
$ rpki-client -vvf rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/87818166020D11EF916F0D65C4F9AE02.roa
File: 87818166020D11EF916F0D65C4F9AE02.roa (raw, json)
Hash identifier: ornbPFQGfx6/yfJwqQC5E8pEyY5xP+J6SQ5GeX/1iXA=
Subject key identifier: 5F:94:DE:D6:E5:05:02:1A:77:BC:D5:1A:C8:72:EB:7F:7C:37:98:F5
Certificate issuer: /CN=A919690C/serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636
Certificate serial: 0A35
Authority key identifier: 2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/87818166020D11EF916F0D65C4F9AE02.roa
Signing time: Wed 18 Mar 2026 20:26:31 +0000
ROA not before: Wed 18 Mar 2026 20:26:31 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 198247
IP address blocks: 103.85.129.0/24 maxlen: 24
119.160.236.0/24 maxlen: 24
119.160.237.0/24 maxlen: 24
119.160.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl
rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:35:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2613 (0xa35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919690C, serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636
Validity
Not Before: Mar 18 20:26:31 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69bb0a76-4770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:87:c2:ca:33:6b:c1:a6:b2:30:37:c7:97:f9:
fd:25:3d:95:41:a1:83:cb:88:49:c2:5a:75:15:3f:
23:56:75:fd:67:93:00:7a:2e:a3:4d:c7:2b:14:07:
61:fe:a2:3c:56:38:32:51:8c:a0:5f:cb:fc:a3:98:
8e:cb:87:27:61:df:c8:9e:74:16:fa:67:55:7f:bf:
de:62:c2:93:b2:e2:bd:ad:c4:98:97:ea:a7:7a:4d:
d3:f2:cf:24:77:1c:12:9b:c0:d4:f7:f2:39:19:5e:
d1:51:55:a2:1f:fa:2b:75:3f:88:a6:70:64:23:0b:
39:14:21:bb:0e:38:db:cf:c6:0a:f2:e5:96:1e:5f:
fb:56:9d:be:96:3b:55:b7:71:4e:f5:24:4f:62:e5:
5f:0e:ac:09:ee:e6:3c:05:d9:d5:e5:ad:50:75:b2:
18:f3:3a:ed:6e:ed:ad:53:16:d1:93:83:5f:7e:60:
0b:61:44:c3:34:9a:e8:f7:4d:8b:20:51:b4:f8:2c:
dc:ea:ff:49:b5:d9:3f:fc:a5:da:c3:4d:8d:83:d6:
ce:9d:7c:22:d7:ad:32:1a:d3:2b:26:76:4f:67:e5:
54:57:cc:a3:71:b1:74:ce:ba:60:50:06:10:c9:cf:
90:a3:ad:76:8e:74:02:10:31:96:14:c0:4c:b6:18:
c6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:94:DE:D6:E5:05:02:1A:77:BC:D5:1A:C8:72:EB:7F:7C:37:98:F5
X509v3 Authority Key Identifier:
keyid:2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/87818166020D11EF916F0D65C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.85.129.0/24
119.160.236.0-119.160.238.255
Signature Algorithm: sha256WithRSAEncryption
11:70:bc:3b:bc:43:46:d0:e5:a0:73:61:cd:a9:ed:2c:ee:e3:
51:6b:a6:4e:7b:62:88:72:16:70:c5:dd:45:ba:5d:40:06:84:
fb:c1:11:00:89:2f:d0:bc:1f:3b:d7:5d:c3:8d:3e:80:a4:13:
c0:b5:24:1a:24:1e:c4:e1:c8:84:e9:06:87:10:f9:94:0a:12:
f3:b9:4f:7d:da:3c:b8:06:00:67:0c:0d:e2:d8:62:cf:5b:c6:
09:14:63:00:b0:30:d8:f0:a3:c9:94:7c:c7:94:e5:e8:c7:53:
bd:ab:b6:d5:af:8a:4a:6a:b2:b8:23:7c:f4:eb:b7:2e:79:0f:
48:24:1c:55:a6:e8:d1:38:a9:a1:b7:fa:af:de:07:8c:12:e4:
d1:da:c9:1c:d5:5b:2d:53:c1:e4:ce:da:1e:8b:11:b1:3d:8a:
32:bd:88:a5:92:b9:b0:30:e8:8d:bb:32:09:5e:a2:33:12:f7:
98:95:03:c7:8d:78:b8:79:86:dc:e1:87:13:02:70:41:59:d3:
b5:8a:9c:d1:c2:fb:49:dd:f2:2f:58:9d:eb:3c:4b:9d:ee:83:
fb:9f:8d:ed:8c:58:12:c3:55:16:4e:94:2d:c8:09:e5:37:c4:
e9:59:32:b7:72:3c:c5:e3:f1:ba:cf:f8:1d:a8:dc:1d:c3:e3:
d1:0a:0a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:22 2026 by rpki-client