
$ rpki-client -vvf rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/62923A1EF2B711EDAA29717AC4F9AE02.roa
File: 62923A1EF2B711EDAA29717AC4F9AE02.roa (raw, json)
Hash identifier: v4Qu7n+fWBWXJKInz5nkseGm1QdnUq7lHUeNDDgFhss=
Subject key identifier: FD:D7:D3:B9:17:87:9C:8A:75:F7:49:A3:66:C8:8D:37:FF:1B:33:C1
Certificate issuer: /CN=A91579E2/serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3
Certificate serial: 0212
Authority key identifier: 3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/62923A1EF2B711EDAA29717AC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:51:56 +0000
ROA not before: Thu 03 Jul 2025 03:39:02 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 151208
IP address blocks: 103.133.88.0/23 maxlen: 24
2400:faa0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl
rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:12:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530 (0x212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91579E2, serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3
Validity
Not Before: Jul 3 03:39:02 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a595fc-ccee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:ab:56:e7:1b:a0:94:8c:24:df:41:ed:61:
52:bb:b5:1a:48:46:c5:7a:28:a7:fe:a8:21:5c:34:
03:08:7b:8e:15:bd:d3:4e:20:43:21:1f:b5:94:01:
46:1b:f6:0f:ea:bf:59:2b:f4:cb:03:07:cc:78:66:
91:7c:ca:66:d4:57:b2:66:1e:92:3a:1f:51:87:5a:
2f:9e:b5:09:2a:2a:03:ab:6f:3a:06:b7:6c:23:0b:
a1:75:4f:34:c1:5e:c9:eb:64:aa:97:6b:71:d4:46:
a8:f9:32:05:d4:3a:d5:e6:a8:eb:64:19:b9:f7:ed:
46:ca:e2:dd:53:6b:d0:7f:48:c8:41:42:da:df:23:
3f:f8:80:45:89:4f:bb:8f:bd:47:8a:34:3f:7f:8f:
e5:33:22:19:9b:c1:9e:50:65:e6:ae:da:96:8e:4a:
96:6a:e2:c7:5f:ea:15:f8:85:d8:71:4e:2d:9c:ef:
5b:50:0e:4f:b3:d9:20:fe:4e:0c:73:01:b3:f5:90:
db:55:5b:ae:0f:bb:46:eb:0b:9f:98:aa:6e:6e:0b:
0d:c3:1b:a9:14:ee:da:62:cb:90:4c:ca:39:5f:d7:
ca:fd:a3:b8:cd:4e:a3:56:f3:7e:ff:58:87:fd:ec:
7c:69:fb:ab:2d:d2:b5:8c:3b:16:8e:43:f2:26:24:
54:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D7:D3:B9:17:87:9C:8A:75:F7:49:A3:66:C8:8D:37:FF:1B:33:C1
X509v3 Authority Key Identifier:
keyid:3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/62923A1EF2B711EDAA29717AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.133.88.0/23
IPv6:
2400:faa0::/32
Signature Algorithm: sha256WithRSAEncryption
65:38:5a:4c:94:b2:37:7a:ab:7e:22:3d:4e:97:71:80:1c:ff:
1a:69:3a:31:84:5d:9e:9b:a7:73:10:de:6c:dd:0a:76:60:7b:
57:6d:67:8d:14:ac:73:23:45:a1:a4:9b:d2:af:d3:71:0e:ec:
66:32:5d:af:35:f9:f8:e2:38:b0:08:f3:f2:00:91:a9:7c:47:
0b:e9:75:80:aa:59:f4:6f:f2:ba:12:bc:fd:39:c9:00:8d:6d:
65:bc:48:4f:88:04:37:34:d6:2a:78:fe:14:95:87:ba:d0:39:
b7:1d:4c:de:27:62:54:68:bc:4f:90:eb:bc:cb:7a:0b:cb:14:
1a:a3:8f:77:51:4c:e0:54:25:aa:88:fe:e8:bd:68:27:74:3b:
40:4a:9d:ac:9f:16:d3:62:ad:d2:7b:73:37:98:b1:81:96:91:
42:cf:42:28:8f:79:da:a8:fc:70:b6:02:73:12:e9:b6:87:00:
50:3d:e4:92:4a:52:67:e5:bd:f0:91:0d:16:b0:d0:92:13:a5:
f3:1d:2f:17:53:a9:c0:da:9e:c0:68:16:e9:36:ca:77:4d:7c:
25:d9:e4:da:d7:a8:95:37:85:7a:b7:bb:27:1c:c8:60:0a:e0:
23:36:24:39:18:c2:3a:cc:e3:c2:d7:eb:8e:2d:0a:99:51:19:
39:4c:0e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:54 2026 by rpki-client