
$ rpki-client -vvf rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/DB5DF87886EF11F19E006003A7EE528E.roa
File: DB5DF87886EF11F19E006003A7EE528E.roa (raw, json)
Hash identifier: 9Nt4awcAgPTdczdUfdk9my2V1ta22EWCOBnpzH8R6tE=
Subject key identifier: A5:43:BA:B5:F6:F9:12:92:AC:8A:FB:61:7A:B4:35:B7:46:3C:6B:0E
Certificate issuer: /CN=A919992D/serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF
Certificate serial: 1DFD
Authority key identifier: FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/DB5DF87886EF11F19E006003A7EE528E.roa
Signing time: Thu 23 Jul 2026 23:40:16 +0000
ROA not before: Thu 23 Jul 2026 23:40:16 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 63998
IP address blocks: 103.61.8.0/22 maxlen: 30
2403:6a80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl
rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 01:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7677 (0x1dfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919992D, serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF
Validity
Not Before: Jul 23 23:40:16 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6a62a660-b3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:86:b0:74:1c:93:67:18:41:04:9d:bf:7e:
30:25:39:ea:15:be:60:aa:0c:ee:66:99:c7:9e:3c:
7b:04:24:36:8e:fa:f3:40:fa:d4:0b:4f:ab:f2:5d:
f7:4b:5c:ba:0c:a7:65:7e:4f:e4:6f:0e:d4:97:0a:
25:4d:59:7a:4d:3b:cb:27:68:71:35:e4:49:43:60:
ff:00:d8:95:7a:39:51:0c:44:ea:19:b7:2e:26:63:
03:d3:cf:08:63:4e:77:59:4d:71:a0:1f:9f:af:8c:
40:74:f1:51:98:cd:c1:84:ec:9d:01:27:77:97:89:
ad:2d:75:b1:5c:ff:33:de:18:8a:1e:30:2f:cd:f4:
8d:b8:ac:5e:25:88:be:4f:62:a7:8d:3c:3d:02:b2:
69:d0:8c:4e:91:b4:79:cc:dd:4c:86:43:03:dd:c2:
77:c4:5b:a4:48:4c:a2:8a:5b:b4:4d:22:f1:c3:61:
d1:e2:f9:20:23:91:6f:1a:ca:3d:64:67:c4:7d:87:
eb:c1:4e:34:73:71:33:89:82:9e:57:f3:6f:dc:c9:
87:57:92:62:34:d9:8f:86:88:42:c3:a8:6e:14:b3:
ce:2c:c5:59:04:04:14:aa:15:80:fb:44:7c:fd:37:
c2:39:d3:94:e8:1e:4e:2e:8f:d6:51:45:17:14:43:
d7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:43:BA:B5:F6:F9:12:92:AC:8A:FB:61:7A:B4:35:B7:46:3C:6B:0E
X509v3 Authority Key Identifier:
keyid:FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/DB5DF87886EF11F19E006003A7EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
103.61.8.0/22
IPv6:
2403:6a80::/32
Signature Algorithm: sha256WithRSAEncryption
bf:ef:52:02:74:0a:e0:0b:d6:06:51:be:35:c5:53:60:92:46:
e9:3e:ca:8c:3f:28:2d:72:2c:26:bf:ff:fc:6c:ca:1f:94:e9:
25:1b:a1:82:f9:de:f0:11:11:af:12:78:dc:80:90:12:c4:40:
df:2b:cb:6d:8d:35:cc:cf:32:d4:2a:49:43:50:90:ef:3a:03:
c7:6d:cc:f7:0f:15:04:00:8b:d0:20:45:d1:83:e7:3f:25:4b:
69:73:eb:4d:c9:e1:b8:1a:48:fd:5f:fb:ce:f9:17:0e:14:1e:
88:9e:be:43:43:d3:28:2b:ed:cb:3a:4c:d2:ef:70:56:a8:5d:
46:54:42:d6:ed:e5:00:8d:f2:b8:1d:c7:a8:8f:d7:d8:29:e4:
1c:2d:2c:23:ab:a3:2a:4a:08:bc:63:7b:60:88:9d:99:bf:67:
be:17:76:72:dd:95:48:00:f5:7f:3b:c5:2b:16:4a:47:74:ab:
8e:ea:30:ba:6c:9e:e9:bb:06:8e:1e:79:24:c3:d0:7a:f7:76:
5d:16:59:7c:93:66:8c:c0:fa:fc:94:fb:ac:6f:0d:f4:af:f4:
bf:36:fe:53:31:cb:f9:92:00:9f:19:5f:64:4e:b2:f6:21:62:
f1:28:09:32:6e:29:53:be:0d:67:96:ec:54:7c:b9:95:b0:c7:
18:43:df:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:26 2026 by rpki-client