
$ rpki-client -vvf rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/6877A622A9DB11E9B353AF85C4F9AE02.roa
File: 6877A622A9DB11E9B353AF85C4F9AE02.roa (raw, json)
Hash identifier: I3a+AQK6qVCuGM8BlFl5ofUbKIxiO2UA8EiuLaXOEkg=
Subject key identifier: 5A:87:08:8C:2B:83:91:85:BD:74:AD:CE:F3:2F:D9:13:C0:DB:8F:01
Certificate issuer: /CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062
Certificate serial: 0EC8
Authority key identifier: 91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/6877A622A9DB11E9B353AF85C4F9AE02.roa
Signing time: Mon 20 Apr 2026 18:22:14 +0000
ROA not before: Mon 20 Apr 2026 18:22:14 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 137818
IP address blocks: 103.114.198.0/23 maxlen: 23
103.114.198.0/24 maxlen: 24
103.114.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl
rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:42:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3784 (0xec8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EF71, serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062
Validity
Not Before: Apr 20 18:22:14 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69e66ed6-b068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:6f:93:28:1c:13:1b:0b:ca:71:f7:ad:90:
69:c3:e0:64:30:25:1e:00:b2:96:ef:0c:a1:58:70:
e3:30:de:f3:a9:c2:3b:7e:77:af:82:19:21:39:d5:
37:f1:27:4e:d7:06:5c:25:43:78:8c:f8:45:9b:c9:
60:1c:d4:74:f5:5a:a3:c3:ba:a6:49:e5:82:8c:2b:
30:2f:ab:90:b5:68:90:47:0f:9e:8a:33:75:b8:dc:
a1:34:7d:d9:6d:c4:80:a4:52:12:32:79:59:69:27:
42:28:dd:98:92:3f:78:f7:53:51:61:8f:28:45:e5:
e3:0f:1c:89:06:85:01:5e:ce:9b:bd:27:fd:f9:4f:
86:30:90:27:6e:e6:a9:5d:81:94:f1:6d:3f:5e:cc:
56:b5:45:08:e1:7e:89:06:60:18:2e:28:75:9c:cc:
0f:05:30:ab:eb:87:89:62:32:96:2f:80:3a:2e:5d:
40:ee:fb:f6:ed:74:41:c7:66:ae:14:9b:14:b3:88:
39:1b:88:60:d1:f5:4b:b9:8c:75:b0:a3:c8:aa:f9:
1a:f8:a4:a6:7c:20:40:54:7d:1d:79:1c:cc:ef:f2:
48:00:be:d3:00:10:35:89:99:cd:77:fe:d2:f7:2d:
2e:38:53:43:de:4b:de:1b:83:9f:3d:eb:54:bd:39:
94:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:87:08:8C:2B:83:91:85:BD:74:AD:CE:F3:2F:D9:13:C0:DB:8F:01
X509v3 Authority Key Identifier:
keyid:91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/6877A622A9DB11E9B353AF85C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.114.198.0/23
Signature Algorithm: sha256WithRSAEncryption
33:a7:88:e8:07:f5:a8:2c:42:45:00:8d:82:9b:08:d0:5c:b3:
8f:0c:6d:48:46:99:31:3b:73:21:40:64:83:7b:11:a8:7f:14:
c6:b5:de:68:69:e5:ba:7f:de:78:94:71:14:c8:f2:e3:59:67:
a1:51:28:b3:be:8a:99:f7:e0:13:04:1f:4d:ab:b4:d1:b1:d4:
0b:61:97:62:97:85:4a:45:8b:1e:19:42:48:25:35:3b:1f:f0:
d2:37:4a:bd:83:db:c6:8b:42:d7:9b:3e:db:17:c7:c7:dc:02:
9f:fb:3f:f9:9f:40:44:5e:b6:ef:82:29:b7:9d:05:f3:45:16:
b3:d7:36:98:c6:31:b7:9d:09:7c:8e:ae:b5:d0:ec:fa:39:88:
0a:5f:5c:ea:e0:c5:d5:9d:d2:97:a7:20:5b:4f:e8:8f:05:38:
96:78:2d:5a:f6:9d:ec:53:d0:ce:16:a7:9a:65:aa:9e:d6:3e:
bc:49:22:40:ae:15:1b:7e:dd:02:f0:fe:25:26:af:c3:2a:3e:
d1:51:f5:72:ab:66:ac:68:a9:a1:47:04:c7:1a:21:73:e9:19:
c9:5f:3d:c5:4a:07:b7:fc:f8:57:a1:13:5e:bf:00:1b:a9:a3:
86:a7:20:0c:33:aa:8e:40:f1:53:87:6c:9f:ff:15:e4:15:6c:
7b:0c:55:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:35:42 2026 by rpki-client