
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/71B685ACF7E511EEBC67981CC4F9AE02.roa
File: 71B685ACF7E511EEBC67981CC4F9AE02.roa (raw, json)
Hash identifier: RaGY6FAZxGZDZsSuof8rmTq3skc2lNTAnKA5LtFgVgE=
Subject key identifier: 3D:A8:AF:C4:85:F0:28:BF:7B:2E:6F:B5:22:C4:48:D8:BF:A3:04:D5
Certificate issuer: /CN=A918A469/serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1
Certificate serial: 016A
Authority key identifier: 2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/71B685ACF7E511EEBC67981CC4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:00:37 +0000
ROA not before: Fri 29 Aug 2025 05:54:58 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 7637
IP address blocks: 202.137.64.0/19 maxlen: 19
203.10.72.0/23 maxlen: 23
203.17.215.0/24 maxlen: 24
203.27.47.0/24 maxlen: 24
203.30.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl
rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 04:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 362 (0x16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A469, serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1
Validity
Not Before: Aug 29 05:54:58 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a5a615-2245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:19:17:70:2d:3f:71:96:1f:2b:fc:a0:a7:
17:02:3d:11:7c:06:fb:7e:9f:44:4a:f9:18:2d:ba:
f9:7f:c6:02:5d:09:0c:e9:22:36:70:13:c2:19:be:
ce:b1:26:04:41:05:36:c8:6c:6f:94:a1:d9:9c:a5:
97:3b:c6:13:03:b5:3d:d1:19:ca:a8:30:4b:61:3b:
40:41:74:06:59:e4:94:7f:17:21:13:95:dd:ed:d6:
19:93:e0:a4:0b:c8:f5:34:4a:23:b4:b8:1f:f8:0b:
5e:a0:83:57:84:ae:25:c5:67:82:1d:78:cb:89:f7:
bb:f2:cf:46:94:f1:aa:bc:9a:af:06:4b:a2:10:2f:
f6:e2:c6:56:21:13:76:ad:67:76:c9:db:c9:27:ec:
52:fa:ca:17:22:77:56:e1:7f:46:59:0b:e2:d8:8c:
00:53:da:1e:c8:99:af:0e:1d:f1:a4:24:eb:dc:30:
8a:4e:32:79:e9:90:4e:47:d1:1d:1f:0f:12:c4:87:
a4:24:84:79:a7:44:56:e3:91:7a:a1:e4:70:b1:0d:
ee:44:78:f9:6d:f7:e6:bb:da:ce:dc:ba:e9:a3:06:
9a:39:99:47:5e:ff:c3:59:3d:9a:d7:d2:0c:a7:ae:
31:21:0c:f7:df:f9:07:b7:91:ef:2a:99:19:61:96:
21:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A8:AF:C4:85:F0:28:BF:7B:2E:6F:B5:22:C4:48:D8:BF:A3:04:D5
X509v3 Authority Key Identifier:
keyid:2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/71B685ACF7E511EEBC67981CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.137.64.0/19
203.10.72.0/23
203.17.215.0/24
203.27.47.0/24
203.30.97.0/24
Signature Algorithm: sha256WithRSAEncryption
19:c8:d6:80:3c:38:d5:8b:f4:f3:3d:94:dc:6a:53:59:28:51:
86:42:d1:61:22:10:a2:9e:57:9d:44:6b:9a:eb:5e:48:ba:3c:
39:af:ad:a2:65:1d:3d:57:1f:b1:d2:b2:17:37:18:a6:73:df:
f7:47:ed:c3:89:a9:87:b6:c8:ca:c1:00:e7:02:d5:e7:90:41:
f8:60:1f:59:26:02:9d:c4:b3:66:5a:23:b4:e2:c3:40:0e:cc:
ad:c7:f5:dd:6d:df:d5:2d:d1:a0:51:1d:ab:50:1c:26:55:75:
cc:07:11:0d:7d:0b:37:b7:d7:10:22:4c:90:40:9f:63:a8:6e:
42:90:fc:bd:e2:5c:08:a9:a0:5d:72:a8:66:b3:7a:a8:f3:9d:
1c:22:cc:f8:93:b9:4e:a8:6a:f1:93:b5:8d:84:87:8d:93:fe:
23:84:75:a4:10:ed:c0:5d:19:80:eb:bd:89:68:37:fe:49:fe:
79:9f:80:ce:5b:00:8f:88:c6:a0:0f:ae:42:df:35:6d:ee:68:
67:59:da:22:b3:ba:43:ed:21:0b:ec:8b:c7:2b:49:de:9c:20:
78:b6:fa:60:bd:25:99:b5:33:4c:1e:2a:ac:cd:65:37:d4:6c:
8b:e2:af:bb:72:01:88:93:2c:e3:e3:63:6f:11:1e:5c:bc:72:
06:9b:b3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:24:34 2026 by rpki-client