
$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/C4928820F06C11EC91459B5CC4F9AE02.roa
File: C4928820F06C11EC91459B5CC4F9AE02.roa (raw, json)
Hash identifier: 7b6vVIdZ0iAg7cHVnmso62PIpM5bGjmmeaRAwNPxKXE=
Subject key identifier: 1E:E1:66:5F:CA:E6:34:B3:6E:8E:85:E5:D8:A5:03:47:88:ED:2F:59
Certificate issuer: /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
Certificate serial: 03B5
Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/C4928820F06C11EC91459B5CC4F9AE02.roa
Signing time: Mon 29 Jun 2026 01:31:04 +0000
ROA not before: Mon 29 Jun 2026 01:31:04 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 140646
IP address blocks: 103.12.36.0/22 maxlen: 22
103.12.38.0/24 maxlen: 24
103.12.39.0/24 maxlen: 24
103.189.212.0/23 maxlen: 23
103.189.212.0/24 maxlen: 24
103.189.213.0/24 maxlen: 24
2400:88e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl
rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:36:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949 (0x3b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919103F, serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
Validity
Not Before: Jun 29 01:31:04 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a41cad8-9a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:e6:65:e0:bf:7a:75:46:50:a6:10:63:48:
40:24:74:8f:60:91:cf:db:a1:0f:34:35:6f:99:ec:
6b:1f:44:a1:4a:31:db:8e:15:09:72:94:31:a5:fd:
97:16:46:d8:04:5c:4b:99:66:63:db:02:74:09:4e:
35:c9:ad:19:e7:c4:1f:7f:03:94:04:96:ef:74:a2:
af:57:a3:e1:cb:77:f3:35:b5:c6:30:af:72:da:88:
09:2c:4d:3c:67:43:55:bf:a5:22:c4:c0:c8:fa:a4:
63:d9:47:44:98:9e:39:3e:7f:52:22:1f:20:15:8d:
32:91:b1:0d:be:fb:62:c3:43:27:15:7a:b3:6c:8a:
a5:0d:77:7c:79:62:c0:cc:59:9a:3c:36:67:1d:4b:
c6:87:ab:b9:ac:0d:9e:bd:e6:1d:3a:5f:e6:03:0c:
c2:27:9d:f6:93:72:83:06:60:6e:c3:19:03:c5:89:
77:f0:8e:97:ff:07:f7:d9:62:9a:76:37:8d:a5:7f:
c1:26:cd:cb:2c:e4:7f:28:45:11:50:62:62:06:1c:
c4:43:97:04:0a:a7:22:5a:e1:f3:81:65:64:00:83:
a8:73:e2:9d:75:79:7b:6f:85:cf:c8:bc:ab:50:1e:
02:36:57:39:93:41:b4:48:57:2e:1d:1b:3c:06:da:
7b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E1:66:5F:CA:E6:34:B3:6E:8E:85:E5:D8:A5:03:47:88:ED:2F:59
X509v3 Authority Key Identifier:
keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/C4928820F06C11EC91459B5CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.12.36.0/22
103.189.212.0/23
IPv6:
2400:88e0::/32
Signature Algorithm: sha256WithRSAEncryption
53:e9:16:30:57:19:b9:1f:a8:73:15:38:ef:f1:be:e7:15:b2:
75:1f:20:2a:d2:5b:e8:4c:0e:aa:63:2a:80:2a:da:58:69:72:
99:5e:c1:bb:c9:76:c9:24:76:cb:03:e1:2a:1f:88:01:d0:7b:
44:16:e7:6e:84:06:69:39:b9:68:23:88:d1:fb:70:81:5a:d1:
5a:82:3e:04:b6:8b:94:a3:79:bf:7a:20:51:73:55:9b:81:81:
59:f0:ca:96:b1:18:8d:fe:76:25:94:a8:e6:87:98:d7:d9:52:
db:98:ea:95:4d:b2:3b:16:71:39:1f:cf:b9:8b:ae:b0:11:e3:
00:dc:b5:8c:62:e6:e1:0f:a4:e9:a3:69:2b:27:bb:f5:a1:1d:
3b:1a:a8:3a:af:a3:4b:37:09:e3:1d:71:a7:d1:3e:b9:ea:fb:
cd:60:e5:1b:95:9b:94:a5:35:4e:cf:33:ba:4b:45:69:fd:35:
8d:6f:c9:ec:26:a8:b3:e7:e7:a7:fc:21:00:36:ff:14:63:69:
0f:b2:6e:95:80:69:bf:ea:2d:6b:01:11:14:74:65:98:35:81:
47:8d:97:a8:d5:17:fb:9e:89:6d:fc:4c:ed:d0:f3:3e:cb:48:
a4:60:39:ad:37:5c:06:0e:e5:c3:b2:40:e6:85:29:02:f1:1a:
07:c0:90:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:14 2026 by rpki-client