
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/862720F4031611EB9086351AC4F9AE02.roa
File: 862720F4031611EB9086351AC4F9AE02.roa (raw, json)
Hash identifier: 6jSpWn6cv0FodfsIjYxe0Brj0ndtXQ6KLtWKLImHfe8=
Subject key identifier: A7:DB:D7:5D:C4:93:49:40:4F:BE:93:5A:EC:B8:F3:CF:C3:30:14:F2
Certificate issuer: /CN=A913DD6A/serialNumber=BB9D5D50F75581972FC3AF1C6CE6AFCF57CFB93F
Certificate serial: 08B3
Authority key identifier: BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/862720F4031611EB9086351AC4F9AE02.roa
Signing time: Mon 02 Mar 2026 04:39:25 +0000
ROA not before: Wed 04 Feb 2026 21:17:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63931
IP address blocks: 103.47.246.0/23 maxlen: 24
103.204.104.0/23 maxlen: 24
192.140.248.0/22 maxlen: 24
2402:1280::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl
rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:36:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2227 (0x8b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DD6A, serialNumber=BB9D5D50F75581972FC3AF1C6CE6AFCF57CFB93F
Validity
Not Before: Feb 4 21:17:38 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a5147d-a477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:01:c8:f8:a2:36:b7:9c:3d:d0:28:0e:b1:1e:
a7:5d:0c:89:bd:25:74:b8:49:66:b6:13:52:f2:12:
13:7a:ed:05:ad:09:e9:e8:ac:57:6c:72:41:2b:bb:
a4:12:84:73:c2:49:99:80:1e:2a:10:b7:77:42:3f:
9a:14:8b:3c:86:b7:08:2f:88:4a:e0:87:ca:a0:37:
5b:b9:a7:6a:33:11:23:8d:2d:25:d0:7c:4a:51:6d:
3b:35:ba:54:70:a6:c0:36:c2:c1:a3:82:ad:62:0e:
a9:82:1f:27:36:9c:c7:07:33:e2:d5:5e:6b:ec:e5:
52:ab:58:e9:82:5d:16:3c:07:4f:3d:ce:99:56:7e:
b4:11:74:2d:0d:d2:87:55:d2:c6:61:29:33:17:8b:
2e:91:ac:7a:b6:e7:a0:8d:0c:1c:91:aa:ae:3a:c2:
e4:50:7d:e0:6b:97:75:5c:79:f0:b1:58:8e:e6:a8:
3d:fb:77:90:e0:08:b2:d3:6e:1b:9b:5c:68:ba:82:
61:a0:bc:be:b3:d4:8c:23:6a:bd:fc:fa:cd:a4:35:
1e:7f:ec:37:06:00:d0:5a:bf:24:06:c7:5b:7b:df:
a0:96:54:22:c2:e0:ba:c0:bc:d2:af:74:b1:49:06:
75:f8:8e:04:3b:a4:8b:7a:a4:e1:28:fd:1d:42:3d:
a2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DB:D7:5D:C4:93:49:40:4F:BE:93:5A:EC:B8:F3:CF:C3:30:14:F2
X509v3 Authority Key Identifier:
keyid:BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/862720F4031611EB9086351AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.47.246.0/23
103.204.104.0/23
192.140.248.0/22
IPv6:
2402:1280::/32
Signature Algorithm: sha256WithRSAEncryption
86:c2:0b:ec:d0:44:7a:f3:b3:3f:af:30:c9:7f:36:5c:f2:5b:
