
$ rpki-client -vvf rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/A26E4F16C13411ECA5838429C4F9AE02.roa
File: A26E4F16C13411ECA5838429C4F9AE02.roa (raw, json)
Hash identifier: d2IO53QQHp9HhXVDc1CoUGPFf1YUTdGHgG7B3UV4InA=
Subject key identifier: 5D:60:49:37:0D:39:30:2F:FC:E1:DD:A3:40:3D:CB:2C:BD:F4:2C:EF
Certificate issuer: /CN=A917039B/serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89
Certificate serial: 03CD
Authority key identifier: D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/A26E4F16C13411ECA5838429C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:26:49 +0000
ROA not before: Sat 31 May 2025 01:46:46 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 148968
IP address blocks: 103.186.156.0/24 maxlen: 24
2001:df0:ab40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl
rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:13:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 973 (0x3cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917039B, serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89
Validity
Not Before: May 31 01:46:46 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a59018-d206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c2:a4:3b:c7:8e:32:24:4b:a7:62:81:50:af:
dd:36:64:5e:b2:55:35:f6:8f:c2:52:15:42:24:17:
79:d6:29:48:36:ba:e3:fe:5b:80:6a:ca:4f:f8:33:
23:a2:59:37:e6:8e:26:9e:f0:20:71:bf:2a:d4:8f:
29:29:8c:f5:93:4e:f8:ec:8e:06:57:7d:5d:7d:cb:
30:95:07:27:ca:88:f4:66:d5:b3:91:9e:83:ed:f5:
ab:0e:6b:95:3c:4a:ad:a7:ca:00:ba:35:7a:2a:97:
d1:47:a0:82:ab:d9:06:9c:d0:e2:66:ee:da:7e:4d:
7e:fe:87:fe:2c:1a:1a:f0:a1:be:79:05:eb:63:b3:
eb:47:64:67:3a:81:33:17:f9:7e:fe:d4:ab:dc:a6:
19:ed:79:6a:01:6d:2c:6c:04:5d:32:d2:63:7a:66:
9a:2d:3c:fd:27:f2:de:fb:c6:2c:f2:d8:e9:a0:dc:
63:79:80:26:3b:5f:f8:85:1e:ee:e8:c6:bd:f3:0e:
fe:53:0c:52:6e:28:0b:64:00:37:c0:5b:1f:50:b6:
04:de:d9:34:b9:63:5a:d5:07:ed:03:eb:b8:cf:8f:
86:cd:86:68:25:ef:a8:16:8c:32:ea:bc:be:4a:56:
93:38:db:b7:9c:9d:ae:85:47:1a:ee:75:6e:a5:2b:
74:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:60:49:37:0D:39:30:2F:FC:E1:DD:A3:40:3D:CB:2C:BD:F4:2C:EF
X509v3 Authority Key Identifier:
keyid:D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/A26E4F16C13411ECA5838429C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.186.156.0/24
IPv6:
2001:df0:ab40::/48
Signature Algorithm: sha256WithRSAEncryption
8b:94:68:3b:40:6f:21:3e:90:d0:99:c5:fe:5e:20:77:6b:17:
cf:53:4e:bd:00:a9:71:b3:5e:8e:1a:44:00:f9:a5:e4:16:db:
67:78:63:32:42:fd:25:33:7c:6a:ca:bb:53:5f:6f:58:49:a7:
11:e9:8f:76:ed:7b:e3:4d:e8:20:bd:f6:2a:50:89:f5:a2:83:
cb:48:c5:01:00:cf:8f:60:e5:8c:3c:1f:d3:e5:a5:2c:d8:b0:
cd:d3:26:de:e2:cd:d4:bf:98:2c:34:08:1f:9b:75:8c:2e:ab:
20:2c:53:6e:c0:11:3b:98:98:a3:42:24:d4:de:ec:ae:38:30:
5d:f3:8e:f1:fc:5a:00:9b:5f:23:7a:af:94:5e:4a:34:2f:8f:
12:b2:90:54:41:0e:e7:a7:5e:90:ce:41:95:bc:52:5b:13:db:
a8:cc:b4:e9:dd:9a:22:82:27:7d:c9:42:fa:1d:e4:85:ad:8c:
82:05:65:b0:8e:aa:45:21:e5:75:f8:38:bd:b8:c2:0c:fb:81:
7d:81:1f:1d:00:ac:3e:86:30:07:27:34:d8:99:eb:9e:9b:0a:
1c:63:96:73:65:76:d1:24:41:47:3c:4b:75:82:33:35:e6:85:
67:35:cd:c8:93:c0:ce:b4:17:2e:e7:37:60:8b:c0:8c:6c:b6:
4c:e2:55:9f
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICA80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzAzOUIxMTAvBgNVBAUTKEQyMTAyMkMwMEYwREJCRTU4QTk5QTFFNjczRDNBRTFD
NURGRENCODkwHhcNMjUwNTMxMDE0NjQ2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTAxOC1kMjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAncKkO8eOMiRLp2KBUK/dNmReslU19o/CUhVCJBd51ilINrrj/luAaspP+DMj
olk35o4mnvAgcb8q1I8pKYz1k0747I4GV31dfcswlQcnyoj0ZtWzkZ6D7fWrDmuV
PEqtp8oAujV6KpfRR6CCq9kGnNDiZu7afk1+/of+LBoa8KG+eQXrY7PrR2RnOoEz
F/l+/tSr3KYZ7XlqAW0sbARdMtJjemaaLTz9J/Le+8Ys8tjpoNxjeYAmO1/4hR7u
6Ma98w7+UwxSbigLZAA3wFsfULYE3tk0uWNa1QftA+u4z4+GzYZoJe+oFowy6ry+
SlaTONu3nJ2uhUca7nVupSt03QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFF1gSTcN
OTAv/OHdo0A9yyy99CzvMB8GA1UdIwQYMBaAFNIQIsAPDbvlipmh5nPTrhxd/cuJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDM5Qi85OUY1NDQ3OEMx
MzExMUVDOTZCNUUwMjVDNEY5QUUwMi8waEFpd0E4TnUtV0ttYUhtYzlPdUhGMzl5
NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBoQWl3QThOdS1XS21hSG1jOU91SEYzOXk0ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzAzOUIvOTlGNTQ0NzhDMTMxMTFFQzk2QjVFMDI1QzRGOUFFMDIvQTI2RTRGMTZD
MTM0MTFFQ0E1ODM4NDI5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ7qcMA8EAgACMAkDBwAgAQ3wq0AwDQYJKoZIhvcNAQELBQADggEB
AIuUaDtAbyE+kNCZxf5eIHdrF89TTr0AqXGzXo4aRAD5peQW22d4YzJC/SUzfGrK
u1Nfb1hJpxHpj3bte+NN6CC99ipQifWig8tIxQEAz49g5Yw8H9PlpSzYsM3TJt7i
zdS/mCw0CB+bdYwuqyAsU27AETuYmKNCJNTe7K44MF3zjvH8WgCbXyN6r5ReSjQv
jxKykFRBDuenXpDOQZW8UlsT26jMtOndmiKCJ33JQvod5IWtjIIFZbCOqkUh5XX4
OL24wgz7gX2BHx0ArD6GMAcnNNiZ656bChxjlnNldtEkQUc8S3WCMzXmhWc1zciT
wM60Fy7nN2CLwIxstkziVZ8=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:27:58 2026 by rpki-client