
$ rpki-client -vvf rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/1C8D941432FB11F19CCB9904AA833773.roa
File: 1C8D941432FB11F19CCB9904AA833773.roa (raw, json)
Hash identifier: Vdjw7w1PeyzPAqEcj94Cecz0zkFI9OWxcvUoO7uwc2g=
Subject key identifier: AD:2E:9E:58:04:43:BA:8D:5A:F4:33:71:C5:3A:DB:79:78:0E:97:71
Certificate issuer: /CN=A917412F/serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD
Certificate serial: 24B2
Authority key identifier: 04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/1C8D941432FB11F19CCB9904AA833773.roa
Signing time: Wed 06 May 2026 16:22:46 +0000
ROA not before: Wed 06 May 2026 16:22:46 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 133064
IP address blocks: 103.26.36.0/22 maxlen: 22
103.26.36.0/24 maxlen: 24
103.26.37.0/24 maxlen: 24
103.26.38.0/24 maxlen: 24
103.26.39.0/24 maxlen: 24
2001:df3:a000::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl
rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9394 (0x24b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917412F, serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD
Validity
Not Before: May 6 16:22:46 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=69fb6ad6-1f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:35:85:19:15:8b:2e:86:71:3e:24:f7:d5:c3:
3d:11:0d:69:76:aa:96:3e:76:4b:60:1f:07:5d:ef:
72:6a:99:0c:5a:7d:20:43:6f:6f:37:15:6c:a2:d1:
21:6a:74:9c:19:86:5d:a4:db:10:12:56:5b:6a:e3:
89:89:86:5e:6a:87:b8:ef:5b:57:b8:41:fd:32:31:
55:b1:ff:ca:89:0e:9f:9b:4c:8a:64:f9:9b:5d:1b:
7a:4d:5c:84:66:ae:96:b7:2a:09:71:77:80:a7:6e:
76:62:ee:94:e6:a4:f3:67:f4:cf:b7:0a:29:72:98:
9f:c2:d1:6d:80:f9:9e:65:01:52:79:8e:97:f7:05:
8b:53:e1:ee:48:54:85:36:b3:25:72:7b:3e:20:96:
b3:9e:4b:2f:d0:e7:6c:64:e3:9b:04:4d:02:d1:50:
25:ec:46:ab:d6:33:92:e3:6b:47:60:94:5f:94:3f:
d9:56:4f:6a:e0:9b:bd:2b:a5:9f:cd:33:75:ce:36:
34:b8:ce:72:45:99:b1:06:39:e5:fa:10:5d:9b:e1:
7f:37:ea:0e:d5:ce:78:dc:da:1d:49:6e:26:af:fc:
a8:6e:03:6b:44:de:5f:06:06:8f:d9:c2:6c:18:75:
57:30:55:e5:94:9a:7d:cb:4a:64:02:68:53:bf:7a:
3d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2E:9E:58:04:43:BA:8D:5A:F4:33:71:C5:3A:DB:79:78:0E:97:71
X509v3 Authority Key Identifier:
keyid:04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/1C8D941432FB11F19CCB9904AA833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.26.36.0/22
IPv6:
2001:df3:a000::/46
Signature Algorithm: sha256WithRSAEncryption
0b:77:a6:19:b3:9a:d0:17:ff:81:fe:5f:ab:89:df:cc:2b:60:
b4:58:6a:be:38:eb:27:8a:42:91:0c:0d:f8:12:a8:09:24:e6:
0a:94:a6:09:d1:0d:cf:11:08:c8:7a:20:49:ae:2a:8d:d8:5b:
1c:77:9d:da:fa:b1:bf:52:bf:32:0c:33:d2:33:4b:5b:41:13:
39:a8:e0:5e:a3:97:3a:87:fb:a2:1d:ae:f9:6a:02:64:c2:c6:
69:b0:1b:60:76:95:39:2d:20:35:3c:78:80:46:7e:c9:2a:67:
27:d3:39:e8:6f:0e:5c:97:63:a7:b7:d2:fc:ba:cb:71:38:da:
d5:85:81:b5:3c:1a:d1:a1:25:54:a1:8a:9f:9f:0a:5a:3c:9a:
bc:fe:e6:2a:f3:13:47:d5:83:bd:ac:9e:02:be:a7:6e:21:93:
94:47:29:0f:3b:15:20:01:c2:9d:5f:4b:2c:d1:aa:c3:e0:d5:
1f:3f:a3:46:13:a9:f8:75:78:e5:23:a8:d9:57:85:19:f1:25:
85:74:3f:6b:fc:76:2b:40:d0:37:2b:64:a8:0a:d5:57:c4:d0:
59:84:66:25:3a:87:3d:84:ac:3e:b3:67:ba:47:4e:de:e7:0e:
22:a4:c4:e3:59:48:a0:cb:66:e9:0b:46:ea:07:8f:98:76:40:
39:53:58:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:23:17 2026 by rpki-client