
$ rpki-client -vvf rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/8889F4E484A711EBB701E773C4F9AE02.roa
File: 8889F4E484A711EBB701E773C4F9AE02.roa (raw, json)
Hash identifier: Zvlp/9Nr9kjIJAw7Kzcfn/OP8GtgWMkrP4WLY97VDwA=
Subject key identifier: 6C:BE:F8:8F:F1:7D:71:54:05:B4:16:34:02:0B:64:38:FC:27:36:04
Certificate issuer: /CN=A917068E/serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25
Certificate serial: 06FF
Authority key identifier: B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/8889F4E484A711EBB701E773C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:32:32 +0000
ROA not before: Thu 28 Aug 2025 22:44:52 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 134680
IP address blocks: 103.62.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl
rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1791 (0x6ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917068E, serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25
Validity
Not Before: Aug 28 22:44:52 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a431e0-4e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:b3:6a:b8:fb:50:52:5b:e3:df:73:24:5f:
13:b4:42:65:68:a1:dd:10:aa:4d:68:23:11:91:9c:
3f:82:fd:25:77:80:bd:00:47:01:c1:cf:66:d2:e7:
24:96:b0:57:1d:b6:ba:db:75:db:c1:9c:d2:b9:d4:
eb:48:90:f0:f3:e2:a1:d7:ad:58:81:9f:7d:75:0e:
70:ae:c5:e5:0f:05:56:ec:ed:5c:2a:16:65:28:4a:
77:66:73:04:1a:40:39:d9:d9:24:30:3b:87:ac:d0:
58:69:23:fa:fb:f0:71:ac:48:97:73:8f:f3:84:7e:
cc:e7:95:11:d6:18:fc:b9:ae:fc:fa:d7:9a:16:a3:
fc:9e:d9:d4:54:0c:3c:7b:c1:c8:d8:2c:75:64:c1:
e1:46:fe:56:88:a4:ab:ad:d0:ba:36:0b:41:e9:4f:
f9:45:b7:5b:53:e4:04:9a:29:e6:56:6e:0f:df:bb:
60:87:07:a3:f9:e2:d0:7a:b2:48:f9:d1:5e:c3:2c:
14:c7:e4:ae:f4:52:06:76:e0:0e:b2:e6:9d:bf:45:
03:88:30:31:a5:e5:f2:aa:c4:d5:e2:60:0d:ba:66:
71:8d:96:2d:3f:8e:db:cc:de:9b:2b:15:4d:c7:39:
5b:0b:1f:66:db:28:65:59:03:b9:82:69:65:26:16:
a2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BE:F8:8F:F1:7D:71:54:05:B4:16:34:02:0B:64:38:FC:27:36:04
X509v3 Authority Key Identifier:
keyid:B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/8889F4E484A711EBB701E773C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.62.36.0/22
Signature Algorithm: sha256WithRSAEncryption
74:2a:e0:26:41:66:30:e2:5b:95:a6:80:86:e2:49:ff:e3:f7:
7c:f7:11:cc:f9:51:94:a5:b3:4e:60:c2:b9:93:11:c7:03:74:
67:c2:10:8f:b9:7d:fe:2a:50:09:37:3a:7b:9e:5b:cf:58:76:
43:51:fc:95:00:2a:ae:67:2d:0e:a8:9c:1c:b8:d5:5b:d3:f1:
53:16:37:f2:e8:5c:87:52:76:94:f1:18:87:56:bb:7d:6e:ce:
1f:b5:72:f6:d0:96:95:d0:3f:9e:fd:8f:80:e6:6e:c1:41:34:
36:f2:c4:58:09:51:b8:99:4e:34:fb:bc:c1:92:4d:1d:a0:fb:
6b:18:45:f1:f8:01:d4:0c:e7:67:2d:2b:b3:20:f7:4d:ff:a2:
63:1c:c0:dc:f1:e5:b5:05:38:b9:6d:f1:48:15:ed:42:5a:97:
d9:97:6f:79:7a:c7:0d:b0:11:35:65:ff:fa:03:6d:e3:a6:cc:
ab:c2:b4:9c:d3:e7:6c:73:6b:3b:22:a3:0d:16:5e:b3:6e:8a:
d3:03:3e:35:8f:f3:51:f4:22:0e:a9:51:20:52:da:0f:30:44:
72:c1:f1:c5:25:9b:19:a9:87:f7:fd:2a:eb:45:c2:03:3f:d6:
75:db:05:e5:c6:27:2f:e6:02:2a:d1:6e:dc:c4:c4:e7:71:cd:
d3:7c:29:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:24:42 2026 by rpki-client