
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/63CD8020B35011F19B6C7AEB3511F970.roa
File: 63CD8020B35011F19B6C7AEB3511F970.roa (raw, json)
Hash identifier: Wa4FWT9aOHEZOJNnNK1xjxJYRVenPgzimIo1B1clEH0=
Subject key identifier: FE:A0:10:E9:F3:C5:FA:93:36:95:52:EC:E3:EA:60:E7:8E:1A:AA:57
Certificate issuer: /CN=A913089B/serialNumber=403F2E7E4DAB13C419C68690C9499547F2C58FC4
Certificate serial: 0111
Authority key identifier: 40:3F:2E:7E:4D:AB:13:C4:19:C6:86:90:C9:49:95:47:F2:C5:8F:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/63CD8020B35011F19B6C7AEB3511F970.roa
Signing time: Mon 21 Sep 2026 06:20:36 +0000
ROA not before: Mon 21 Sep 2026 06:20:36 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 58658
IP address blocks: 27.123.232.0/22 maxlen: 24
45.114.108.0/22 maxlen: 24
45.116.144.0/22 maxlen: 24
103.14.112.0/22 maxlen: 24
103.56.192.0/22 maxlen: 24
103.71.32.0/22 maxlen: 24
103.73.88.0/22 maxlen: 24
103.75.16.0/22 maxlen: 24
103.88.184.0/22 maxlen: 24
103.214.32.0/22 maxlen: 24
103.243.128.0/22 maxlen: 24
116.204.244.0/22 maxlen: 24
117.18.224.0/22 maxlen: 24
122.10.0.0/18 maxlen: 24
122.10.64.0/20 maxlen: 24
144.48.56.0/22 maxlen: 24
150.129.152.0/22 maxlen: 24
157.119.112.0/22 maxlen: 24
216.250.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl
rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:20:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913089B, serialNumber=403F2E7E4DAB13C419C68690C9499547F2C58FC4
Validity
Not Before: Sep 21 06:20:36 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6ab0ccb4-b63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:92:21:99:70:db:4d:6c:d8:6b:60:84:0f:c5:
1c:32:ac:40:f8:fa:4e:46:8c:c7:af:b6:df:e7:ae:
ce:a1:f5:f8:bf:81:27:d8:c2:ed:81:d7:ba:81:07:
73:8c:71:9a:25:dd:d2:3a:86:7b:af:f6:83:ff:0a:
d4:1f:46:e5:5a:a2:32:60:29:a1:4a:ad:89:58:58:
01:06:c1:87:30:6e:77:df:80:27:81:70:ca:b5:30:
79:66:e6:cc:dc:42:5b:29:81:67:fa:8e:dd:0f:c1:
e0:5b:05:41:4c:c3:31:74:d0:db:47:1f:a4:80:73:
41:f0:b8:81:23:33:30:05:f7:64:3d:4a:f3:7c:8c:
5b:89:8e:09:80:ba:73:9a:e2:c0:27:f3:50:b0:f6:
f7:f0:78:bd:26:49:7e:27:d9:5d:c5:59:f1:10:38:
13:8f:2e:27:27:8f:0c:6c:63:6d:f9:28:8c:62:2c:
9b:7e:63:17:9b:b4:76:a1:d7:26:9b:32:16:22:e8:
0d:71:75:5f:b9:86:60:dc:6a:3a:91:98:d8:d2:a0:
ac:4d:f0:ef:26:d7:04:ce:4a:3e:c5:fe:4a:33:c3:
6f:2d:8a:13:b7:2c:5d:6f:bd:c4:1c:89:c4:c2:11:
4b:b7:c4:6c:cb:0e:6b:a3:05:4b:de:86:f0:26:d6:
30:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A0:10:E9:F3:C5:FA:93:36:95:52:EC:E3:EA:60:E7:8E:1A:AA:57
X509v3 Authority Key Identifier:
keyid:40:3F:2E:7E:4D:AB:13:C4:19:C6:86:90:C9:49:95:47:F2:C5:8F:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/63CD8020B35011F19B6C7AEB3511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
27.123.232.0/22
45.114.108.0/22
45.116.144.0/22
103.14.112.0/22
103.56.192.0/22
103.71.32.0/22
103.73.88.0/22
103.75.16.0/22
103.88.184.0/22
103.214.32.0/22
103.243.128.0/22
116.204.244.0/22
117.18.224.0/22
122.10.0.0-122.10.79.255
144.48.56.0/22
150.129.152.0/22
157.119.112.0/22
216.250.108.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:a8:ec:1b:e6:15:82:9e:4b:cd:b0:43:25:78:b7:95:0f:eb:
af:fe:54:4e:47:e3:23:6a:24:05:e4:75:8b:1d:5a:10:55:66:
5d:9f:ac:ce:c0:3a:23:b1:a2:ed:3d:c7:6a:83:9b:63:d2:31:
1a:85:1f:93:5f:4e:b1:e1:79:09:a8:02:7a:33:a2:36:05:cc:
a6:9c:b9:6f:d1:db:55:f9:97:fe:d5:46:aa:61:1d:43:0c:eb:
90:43:3c:9c:3f:9c:21:63:ba:c2:39:cb:25:8d:32:c7:d6:11:
ab:a0:26:ae:69:6e:54:29:f6:44:5a:a9:f1:c7:0c:17:cd:83:
a7:5a:0d:8d:c1:02:70:c0:ad:06:82:78:0c:d4:fa:fe:fb:2f:
20:3d:3c:7a:44:d3:00:c6:d7:8b:86:12:2c:7c:9e:de:aa:97:
b7:65:06:4c:e2:ab:16:44:c9:98:b3:0b:1f:e9:ea:90:b0:6b:
1f:af:56:9f:c5:64:fd:17:2f:f9:9e:a3:a4:89:40:62:67:4b:
66:a7:96:e8:e5:c5:75:33:27:37:99:51:97:93:1d:8d:87:1d:
5b:78:aa:bf:a7:07:be:df:03:a8:e1:1b:0a:74:e6:4e:e4:86:
b7:38:31:71:8d:40:25:30:0a:7d:14:47:ac:7e:a8:8b:f6:70:
0c:a3:dd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:52:51 2026 by rpki-client