
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FDC103263F0711ED9328213FC4F9AE02.roa
File: FDC103263F0711ED9328213FC4F9AE02.roa (raw, json)
Hash identifier: eK6oMzXnCzX61llfDv3rOSRc3GeeMLJPdB9dGVhettg=
Subject key identifier: 8C:E2:1D:26:89:2C:24:43:21:19:48:A8:DC:F9:CD:B6:3A:D6:AC:22
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DC2F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FDC103263F0711ED9328213FC4F9AE02.roa
Signing time: Fri 13 Mar 2026 11:40:42 +0000
ROA not before: Fri 13 Mar 2026 11:40:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149564
IP address blocks: 103.117.176.0/24 maxlen: 24
103.117.177.0/24 maxlen: 24
103.117.178.0/24 maxlen: 24
103.117.179.0/24 maxlen: 24
103.187.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 19:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56367 (0xdc2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 13 11:40:42 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69b3f7ba-e7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a5:69:7c:44:99:94:96:c4:b4:96:90:31:eb:
5e:5c:bc:0f:31:ab:13:6f:87:cb:01:e0:d0:e3:10:
c7:57:15:24:30:32:85:fe:fb:c9:3d:6b:b7:0d:b7:
ba:9c:93:a5:c4:18:dd:43:af:54:e8:9d:4f:22:93:
0d:9f:63:18:ec:54:c2:b1:ab:c9:ea:d2:b9:8d:82:
0b:f0:31:9e:13:66:cb:f6:2e:4c:91:55:bd:35:49:
3e:a8:1f:86:5f:f4:54:bb:b2:67:3a:fd:cf:a1:0c:
63:66:92:ea:02:ed:f4:f8:91:a7:83:66:c8:bb:ec:
62:86:ec:d3:a5:eb:37:ed:da:c4:6b:dd:46:42:c4:
7b:d3:c5:9e:45:e9:2f:07:0b:1a:5f:5a:16:2f:ae:
b7:38:43:6c:c2:b8:22:3d:2c:8f:3c:b3:1f:67:dc:
5a:99:c1:60:cd:10:c0:98:a6:b9:e5:94:be:09:ff:
ad:cd:28:f0:85:3c:71:d0:cf:59:3f:d0:24:c9:14:
67:32:df:9e:bc:75:77:61:1a:dc:19:21:d9:4f:ea:
49:48:71:3f:00:e7:0a:89:b3:51:d9:61:1a:e9:58:
2d:18:d9:b3:ab:8a:dd:5b:27:d4:01:8a:72:bb:79:
15:36:da:24:48:b1:63:11:50:e8:a1:ff:a4:a4:20:
92:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E2:1D:26:89:2C:24:43:21:19:48:A8:DC:F9:CD:B6:3A:D6:AC:22
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FDC103263F0711ED9328213FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.117.176.0/22
103.187.20.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:0f:3c:ef:77:74:27:3b:6d:d1:ca:25:04:22:5a:5d:a3:0f:
c7:ed:d0:9c:31:2b:04:98:55:38:68:44:21:3b:57:c9:ba:4b:
e6:a2:0a:89:ac:a5:d1:b4:70:19:c8:e4:d1:3a:24:25:44:b0:
7e:47:a6:b9:20:e3:76:49:b7:08:82:7a:28:e7:12:f0:f3:fc:
b5:c4:e1:89:ea:ee:89:31:80:c5:00:63:e0:b3:2e:a4:ee:5e:
a4:7e:82:3f:15:19:0d:de:61:ed:ad:1f:49:a6:7c:09:ed:5e:
49:88:79:85:7c:00:d8:e0:3d:98:16:52:58:1a:4b:ae:ee:c7:
46:49:d5:a2:2b:75:bf:63:de:ae:af:e4:84:fa:05:9f:3d:8e:
da:d2:5d:7b:63:c7:e8:f9:49:4e:42:61:0e:ab:70:59:b4:d8:
88:6f:36:04:fb:45:58:d5:99:2f:98:e1:6f:d6:db:4a:78:cf:
9c:e2:0b:59:bf:e8:57:da:5a:20:6e:33:c8:2c:03:4c:8a:22:
8c:75:d5:22:cc:57:6d:33:b4:b1:61:b6:7a:3c:40:76:ca:c9:
5c:2c:e0:22:52:63:20:9a:86:78:4b:5f:85:b8:7c:94:a0:bf:
28:52:df:98:6e:5f:13:5b:31:e9:c8:b7:dd:2b:45:f0:4a:ef:
a4:2a:b4:9f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDANwvMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDMxMzExNDA0MloXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjliM2Y3YmEtZTdiYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANOlaXxEmZSWxLSWkDHrXly8DzGrE2+HywHg0OMQx1cVJDAyhf77yT1rtw23
upyTpcQY3UOvVOidTyKTDZ9jGOxUwrGryerSuY2CC/AxnhNmy/YuTJFVvTVJPqgf
hl/0VLuyZzr9z6EMY2aS6gLt9PiRp4NmyLvsYobs06XrN+3axGvdRkLEe9PFnkXp
LwcLGl9aFi+utzhDbMK4Ij0sjzyzH2fcWpnBYM0QwJimueWUvgn/rc0o8IU8cdDP
WT/QJMkUZzLfnrx1d2Ea3Bkh2U/qSUhxPwDnComzUdlhGulYLRjZs6uK3Vsn1AGK
crt5FTbaJEixYxFQ6KH/pKQgkj8CAwEAAaOCAmYwggJiMB0GA1UdDgQWBBSM4h0m
iSwkQyEZSKjc+c22OtasIjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0ZEQzEwMzI2
M0YwNzExRUQ5MzI4MjEzRkM0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAmd1sAMEAWe7FDANBgkqhkiG9w0BAQsFAAOCAQEAXg8873d0Jztt
0colBCJaXaMPx+3QnDErBJhVOGhEITtXybpL5qIKiayl0bRwGcjk0TokJUSwfkem
uSDjdkm3CIJ6KOcS8PP8tcThieruiTGAxQBj4LMupO5epH6CPxUZDd5h7a0fSaZ8
Ce1eSYh5hXwA2OA9mBZSWBpLru7HRknVoit1v2Perq/khPoFnz2O2tJde2PH6PlJ
TkJhDqtwWbTYiG82BPtFWNWZL5jhb9bbSnjPnOILWb/oV9paIG4zyCwDTIoijHXV
IsxXbTO0sWG2ejxAdsrJXCzgIlJjIJqGeEtfhbh8lKC/KFLfmG5fE1sx6ci33StF
8ErvpCq0nw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:38:16 2026 by rpki-client