
$ rpki-client -vvf rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/D8D89576CF2F11EC8378951DC4F9AE02.roa
File: D8D89576CF2F11EC8378951DC4F9AE02.roa (raw, json)
Hash identifier: eZ7JK+aGAs/opiDztnKqy+GMiThhAmSDYCWU0M8qRG8=
Subject key identifier: 91:35:D4:F2:0A:85:AC:16:50:50:00:46:B4:FF:7B:FE:77:91:6A:A7
Certificate issuer: /CN=A918769B/serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
Certificate serial: 03EA
Authority key identifier: 24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/D8D89576CF2F11EC8378951DC4F9AE02.roa
Signing time: Wed 03 Jun 2026 03:31:10 +0000
ROA not before: Wed 03 Jun 2026 03:31:10 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 149811
IP address blocks: 103.186.242.0/24 maxlen: 24
103.186.243.0/24 maxlen: 24
2400:7660:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl
rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1002 (0x3ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918769B, serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
Validity
Not Before: Jun 3 03:31:10 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a1f9ffe-461d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7a:c8:3b:d4:02:e1:ba:35:5f:bf:5c:bf:2c:
72:34:ab:77:48:87:7e:9b:86:80:96:02:9d:e9:e9:
80:80:99:32:47:a9:8a:5d:94:73:ef:aa:c9:a9:5e:
70:32:a6:d3:50:4f:69:24:d5:12:20:94:79:27:b2:
b1:54:2e:70:08:ba:9f:c2:90:9d:16:ea:1f:64:78:
73:28:18:ad:0f:91:ae:7a:f2:12:83:8c:1f:67:45:
77:ad:2e:dd:07:da:75:dc:fb:bb:0c:55:fa:82:20:
ae:bd:3b:68:ec:36:a2:70:80:98:c1:cb:82:c4:59:
6c:2c:61:19:31:71:1d:be:28:e3:0f:d7:2f:f8:0f:
dc:25:81:37:08:77:09:f3:59:73:72:b0:b3:81:77:
c0:c4:e7:0b:9a:f3:bb:03:ce:c5:f6:23:b3:d6:3e:
41:b7:d3:68:2e:ec:0c:13:c7:83:ee:f8:33:fd:ee:
81:d2:3d:33:02:6c:a2:c2:09:db:7f:3c:1a:b5:39:
b4:2b:3c:32:25:c0:33:79:ec:4b:39:a8:c3:7d:76:
77:f5:b7:e2:39:fe:c9:b0:93:bc:8b:8c:ef:a0:ce:
f1:19:ff:d9:ac:3f:5e:ea:09:be:cd:c3:4b:83:97:
9f:7d:37:61:67:fb:e5:58:40:59:b0:3a:e1:d1:e7:
04:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:35:D4:F2:0A:85:AC:16:50:50:00:46:B4:FF:7B:FE:77:91:6A:A7
X509v3 Authority Key Identifier:
keyid:24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/D8D89576CF2F11EC8378951DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.186.242.0/23
IPv6:
2400:7660:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
00:a6:e2:3f:6f:39:4c:7c:e8:77:75:7a:eb:37:7c:9a:a8:ee:
bf:ff:05:7a:3a:35:da:5e:3f:87:7b:fb:a0:e5:f2:d2:bc:84:
f4:ed:11:5c:65:d8:68:9f:7a:6d:9e:dc:62:5b:af:46:fc:e6:
0e:69:12:b4:4b:d3:44:82:7c:1f:ea:f7:1a:0b:25:d8:c2:ee:
29:3e:6c:06:06:57:ca:fa:d3:5b:b9:08:55:26:50:50:fe:9b:
ff:26:f9:50:c0:b5:9b:53:3a:1a:50:21:1e:e9:b5:30:e5:55:
7f:8b:63:80:17:1e:46:0e:30:49:48:e4:45:54:42:15:2a:05:
a6:0e:8d:d1:c2:cd:82:30:e8:74:0a:a0:de:22:1f:ee:9f:9b:
48:a5:ef:ff:b6:e4:5b:e8:66:a3:85:f5:57:9f:6d:11:f2:cc:
6e:5d:8c:86:9f:d6:37:09:d6:e6:f7:54:a7:82:ad:da:5f:c7:
96:56:64:f4:c7:ac:30:42:71:0b:94:64:ba:68:de:37:f7:20:
c8:1c:cf:a0:9d:08:15:da:1b:e1:cb:22:52:84:65:db:53:0d:
c1:c7:b2:60:07:39:fd:b6:80:39:b1:9b:e5:8d:ed:8e:de:3d:
97:59:4a:89:4a:44:af:8d:af:e0:1b:05:2a:47:dc:05:23:aa:
6d:52:83:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:12 2026 by rpki-client