c5:ca:86:8c:e1:00:d6:36:bf:b5:fe:ac:9b:43:9f:ff:91:19:
d7:4e:91:64:d6:bc:9e:89:02:35:23:f6:24:73:ee:10:30:4b:
2e:1e:ed:79:47:8a:78:11:da:d2:01:bf:e8:b0:7e:65:37:13:
fa:ed:1b:14:ae:24:6e:3d:a3:90:6a:7a:4d:ef:96:ee:9a:e1:
eb:67:0f:89:84:9c:3c:b7:60:78:f5:cf:26:9a:98:c1:f3:90:
47:6b:a6:e9:5b:58:59:38:aa:2a:09:85:2a:b8:73:15:5b:36:
a1:27:71:c8:77:3f:cf:c7:19:32:c0:89:6b:99:34:8e:5e:f3:
cb:fa:30:fb:f6:20:a0:cc:9e:0d:fe:41:8c:b7:b7:7c:91:52:
4b:51:15:d5:bb:8d:88:51:6d:35:41:4e:0e:6d:2d:5d:d3:5d:
2c:95:23:c3:da:cb:6c:d4:c0:1a:31:df:27:98:53:d3:2e:4b:
87:45:e5:6b:16:70:d6:3a:b7:ce:6d:6e:28:89:0d:5d:c3:d1:
60:16:76:6b:b5:ca:12:1e:aa:d3:ea:ac:67:d4:ce:1d:ae:00:
a8:24:7f:f6:a5:95:25:64:19:e2:d6:7e:81:66:2a:f3:ed:2e:
73:6c:06:dd
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgICCLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0RENkExMTAvBgNVBAUTKEJCOUQ1RDUwRjc1NTgxOTcyRkMzQUYxQzZDRTZBRkNG
NTdDRkI5M0YwHhcNMjYwMjA0MjExNzM4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1MTQ3ZC1hNDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6gHI+KI2t5w90CgOsR6nXQyJvSV0uElmthNS8hITeu0FrQnp6KxXbHJBK7uk
EoRzwkmZgB4qELd3Qj+aFIs8hrcIL4hK4IfKoDdbuadqMxEjjS0l0HxKUW07NbpU
cKbANsLBo4KtYg6pgh8nNpzHBzPi1V5r7OVSq1jpgl0WPAdPPc6ZVn60EXQtDdKH
VdLGYSkzF4sukax6tuegjQwckaquOsLkUH3ga5d1XHnwsViO5qg9+3eQ4Aiy024b
m1xouoJhoLy+s9SMI2q9/PrNpDUef+w3BgDQWr8kBsdbe9+gllQiwuC6wLzSr3Sx
SQZ1+I4EO6SLeqThKP0dQj2ihQIDAQABo4ICezCCAncwHQYDVR0OBBYEFKfb113E
k0lAT76TWuy488/DMBTyMB8GA1UdIwQYMBaAFLudXVD3VYGXL8OvHGzmr89Xz7k/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREQ2QS8zOUY0OEExMDAz
MTUxMUVCQjU1RDIyMTlDNEY5QUUwMi91NTFkVVBkVmdaY3Z3NjhjYk9hdnoxZlB1
VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3U1MWRVUGRWZ1pjdnc2OGNiT2F2ejFmUHVUOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0RENkEvMzlGNDhBMTAwMzE1MTFFQkI1NUQyMjE5QzRGOUFFMDIvODYyNzIwRjQw
MzE2MTFFQjkwODYzNTFBQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY
BAIAATASAwQBZy/2AwQBZ8xoAwQCwIz4MA0EAgACMAcDBQAkAhKAMA0GCSqGSIb3
DQEBCwUAA4IBAQCGwgvs0ER687M/rzDJfzZc8lvFyoaM4QDWNr+1/qybQ5//kRnX
TpFk1ryeiQI1I/Ykc+4QMEsuHu15R4p4EdrSAb/osH5lNxP67RsUriRuPaOQanpN
75bumuHrZw+JhJw8t2B49c8mmpjB85BHa6bpW1hZOKoqCYUquHMVWzahJ3HIdz/P
xxkywIlrmTSOXvPL+jD79iCgzJ4N/kGMt7d8kVJLURXVu42IUW01QU4ObS1d010s
lSPD2sts1MAaMd8nmFPTLkuHReVrFnDWOrfObW4oiQ1dw9FgFnZrtcoSHqrT6qxn
1M4drgCoJH/2pZUlZBni1n6BZirz7S5zbAbd
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:41:20 2026 by rpki-client