
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/D84A5FAC8F5911F081D9D142C4F9AE02.roa
File: D84A5FAC8F5911F081D9D142C4F9AE02.roa (raw, json)
Hash identifier: Xqj+ZL/qDvuXT5tU1wBoIGdlE5RCVHT+rKP7QOQndAs=
Subject key identifier: 6E:E0:38:94:FA:CD:E7:33:1B:3D:1C:15:3B:E9:80:76:7C:05:70:8C
Certificate issuer: /CN=A917C0CC/serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
Certificate serial: 6A
Authority key identifier: 0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/D84A5FAC8F5911F081D9D142C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:29:06 +0000
ROA not before: Thu 11 Sep 2025 21:54:09 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 14618
IP address blocks: 103.237.104.0/24 maxlen: 24
103.237.105.0/24 maxlen: 24
103.237.106.0/24 maxlen: 24
103.237.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl
rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C0CC, serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
Validity
Not Before: Sep 11 21:54:09 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a590a2-1de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:49:73:70:0e:57:f9:55:83:b0:ac:a5:97:c6:
1b:ec:80:8d:6e:d9:93:10:09:b2:d5:60:c4:ad:18:
75:00:1a:22:f2:9c:a0:db:bf:62:aa:5d:bb:70:16:
97:17:67:c5:2d:8a:ae:9d:9c:84:b3:13:83:7b:6f:
c3:6d:de:fd:9a:a9:10:5d:d9:9b:14:47:f6:56:79:
6b:c7:b8:6a:e9:a9:c5:a6:e0:e4:f9:af:72:85:8d:
54:df:fa:1c:ab:08:97:57:8b:90:65:80:9b:f5:28:
17:ef:d1:a6:1d:01:b3:07:31:fd:92:39:f4:5e:d2:
bf:a4:a3:9b:47:0e:9d:ae:64:b9:90:c6:b0:7a:bc:
57:08:ba:19:ce:47:59:ef:d5:27:7f:ba:a7:7c:e2:
86:02:ab:31:a3:34:c1:1d:a6:54:a8:42:4e:69:56:
9f:1c:7f:53:e6:60:da:a7:d2:fd:a3:17:5d:d1:b9:
6f:db:e9:8b:a2:7f:1e:41:54:b6:20:74:ed:c6:b8:
15:80:4d:87:f5:05:7a:d9:9e:a4:bc:3a:14:32:62:
79:85:7c:55:1b:01:5f:82:94:f7:0f:f2:b3:53:fd:
0f:bb:89:7a:27:96:76:e8:86:6c:df:34:80:a3:b7:
f9:4e:73:9a:ea:9b:36:9e:2d:a4:98:d2:f4:e6:d7:
3a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E0:38:94:FA:CD:E7:33:1B:3D:1C:15:3B:E9:80:76:7C:05:70:8C
X509v3 Authority Key Identifier:
keyid:0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/D84A5FAC8F5911F081D9D142C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.237.104.0/22
Signature Algorithm: sha256WithRSAEncryption
71:46:10:a9:2b:12:59:b8:47:d1:42:a5:d4:6c:21:91:45:c6:
06:b1:e9:c0:dd:49:2e:81:0f:2f:9e:92:76:98:7e:7f:9d:3f:
07:72:94:37:d4:3a:97:44:2d:49:dc:0e:0d:3a:42:3b:71:40:
1c:fe:97:06:59:60:c2:b6:29:e3:77:92:95:91:21:65:d1:c6:
17:48:52:92:ce:d2:e2:57:8c:da:e7:fa:0c:98:eb:fa:ae:16:
4b:82:7d:0e:49:6c:ed:21:42:c3:85:83:29:f2:22:63:bd:60:
d0:65:f3:b4:f8:a8:07:e8:f8:4d:73:e5:42:ee:52:fe:36:8f:
84:3f:58:ef:09:8c:d8:8c:fa:5a:00:8f:84:43:c7:7c:92:25:
3a:6d:1f:19:ac:7e:a6:08:4c:67:e7:82:25:90:4a:f5:90:bf:
06:50:74:d3:f4:78:96:b4:94:03:77:e0:80:49:8e:a7:95:41:
4d:d0:0c:89:ae:17:63:eb:1c:28:11:b4:9e:ef:1e:f5:45:58:
a5:bb:84:e3:42:f7:05:51:c4:b6:f5:47:76:42:03:ed:cb:32:
5a:9e:c4:f4:17:b7:cf:fe:b9:88:8f:c9:4a:2e:92:8f:32:2a:
81:f9:ec:b4:06:6a:74:fe:ad:57:6b:d6:eb:09:27:1d:92:d4:
7b:e5:3f:ba
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:06 2026 by rpki-client