
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/D65601C8861C11F188AD997381A30FBC.roa
File: D65601C8861C11F188AD997381A30FBC.roa (raw, json)
Hash identifier: WU7YE/K0cvEfAIH9sG9oqCbuXQfC4KtRjMOmj1DEWdg=
Subject key identifier: BA:DB:E6:38:8A:E3:58:9A:91:7D:81:18:65:E1:B6:9E:38:F4:D0:FB
Certificate issuer: /CN=A916A3BE/serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4
Certificate serial: 0ABB
Authority key identifier: A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/D65601C8861C11F188AD997381A30FBC.roa
Signing time: Wed 22 Jul 2026 22:35:24 +0000
ROA not before: Wed 22 Jul 2026 22:35:24 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 64095
IP address blocks: 203.80.62.0/23 maxlen: 23
203.80.62.0/24 maxlen: 24
203.80.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl
rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:35:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2747 (0xabb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A3BE, serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4
Validity
Not Before: Jul 22 22:35:24 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a6145ac-7d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:fc:0c:dd:3e:40:eb:ef:4f:d5:69:06:56:
73:21:56:74:7f:0c:41:1a:f8:09:60:1c:28:09:b1:
c1:6a:66:c9:c0:c6:ef:15:0a:2e:28:e4:79:89:72:
3f:d9:96:53:7c:e5:fd:b0:16:35:dc:48:3c:97:58:
32:b1:f8:3f:52:f9:f2:fc:14:7a:a7:02:f5:32:3c:
68:ff:75:0b:25:39:c1:8b:9b:a0:1f:e9:bd:11:a7:
6e:c9:11:b9:fd:bc:73:9a:2c:01:a0:56:c0:8d:c7:
de:9b:79:a4:36:62:a1:a0:b7:ad:77:dc:d0:c8:28:
ba:e2:d2:10:f5:34:e2:e8:2c:83:1a:2d:98:cd:f1:
b0:61:c9:b6:42:ee:36:5c:7a:80:72:1a:2b:5d:6c:
10:0e:4a:9e:cc:b4:33:6f:49:97:ed:0b:60:2b:79:
69:7b:9a:82:29:2e:32:7b:2f:c2:08:46:d7:8d:52:
cd:20:10:42:99:f0:28:8c:0f:99:1d:c7:fd:8e:aa:
0f:79:61:3d:43:2d:8e:36:e1:62:a5:e3:e6:9a:c4:
80:2e:dd:88:45:d3:d7:f4:7f:4e:eb:86:ba:95:67:
bf:1c:5c:29:a0:81:ce:2f:97:be:9a:61:9f:09:79:
67:cc:bf:30:de:37:d5:c4:30:5f:81:dd:51:b3:48:
8c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DB:E6:38:8A:E3:58:9A:91:7D:81:18:65:E1:B6:9E:38:F4:D0:FB
X509v3 Authority Key Identifier:
keyid:A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/D65601C8861C11F188AD997381A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
203.80.62.0/23
Signature Algorithm: sha256WithRSAEncryption
03:d3:3e:87:21:78:42:13:8b:76:d9:83:7b:2a:de:85:80:79:
e6:7d:fd:36:3d:4c:68:f1:68:15:17:cf:80:ea:87:c2:50:f9:
2f:f6:c4:b6:31:e7:ce:b7:ca:a8:93:50:a6:11:d6:9e:e2:59:
8c:92:eb:21:76:5c:2b:d7:90:86:31:19:86:c5:f0:7c:ab:b4:
00:6b:7f:89:5c:74:93:cf:10:ab:48:17:8f:4b:5b:f4:86:2f:
3e:0e:7b:43:5d:03:cf:68:20:00:d6:06:ab:56:04:a2:ca:f7:
bb:ba:fa:ad:7d:36:6b:ac:0d:c1:c7:db:28:2e:70:b1:4d:0d:
77:e8:3d:54:3c:d9:de:e2:d7:74:fa:17:87:b7:f3:1f:b1:77:
f4:05:6f:91:be:7f:86:67:5f:e3:02:b6:3b:b7:20:c0:99:68:
91:df:e4:92:af:6a:c0:57:c7:9d:22:0e:64:7a:ed:ef:c3:5e:
b1:a5:18:14:a7:a5:13:15:4d:68:03:7d:6e:a4:4e:9c:0b:6b:
9c:79:fa:62:60:c5:64:77:df:6e:cd:e1:e0:12:b3:2a:eb:f8:
81:2e:b3:1a:7c:53:0f:f1:9c:b4:8d:81:d6:30:bf:9c:61:b7:
c3:b0:dd:3a:59:1b:d7:c7:92:95:80:e3:31:a3:ab:88:7a:7a:
ce:40:84:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:14:09 2026 by rpki-client