
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/78AFDDB84A8211EB8760D667C4F9AE02.roa
File: 78AFDDB84A8211EB8760D667C4F9AE02.roa (raw, json)
Hash identifier: 4/IcjjLj330SqD/Q7AAdU1kh1KBOFfWc4SaKg7w4SQI=
Subject key identifier: 9C:CF:58:B5:DC:03:2F:8C:BD:06:68:D3:68:CB:62:D4:7E:81:9A:27
Certificate issuer: /CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Certificate serial: 0886
Authority key identifier: CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/78AFDDB84A8211EB8760D667C4F9AE02.roa
Signing time: Wed 16 Sep 2026 21:41:33 +0000
ROA not before: Wed 16 Sep 2026 21:41:33 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 16509
IP address blocks: 103.155.132.0/23 maxlen: 23
103.155.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 21:10:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2182 (0x886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918054D, serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Validity
Not Before: Sep 16 21:41:33 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aab0d0d-cff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:32:08:c8:59:e9:85:11:40:3f:2f:ec:e2:
20:a6:15:64:f2:92:7d:55:83:f2:ee:33:04:b0:07:
17:89:95:86:a0:ba:e0:f3:65:05:7c:e5:a9:d8:14:
d2:ea:ac:1b:2d:e0:ff:a6:0b:fd:59:b9:bc:49:02:
8e:0f:68:94:da:d0:f2:89:33:3b:7f:e2:34:f8:25:
f1:eb:3f:38:51:64:84:17:40:b8:a3:7d:fe:39:c4:
bf:55:bd:d5:1c:b9:e1:66:3c:0d:9e:6c:ab:ed:0d:
be:c9:ad:dd:86:3c:60:23:b9:f9:3e:f9:da:42:b6:
70:09:be:0c:a8:e3:11:c9:5e:ba:bd:b2:a1:75:88:
6a:b6:77:c8:72:44:13:10:61:1f:af:45:87:7b:16:
4d:5e:2d:c7:52:58:50:32:8c:d6:e1:90:e8:aa:2b:
11:78:c5:3a:d2:ce:ff:f1:6a:2b:48:d2:4f:59:bd:
79:57:c5:3d:57:f5:84:26:e0:09:58:2c:41:e9:34:
06:8c:35:ee:2c:37:d2:d3:37:19:ff:64:13:e1:5d:
4f:a1:2d:e4:1e:61:df:c5:ce:b3:dd:67:cf:78:87:
11:38:9c:c4:c6:81:c1:8c:b3:50:82:33:6c:c8:44:
65:e7:3e:39:53:0f:96:5d:04:52:98:e4:19:39:c1:
af:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CF:58:B5:DC:03:2F:8C:BD:06:68:D3:68:CB:62:D4:7E:81:9A:27
X509v3 Authority Key Identifier:
keyid:CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/78AFDDB84A8211EB8760D667C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.155.132.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:7f:20:5e:94:f8:60:41:2b:c8:62:68:dd:7e:3f:a7:63:a7:
60:a1:e3:16:fd:a6:d4:c3:63:ee:67:5a:75:4e:2d:8f:56:5b:
f9:8c:56:a9:59:c5:6e:35:2f:d1:02:40:ce:0c:97:98:a1:ca:
6f:7d:ac:53:42:77:a9:91:01:8b:db:f4:47:4e:3f:d7:9a:32:
cb:81:68:a3:d3:42:73:d3:7b:f0:49:76:1e:dc:2c:43:7b:51:
83:96:72:eb:60:ed:6d:21:66:8e:d7:05:2a:af:ab:c6:0e:9b:
1b:13:ea:22:1f:e1:05:27:2e:64:a1:48:e0:82:d6:b0:44:c5:
7d:14:59:d0:71:cf:62:0c:c6:ac:f5:e9:9c:b8:5f:fc:7c:e3:
a0:e0:97:46:e7:f5:db:6a:e4:84:cf:a2:f4:36:43:08:20:12:
4e:5d:e9:0e:1e:bb:b3:cc:80:0f:3a:ff:9f:b0:92:50:ba:38:
e8:0e:2b:3b:65:e9:28:2a:59:e8:54:fc:eb:10:b9:99:7f:14:
b4:7f:96:4c:2f:64:20:91:63:10:fc:ef:ef:41:18:bf:9c:b5:
c4:61:f5:0c:24:2f:fa:1c:8a:4d:dd:8d:bd:7b:6d:0c:08:a3:
f5:06:ce:d5:4b:d9:30:c1:52:b7:cb:be:ed:d7:4b:1f:89:70:
38:f9:3e:69
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA1NEQxMTAvBgNVBAUTKENEODI3QkY5NjQ1ODM2MUY2MDk4QjIyRjc1ODU0OEQ3
RUFFRkExNjgwHhcNMjYwOTE2MjE0MTMzWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWFiMGQwZC1jZmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvUMyCMhZ6YURQD8v7OIgphVk8pJ9VYPy7jMEsAcXiZWGoLrg82UFfOWp2BTS
6qwbLeD/pgv9Wbm8SQKOD2iU2tDyiTM7f+I0+CXx6z84UWSEF0C4o33+OcS/Vb3V
HLnhZjwNnmyr7Q2+ya3dhjxgI7n5PvnaQrZwCb4MqOMRyV66vbKhdYhqtnfIckQT
EGEfr0WHexZNXi3HUlhQMozW4ZDoqisReMU60s7/8WorSNJPWb15V8U9V/WEJuAJ
WCxB6TQGjDXuLDfS0zcZ/2QT4V1PoS3kHmHfxc6z3WfPeIcROJzExoHBjLNQgjNs
yERl5z45Uw+WXQRSmOQZOcGvYQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJzPWLXc
Ay+MvQZo02jLYtR+gZonMB8GA1UdIwQYMBaAFM2Ce/lkWDYfYJiyL3WFSNfq76Fo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU0RC82RTA4MjNCMDE5
OEMxMUVCQUZDQjk0NTlDNEY5QUUwMi96WUo3LVdSWU5oOWdtTEl2ZFlWSTEtcnZv
V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pZSjctV1JZTmg5Z21MSXZkWVZJMS1ydm9XZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODA1NEQvNkUwODIzQjAxOThDMTFFQkFGQ0I5NDU5QzRGOUFFMDIvNzhBRkREQjg0
QTgyMTFFQjg3NjBENjY3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5uEMA0GCSqGSIb3DQEBCwUAA4IBAQAtfyBelPhgQSvIYmjdfj+n
Y6dgoeMW/abUw2PuZ1p1Ti2PVlv5jFapWcVuNS/RAkDODJeYocpvfaxTQnepkQGL
2/RHTj/XmjLLgWij00Jz03vwSXYe3CxDe1GDlnLrYO1tIWaO1wUqr6vGDpsbE+oi
H+EFJy5koUjggtawRMV9FFnQcc9iDMas9emcuF/8fOOg4JdG5/XbauSEz6L0NkMI
IBJOXekOHruzzIAPOv+fsJJQujjoDis7ZekoKlnoVPzrELmZfxS0f5ZML2QgkWMQ
/O/vQRi/nLXEYfUMJC/6HIpN3Y29e20MCKP1Bs7VS9kwwVK3y77t10sfiXA4+T5p
-----END CERTIFICATE-----
Generated at Sun Oct 4 00:49:20 2026 by rpki-client