC:34:17:8A:41:4D:EF:25:F1
X509v3 Authority Key Identifier:
keyid:63:FC:2F:5D:E0:94:C8:39:6D:C8:BC:97:44:ED:68:2F:F4:B2:38:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/D1D880A6C4FB11EEA30ECF34C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.67.60.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:99:89:29:60:47:93:0b:8e:e3:ad:69:bd:3e:6b:b4:8f:ee:
5c:16:ed:a4:4f:f6:e5:b4:2b:3c:18:bc:d7:ee:b2:8e:8e:b7:
e0:f1:4b:7a:98:8d:2f:32:f1:55:41:47:d7:88:4d:df:98:ce:
ed:61:73:f1:10:b1:e2:e3:34:7a:8a:3c:ce:c1:5c:8c:d8:a4:
fd:b6:b5:9e:ef:72:b9:fd:a5:d2:29:d3:df:05:d7:4c:0e:ab:
40:14:0a:da:f2:b8:ee:4d:c0:81:8e:ca:40:23:c8:a7:8b:99:
85:3c:5a:3a:97:7f:4d:03:18:ea:7f:6a:e5:9a:a9:b8:a4:58:
09:bb:85:1c:4e:41:37:6f:42:01:61:40:a9:8f:49:22:d7:8a:
68:bb:b2:d3:cc:cb:78:67:99:f0:68:da:ec:3c:97:1e:7d:ea:
93:d0:d6:f3:84:6c:a2:65:13:74:2f:0c:13:fe:a5:20:f1:29:
eb:2e:e7:90:92:2d:b5:0d:aa:41:b3:bb:1a:5f:3c:de:ec:36:
2e:2e:98:c9:17:c2:9a:0d:8f:fd:c0:39:ef:12:68:38:67:3e:
ea:f9:c3:30:59:ae:d4:52:b9:be:2c:03:70:b9:66:ba:67:ca:
7a:aa:60:88:5f:f2:72:23:4c:e3:46:99:f2:04:9d:2f:2b:46:
d5:eb:94:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:16:11 2026 by rpki-client