
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/6C0C85D0A43011ECA230771BC4F9AE02.roa
File: 6C0C85D0A43011ECA230771BC4F9AE02.roa (raw, json)
Hash identifier: W2SBGy0WMlElVPQX0czbiLooxC9uWPTo+MEamMh0ymA=
Subject key identifier: BF:DB:6D:48:6D:A5:A0:C3:9C:AB:D2:92:65:0A:74:A2:52:41:A6:5E
Certificate issuer: /CN=A918D6B7/serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Certificate serial: 35B0
Authority key identifier: EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/6C0C85D0A43011ECA230771BC4F9AE02.roa
Signing time: Mon 04 May 2026 12:07:17 +0000
ROA not before: Mon 04 May 2026 12:07:17 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 58470
IP address blocks: 103.65.248.0/23 maxlen: 24
119.160.62.0/24 maxlen: 24
119.160.63.0/24 maxlen: 24
119.160.90.0/24 maxlen: 24
119.160.105.0/24 maxlen: 24
119.160.107.0/24 maxlen: 24
119.160.109.0/24 maxlen: 24
119.160.122.0/24 maxlen: 24
119.160.124.0/24 maxlen: 24
2404:3100:a::/48 maxlen: 48
2404:3100:b::/48 maxlen: 48
2404:3100:c::/48 maxlen: 48
2404:3100:d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl
rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:51:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13744 (0x35b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D6B7, serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Validity
Not Before: May 4 12:07:17 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69f88bf5-f9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:6d:1c:5e:f4:40:7c:bd:0b:bc:1e:56:5a:
d4:4e:cd:a3:74:38:f9:0c:b6:5d:38:09:d1:f7:e3:
22:1b:32:09:b6:9d:fb:32:e7:43:34:39:0f:40:82:
36:ec:60:c8:71:2c:04:d4:a9:1a:86:c7:5c:a9:23:
52:85:17:2e:24:bb:8f:fb:dc:c9:d9:d0:2a:47:22:
14:e9:0b:75:97:86:81:95:4c:0c:4e:f5:6b:49:e6:
36:e7:2a:6a:a2:f4:86:45:21:26:5e:fa:f5:6d:e2:
66:33:d0:8b:8c:bf:1a:d0:8e:59:95:8d:67:9f:c6:
58:99:c8:e2:59:ca:df:10:1f:8d:65:eb:e1:a6:4b:
51:00:91:51:5d:94:34:9c:a4:c4:32:04:96:a2:98:
1a:2d:b8:5d:88:bf:f2:ea:db:75:5a:bd:83:21:f1:
09:0f:4e:9d:09:b7:18:60:65:e1:32:29:c7:b9:35:
60:62:ae:14:7c:9c:92:bb:02:be:59:5b:a3:a0:3d:
eb:6b:ec:f8:f9:80:3c:85:74:39:87:a7:3b:b3:28:
d8:87:c4:fe:c0:37:58:65:2d:f5:d8:20:5a:71:0c:
64:84:ab:40:30:5a:65:62:22:d3:87:27:57:68:c1:
6e:fb:0f:98:0b:1a:1e:7d:57:bd:81:b8:bc:bb:51:
73:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DB:6D:48:6D:A5:A0:C3:9C:AB:D2:92:65:0A:74:A2:52:41:A6:5E
X509v3 Authority Key Identifier:
keyid:EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/6C0C85D0A43011ECA230771BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.65.248.0/23
119.160.62.0/23
119.160.90.0/24
119.160.105.0/24
119.160.107.0/24
119.160.109.0/24
119.160.122.0/24
119.160.124.0/24
IPv6:
2404:3100:a::-2404:3100:d:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
80:71:80:59:fb:ff:e7:c9:c6:1d:26:95:c1:87:d7:92:5f:fd:
59:10:83:8d:59:09:90:4b:25:e0:76:77:23:78:9f:0a:49:bd:
8f:42:d2:23:64:ce:83:d6:98:08:7d:c2:04:38:5f:fd:2e:37:
8e:75:88:00:6d:d4:26:c9:8b:4a:61:d5:d1:6d:e3:8e:46:97:
bf:ce:87:e8:db:6a:5b:fa:55:3a:60:76:be:cd:6b:ac:6b:bc:
06:12:5f:28:42:30:a7:e9:4c:75:ae:ee:38:44:b4:fb:86:d7:
e9:07:7d:fe:33:4b:29:e2:d4:59:df:73:91:39:a1:41:d9:7e:
82:0b:b6:4e:6a:70:27:e1:d4:7d:af:29:d4:e4:b0:2e:1b:bd:
3f:4f:87:85:04:f2:57:af:69:88:49:39:51:24:38:e0:5c:71:
d2:95:29:0a:4a:45:30:b5:ea:7b:f8:3a:e6:1f:7a:65:42:60:
3a:71:1f:ee:0a:0d:d6:b7:90:88:6e:c6:3a:08:53:79:bb:b7:
00:43:61:a6:5e:d4:35:36:be:d5:d2:74:63:bf:d3:9b:84:5e:
4a:18:db:67:7d:c0:45:02:c7:d9:9e:c5:1d:8b:8b:ec:18:37:
04:ba:5b:93:77:3b:89:62:c6:e6:75:ae:00:f4:3a:6f:34:57:
79:bd:f9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:31:17 2026 by rpki-client