
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/555E0D90B71F11EFBBE56410C4F9AE02.roa
File: 555E0D90B71F11EFBBE56410C4F9AE02.roa (raw, json)
Hash identifier: w5rmWZZVBxC2/bAO599UhQgXvs8hWsiDzRokDXUEGU4=
Subject key identifier: 93:39:CD:1F:9C:9C:95:C2:AD:4F:22:84:2C:E7:37:34:99:A5:1B:C7
Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial: 01E3
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/555E0D90B71F11EFBBE56410C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:22:02 +0000
ROA not before: Fri 29 Aug 2025 05:25:38 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 9400
IP address blocks: 103.118.40.0/22 maxlen: 22
103.118.40.0/24 maxlen: 24
103.118.41.0/24 maxlen: 24
103.118.42.0/24 maxlen: 24
103.118.43.0/24 maxlen: 24
103.236.224.0/24 maxlen: 24
103.236.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 483 (0x1e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Validity
Not Before: Aug 29 05:25:38 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a59d0a-4539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:f6:e5:c0:3f:70:ed:c1:0a:e5:c3:c6:9a:
c7:5c:0f:7c:69:df:c0:91:cf:06:95:5c:0e:4a:6b:
07:33:74:33:f0:77:ca:1c:0f:0c:24:68:67:e2:5a:
a6:3b:c2:91:6b:88:82:50:0a:63:cf:55:51:71:ad:
49:97:53:aa:37:9e:63:52:ec:fb:f0:59:00:4d:c8:
07:a6:ef:b5:f4:0a:53:80:5d:17:a2:27:55:d8:ec:
2f:07:32:16:ef:d0:4d:8f:04:63:58:ce:c7:68:ef:
68:94:a2:8d:e8:9c:be:04:d8:6a:2b:13:be:54:02:
6d:8c:e1:0e:8e:29:85:7a:55:87:ef:62:b3:44:81:
ce:44:3e:6b:29:69:76:6b:c6:18:c0:40:88:d4:a1:
e9:05:cc:3a:4b:12:80:ce:9a:3c:1b:8d:97:c9:fc:
8f:9d:93:61:fd:58:89:16:b9:2b:57:33:37:d2:45:
87:e5:3b:29:23:3c:9e:d3:26:f9:06:2c:e6:a2:1d:
cb:a9:db:ca:b1:9a:52:aa:78:12:56:a4:be:b9:9a:
80:14:1b:40:a8:76:23:12:ab:99:6d:fd:4a:58:1e:
31:c7:83:ad:ea:36:fa:27:6c:ac:56:0f:2d:b5:d6:
c6:dc:25:62:3e:e7:47:e8:ef:1d:9d:f6:38:30:b6:
12:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:39:CD:1F:9C:9C:95:C2:AD:4F:22:84:2C:E7:37:34:99:A5:1B:C7
X509v3 Authority Key Identifier:
keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/555E0D90B71F11EFBBE56410C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.118.40.0/22
103.236.224.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:10:93:d1:84:bc:86:79:eb:ff:00:49:6e:18:be:33:64:cd:
a3:5b:25:bb:98:92:d9:6b:27:f4:66:ed:8c:64:ff:29:43:c6:
9e:cb:a4:22:e1:18:84:18:52:2a:6e:30:77:65:3a:84:cf:6a:
8e:0b:62:6c:11:9e:b5:83:3b:a9:c5:31:20:f3:38:50:c9:1b:
9e:27:9d:45:96:c1:75:7b:27:6b:09:70:2b:5e:8b:92:f8:ca:
3c:1c:4c:df:33:69:22:00:c2:21:f0:27:d5:a9:3f:86:12:ea:
7e:dc:f7:35:70:69:cf:23:77:19:01:a2:b0:d3:0c:16:6a:c1:
6a:18:1f:9a:10:6f:6d:91:f8:93:01:70:99:d5:61:68:ab:d9:
06:73:a6:58:0c:a8:54:0d:f8:cf:7c:90:c2:ef:f3:85:16:23:
27:fb:10:0d:e7:b6:3a:96:b7:89:4d:da:43:a0:3c:4b:da:89:
31:42:73:51:85:b0:6f:c9:a2:e0:d4:d5:8b:c2:ba:10:0d:e5:
38:6e:01:81:05:87:2f:af:cc:51:4c:32:38:fe:4b:00:1c:43:
dd:43:c1:34:af:1e:e6:4c:a8:f9:b7:d8:5b:bd:7d:cb:4b:2b:
f4:14:e8:7c:78:86:9e:26:99:1e:dc:01:d5:70:a8:6c:75:50:
49:8b:7c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:02 2026 by rpki-client