
$ rpki-client -vvf rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/9D48E6FA74A311F1A9A5878E8DA30FBC.roa
File: 9D48E6FA74A311F1A9A5878E8DA30FBC.roa (raw, json)
Hash identifier: xkPtVPMC8LwP0xmr85yW63wuZ3xQc7W5TjWBXAJU6Mw=
Subject key identifier: 47:EE:36:CE:51:1F:C3:7D:4C:A4:68:D6:97:CC:E1:E5:F1:B3:CA:77
Certificate issuer: /CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694
Certificate serial: 0319
Authority key identifier: A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/9D48E6FA74A311F1A9A5878E8DA30FBC.roa
Signing time: Wed 01 Jul 2026 02:28:53 +0000
ROA not before: Wed 01 Jul 2026 02:28:53 +0000
ROA not after: Fri 30 Oct 2026 00:00:00 +0000
asID: 16509
IP address blocks: 103.186.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl
rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 793 (0x319)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918016E, serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694
Validity
Not Before: Jul 1 02:28:53 2026 GMT
Not After : Oct 30 00:00:00 2026 GMT
Subject: CN=6a447b64-73ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bc:29:6f:cc:c7:36:2d:81:38:24:51:05:35:
7c:da:ec:db:7e:b3:48:9f:cd:25:a5:80:77:76:fd:
6a:3a:9a:ce:5d:89:22:e7:7c:28:be:4f:16:16:00:
72:89:8e:82:14:7f:b6:a6:1f:e2:6d:a1:32:ea:2d:
6c:66:cf:cf:5e:86:87:46:cd:95:48:05:c1:64:a6:
2c:56:dd:84:ad:8c:61:f9:e9:73:3b:f0:17:25:05:
3b:a2:75:83:27:7d:60:72:5e:03:e3:19:93:f3:7d:
7e:61:54:41:2d:37:6d:3f:5b:6c:ee:a5:75:d1:8b:
4b:bd:ab:1d:82:2d:9a:93:cb:d0:74:47:98:35:3f:
2c:62:d8:aa:05:e4:9b:37:6a:0d:05:21:4e:31:06:
47:38:0e:f9:e1:05:ae:20:cb:1b:66:fe:40:70:1f:
e7:78:1a:c1:f1:5b:8b:02:f0:56:e0:a8:2f:1e:51:
67:dc:80:e9:96:76:4e:bb:a5:b5:61:60:79:e4:c2:
c6:a4:02:5c:1e:d2:1a:45:cc:23:fd:8b:d7:f3:c8:
aa:e0:15:d1:0a:01:ef:99:b0:12:62:ba:86:cb:6f:
d2:3a:5c:65:ec:4f:da:99:d2:97:ab:06:47:75:a7:
7c:4e:97:db:f0:30:9c:03:e6:8b:34:4d:7a:3c:bb:
b1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EE:36:CE:51:1F:C3:7D:4C:A4:68:D6:97:CC:E1:E5:F1:B3:CA:77
X509v3 Authority Key Identifier:
keyid:A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/9D48E6FA74A311F1A9A5878E8DA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.186.104.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:a4:bf:f3:9c:ae:1f:e1:15:b7:93:e6:7c:88:15:b9:c7:4e:
7b:26:d8:02:4e:31:a2:bf:9b:90:ff:b9:e0:0b:d0:b1:1f:5b:
fd:5e:35:a1:83:bc:ab:75:92:8c:ba:a8:0e:8e:52:8f:0e:b5:
f1:b1:fb:56:20:69:d6:96:db:64:74:e2:23:fa:0b:14:a3:a0:
a4:39:02:28:be:d4:34:0a:f5:28:ee:cc:68:be:89:a6:5b:ef:
fe:26:7f:d8:aa:7e:e5:11:b0:09:f9:e3:7f:b1:cc:75:8f:a3:
d3:0a:b0:2b:13:8c:18:8b:4d:02:8d:ef:34:2e:73:42:c6:d0:
7d:0f:07:29:d4:ce:fb:f6:d6:d4:1c:fa:12:e0:b5:64:1d:ef:
ac:34:89:96:f8:ed:28:29:7e:ac:13:32:d0:31:8c:93:65:91:
9d:a1:de:f6:dc:cc:7c:b7:f4:d6:ce:1d:9f:fc:6f:c2:99:b2:
a7:3f:b8:81:7c:42:d8:16:69:d3:af:3d:c2:dc:08:ac:d2:be:
1a:14:fa:d1:ae:99:a9:2b:95:0f:33:2e:6d:e1:a8:e0:78:34:
ac:2c:eb:2e:d1:57:20:45:a7:23:bd:9c:6f:71:bc:5c:69:8f:
08:16:03:c5:eb:42:7f:57:5c:df:75:ef:c4:83:ec:c4:fa:2c:
42:ec:45:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:20:39 2026 by rpki-client