
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/F561A3BE935811EF97E1194EC4F9AE02.roa
File: F561A3BE935811EF97E1194EC4F9AE02.roa (raw, json)
Hash identifier: CTkMutpvAk7yYXe3XyhfPht58lpcIVgdH5hdBMm7y34=
Subject key identifier: B3:23:45:EB:49:4C:3E:67:99:EF:B5:36:18:C2:95:FC:50:C7:CC:EC
Certificate issuer: /CN=A914A554/serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
Certificate serial: 0152
Authority key identifier: 79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/F561A3BE935811EF97E1194EC4F9AE02.roa
Signing time: Thu 25 Jun 2026 06:37:36 +0000
ROA not before: Thu 25 Jun 2026 06:37:36 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 62654
IP address blocks: 203.104.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl
rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:55:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338 (0x152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A554, serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
Validity
Not Before: Jun 25 06:37:36 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a3cccb0-8419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:47:df:76:47:29:74:33:1b:bd:b5:4d:61:52:
7f:e7:61:2a:c7:be:14:8a:cd:30:a8:0c:6b:f9:07:
fa:95:73:a3:3a:64:87:14:58:96:1e:a1:d8:8b:b4:
c8:9d:92:f4:a8:65:33:de:f6:53:3a:7a:81:bb:94:
8e:27:db:92:44:89:1d:19:c5:b5:39:9d:a0:4a:d0:
0a:2b:f2:f8:2b:b7:8d:e9:e5:e9:8c:60:34:a1:25:
6a:03:44:5e:97:2e:6c:6d:c2:80:1f:07:b8:fa:f8:
5d:3f:c0:ea:5f:2c:ff:43:5b:6b:94:b7:38:e3:44:
a6:5b:f6:43:8f:b9:c0:f1:ea:bc:ce:97:c8:84:e6:
76:a4:af:75:b6:af:81:ae:09:1c:fa:20:7d:c5:00:
f3:9b:bf:0d:2a:23:16:f5:7a:1a:7c:64:69:02:eb:
5a:f3:1f:71:3e:b6:67:fc:ea:c9:98:a3:f1:e7:f3:
d9:9c:a7:05:0a:7c:19:a1:c8:be:3f:a1:bb:66:22:
9c:e6:64:5f:7e:fc:f0:af:6c:59:ea:c2:16:1d:09:
22:fc:ad:e1:95:84:7f:17:d5:04:2e:cf:87:ad:08:
7f:2b:14:55:a9:19:39:2c:7c:d2:d7:3a:86:26:7b:
3c:08:0f:60:02:be:ae:3e:03:93:04:c3:e5:7b:54:
21:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:23:45:EB:49:4C:3E:67:99:EF:B5:36:18:C2:95:FC:50:C7:CC:EC
X509v3 Authority Key Identifier:
keyid:79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/F561A3BE935811EF97E1194EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.104.70.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:c1:a9:98:6b:51:81:5d:b9:fb:4c:57:f8:80:9b:ea:13:69:
09:7a:b3:e4:4f:1a:38:f4:85:e8:82:be:65:fd:e1:90:1c:2d:
86:e2:79:3d:5e:be:78:43:14:c7:62:1c:b2:68:7d:01:71:49:
9b:72:65:86:68:2a:da:52:bc:58:b1:e2:b3:c3:1e:da:61:dc:
22:5d:12:7a:a4:fd:97:1b:d7:25:85:5d:eb:b7:4e:0d:df:de:
21:05:0e:01:55:e7:da:e2:03:60:72:7b:f5:4c:f6:67:7c:4d:
0f:fc:dc:f6:b3:e7:ec:b6:3f:cb:de:f0:2b:f2:29:ac:d7:9f:
22:4b:ff:3f:82:e3:6c:f2:40:0f:09:83:e6:81:c6:78:16:9b:
01:b6:5f:56:c2:4e:89:95:e4:ed:27:a0:ff:d2:d0:7f:4b:19:
ba:e2:ad:b7:e0:dc:6c:fc:23:8a:5a:b0:d5:9a:fe:e1:23:f7:
91:be:9c:23:c8:57:86:1b:bf:07:b7:bc:dc:4d:3d:b6:c9:4a:
40:9e:f2:bc:18:4e:3c:51:34:ce:c7:75:78:51:9b:0b:24:97:
97:99:02:65:9d:58:b0:24:c3:dc:0b:86:d0:ff:ba:67:91:c2:
b3:5c:0c:6f:db:3f:f5:1e:a4:6d:1a:d7:30:7e:22:79:8b:87:
89:45:cc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:53 2026 by rpki-client