
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/985276043B6D11F0AFFFDD4DC4F9AE02.roa
File: 985276043B6D11F0AFFFDD4DC4F9AE02.roa (raw, json)
Hash identifier: 58r0vtdt/oV3rGoChr48NFwAppp4ue8CY8DLnIFlHCo=
Subject key identifier: 5F:5B:DE:6C:83:79:BF:6D:93:69:F2:68:E2:45:28:4B:AA:0B:F1:3D
Certificate issuer: /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993
Certificate serial: 04A0
Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/985276043B6D11F0AFFFDD4DC4F9AE02.roa
Signing time: Fri 17 Jul 2026 01:25:45 +0000
ROA not before: Fri 17 Jul 2026 01:25:45 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 396982
IP address blocks: 103.63.102.0/24 maxlen: 24
103.207.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl
rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1184 (0x4a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993
Validity
Not Before: Jul 17 01:25:45 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a598499-01a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:38:b2:2e:5c:86:ba:c6:87:ac:7a:ad:f4:
f2:8e:89:f5:f2:b2:b5:0d:96:3e:6f:b0:a0:6a:6d:
66:ed:b9:3d:ba:93:a0:49:e7:82:67:a0:2d:dd:eb:
bd:e2:79:fa:f3:cc:68:8f:bf:60:ea:a0:f4:ab:79:
47:aa:94:76:e3:1a:3f:ec:b1:0b:ce:30:41:a9:90:
8b:ec:27:43:19:4a:cc:28:2b:3d:9c:95:0f:b4:09:
09:a4:7b:7e:d8:a9:6c:07:37:c9:55:b4:ae:48:12:
29:e2:7e:3e:a8:0b:15:23:d0:7f:77:19:47:e7:25:
e6:3d:4a:bb:2b:e9:b3:80:2a:d5:ca:75:ee:78:f3:
15:93:32:ce:26:3b:ab:05:92:97:11:f6:db:c8:18:
fe:4c:7b:6e:12:88:ce:50:1d:92:5b:f7:38:58:e1:
c2:4d:80:39:34:36:c8:48:71:2d:2b:4a:c7:da:4d:
ce:56:43:8b:8c:6c:d4:b8:92:f9:82:d8:0a:70:72:
b9:05:0d:1e:36:b9:17:17:94:88:b3:d0:e7:f8:b7:
0d:d4:16:d3:3c:62:20:20:7e:68:2a:ec:f0:28:d8:
a2:b9:0c:b1:19:4b:e7:90:36:79:d6:f1:eb:b6:d7:
28:18:8f:d7:7b:32:cf:97:8d:6d:8b:89:89:15:0e:
f1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5B:DE:6C:83:79:BF:6D:93:69:F2:68:E2:45:28:4B:AA:0B:F1:3D
X509v3 Authority Key Identifier:
keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/985276043B6D11F0AFFFDD4DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.63.102.0/24
103.207.158.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:f4:74:e5:40:19:48:93:7a:ee:de:e6:78:45:48:da:d8:07:
2c:c3:54:e5:09:4d:c1:96:0f:69:e8:dc:36:8e:64:45:65:74:
6f:dd:d6:4d:0c:24:a1:19:d7:e2:cd:4f:a9:ff:95:1c:e6:68:
b8:c0:4f:9d:57:40:cb:5b:a2:e3:6f:a4:c7:d5:e4:57:d1:21:
05:69:ed:de:4c:3c:d3:5d:34:b6:1e:e9:ed:1a:72:b5:57:3f:
cf:7f:a0:18:26:04:23:a4:e3:c1:40:51:ed:3b:0d:04:ad:93:
85:85:4f:1f:22:23:5c:66:d7:0c:ba:50:1d:d3:b3:8c:e7:9b:
a1:9d:4a:57:2a:c8:46:ac:f4:50:5b:dc:fb:b8:38:70:77:2f:
92:a2:e2:47:cd:d3:75:8a:24:56:85:96:9d:cc:50:e9:a4:c6:
f9:8d:c6:ae:3e:d3:3f:df:61:4c:24:e5:a6:8e:2a:78:67:ec:
c3:75:aa:cb:80:f7:96:c5:74:c4:fc:a1:a6:d1:57:76:a0:22:
9c:4b:8b:08:2a:88:0c:6f:83:8a:f5:b9:ec:6e:35:b1:4b:78:
9a:6e:a4:b9:16:95:ae:03:d7:b3:7c:6e:83:c8:1e:bf:58:d4:
90:e3:0b:9c:a2:d2:7f:30:b1:09:34:ca:c3:a2:0e:21:3b:5a:
da:6f:a4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:05 2026 by rpki-client