
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/DCB2531AC75911EF979D593BC4F9AE02.roa
File: DCB2531AC75911EF979D593BC4F9AE02.roa (raw, json)
Hash identifier: Z35WMPQjI78UmAZwLnCG0WH+1pVhv9Z9nMqNz90nIuY=
Subject key identifier: BE:93:25:B8:F9:D2:23:91:B9:B4:72:0F:60:AC:93:81:EC:25:D9:78
Certificate issuer: /CN=A919631C/serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
Certificate serial: 0FCC
Authority key identifier: F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/DCB2531AC75911EF979D593BC4F9AE02.roa
Signing time: Tue 20 Oct 2026 17:34:47 +0000
ROA not before: Tue 20 Oct 2026 17:34:46 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 134715
IP address blocks: 103.197.176.0/22 maxlen: 24
220.158.236.0/22 maxlen: 24
2403:580::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl
rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 17:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4044 (0xfcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919631C, serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
Validity
Not Before: Oct 20 17:34:46 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ad7a636-8a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:58:a2:62:54:54:b2:32:ce:c4:5e:73:9f:
07:1a:e3:88:5f:d7:b5:80:75:32:33:be:39:c6:2f:
6f:b5:f0:72:0a:58:2b:51:15:67:28:10:df:e3:73:
c8:d2:08:3f:17:37:3a:67:4d:8b:c6:76:f5:f0:61:
62:dc:af:38:65:e5:1d:df:09:12:90:e1:99:bc:57:
86:18:ec:ea:45:e3:3d:6e:32:22:8a:28:91:fa:a8:
06:1d:ae:9f:ea:c2:83:b7:8a:37:ec:09:b9:fc:4d:
39:a6:f8:9d:29:bf:76:cb:a3:50:20:62:41:e3:41:
51:fa:9a:43:6d:4b:03:cc:98:61:1b:15:49:f7:53:
65:db:12:ba:74:91:8c:98:2f:fc:fd:ba:fc:8a:15:
60:74:bd:4e:28:b6:37:c1:d6:d5:07:03:de:b6:e3:
24:05:0c:5b:1b:17:0c:a3:22:40:62:22:8a:bb:55:
cb:d1:26:06:67:b7:e6:17:bb:24:47:22:7d:5a:bc:
13:43:bf:14:8e:f1:af:3c:06:29:69:6c:d4:47:68:
7d:71:df:32:43:9d:7c:d9:1f:5e:ea:2d:12:31:76:
c9:b3:34:bc:03:0d:be:16:58:e9:6a:50:08:15:fd:
e8:ec:7a:e0:c3:c2:59:3e:14:4d:0f:39:79:1a:3c:
36:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:93:25:B8:F9:D2:23:91:B9:B4:72:0F:60:AC:93:81:EC:25:D9:78
X509v3 Authority Key Identifier:
keyid:F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/DCB2531AC75911EF979D593BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.197.176.0/22
220.158.236.0/22
IPv6:
2403:580::/32
Signature Algorithm: sha256WithRSAEncryption
ad:08:b6:05:5e:5c:2e:92:ad:62:bf:92:74:34:23:74:53:8f:
95:b6:26:be:1c:52:b5:9a:27:8d:e3:38:02:db:16:87:f1:68:
9c:47:c6:39:ee:f7:f4:84:00:b3:ed:94:5c:6f:63:d6:50:96:
20:df:e9:ff:e7:b5:90:ec:97:68:65:2c:00:de:9b:4c:f1:f4:
1b:ed:0d:e4:24:71:6c:b7:a4:a8:5c:f2:45:d0:09:2a:9e:83:
30:31:9f:1e:d6:77:ce:9c:28:c9:23:3c:05:79:33:cb:c9:29:
ef:03:c2:fe:68:c7:71:59:b6:90:70:6b:46:c7:73:f0:ca:ab:
ed:42:8e:ba:97:12:f0:b3:96:1f:c4:e8:11:df:b4:72:71:58:
0d:e6:56:18:4a:de:b8:2e:45:7c:ed:14:d5:2b:17:bc:cb:a9:
d1:b8:6e:0f:eb:49:9d:47:56:2a:a1:80:55:51:99:81:45:21:
f9:af:9f:18:a6:c5:82:d6:81:f4:9e:b1:53:bc:d9:9a:d3:ae:
44:96:db:5c:16:d4:9d:a7:42:5c:46:c9:90:47:d0:45:ac:f8:
1a:7f:e6:d1:2f:74:70:1d:5e:83:b9:2f:2b:9f:3b:fc:49:b7:
78:4a:33:98:1d:52:fb:b6:87:4c:3c:3d:7e:ff:ec:24:b3:3a:
c0:7b:86:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:40:24 2026 by rpki-client