
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/A63A30E2BCDE11F1A1C90DA43811F970.roa
File: A63A30E2BCDE11F1A1C90DA43811F970.roa (raw, json)
Hash identifier: TdQiKxCwTf9zbHqCanA43wfg0cbmWFRK+Gith3Kt65w=
Subject key identifier: E7:8D:D9:A8:88:99:45:6D:AC:7D:D6:2F:B7:76:CA:4E:6A:73:89:20
Certificate issuer: /CN=A919C776/serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A
Certificate serial: 01F2
Authority key identifier: D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/A63A30E2BCDE11F1A1C90DA43811F970.roa
Signing time: Sat 03 Oct 2026 10:01:24 +0000
ROA not before: Sat 03 Oct 2026 10:01:24 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 152723
IP address blocks: 103.54.108.0/24 maxlen: 24
103.54.109.0/24 maxlen: 24
2401:d160::/32 maxlen: 32
2401:d160::/36 maxlen: 36
2401:d160:1000::/36 maxlen: 36
2401:d160:2000::/36 maxlen: 36
2401:d160:3000::/36 maxlen: 36
2401:d160:4000::/36 maxlen: 36
2401:d160:5000::/36 maxlen: 36
2401:d160:6000::/36 maxlen: 36
2401:d160:7000::/36 maxlen: 36
2401:d160:8000::/36 maxlen: 36
2401:d160:9000::/36 maxlen: 36
2401:d160:a000::/36 maxlen: 36
2401:d160:b000::/36 maxlen: 36
2401:d160:c000::/36 maxlen: 36
2401:d160:d000::/36 maxlen: 36
2401:d160:e000::/36 maxlen: 36
2401:d160:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl
rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 04:14:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C776, serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A
Validity
Not Before: Oct 3 10:01:24 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6ac0d274-52f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:b1:29:6e:47:15:c0:2b:ac:06:1b:8f:1c:
2f:f1:92:78:10:8f:a4:09:66:25:0a:44:8d:80:58:
14:e8:78:53:df:58:34:a0:9d:3b:8f:cd:0e:c9:8f:
7c:29:17:be:bf:c5:6e:14:5f:f2:7a:2b:0e:26:ba:
40:b7:ae:3e:57:68:f1:f7:87:50:f6:82:01:3d:20:
e1:b2:25:76:c2:21:e9:18:77:1f:88:9f:8a:57:26:
23:a7:a3:a4:99:56:6f:b3:f3:5e:4e:2b:23:0e:0b:
aa:0e:0a:b1:cb:c7:14:52:ac:88:56:17:85:df:02:
2a:f3:60:b5:c3:22:0a:21:2e:fc:26:a7:e7:39:3c:
1e:43:e6:6a:ec:30:a8:28:62:6c:12:b1:f6:fb:53:
e0:e3:1d:b3:92:fb:e8:9b:50:d4:87:6c:7d:c5:9d:
20:97:6e:dd:fc:60:60:8f:64:8f:bc:14:dd:44:8f:
45:5c:8b:b9:d4:8e:f1:91:44:86:49:9d:92:83:10:
b0:fc:47:a2:b8:34:91:aa:0e:e1:85:0a:17:4a:63:
52:0c:9f:f0:c1:b0:9b:0d:b9:04:0a:fe:39:b7:de:
c9:c2:4c:d0:2c:18:7a:db:56:5a:0d:61:a5:e3:d7:
32:f3:ce:10:27:28:47:45:e0:62:4f:7e:0b:34:73:
92:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8D:D9:A8:88:99:45:6D:AC:7D:D6:2F:B7:76:CA:4E:6A:73:89:20
X509v3 Authority Key Identifier:
keyid:D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/A63A30E2BCDE11F1A1C90DA43811F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.54.108.0/23
IPv6:
2401:d160::/32
Signature Algorithm: sha256WithRSAEncryption
a5:7f:f9:d1:13:9e:1d:48:7a:ad:7f:21:76:65:47:b4:9f:6d:
ab:9c:d4:7b:88:fd:73:cc:36:f2:71:69:1f:a1:56:83:e8:81:
38:03:3d:92:42:c0:4b:ce:c2:5d:39:d0:77:4e:35:46:bf:24:
cf:2f:94:0c:5a:23:e7:d3:71:f9:54:23:1b:72:37:6d:a7:be:
84:d8:43:d3:cf:ac:81:14:39:32:2c:fe:77:23:0c:f4:c2:d7:
90:50:c0:b4:77:a6:b3:ae:0e:ae:d6:cc:7a:33:92:49:e6:01:
74:8e:0e:15:4a:da:b3:5d:5a:86:c3:b5:14:7b:67:80:6a:7b:
36:83:c4:4e:09:8a:27:5f:e8:25:4a:3e:db:45:3d:e8:22:ac:
7e:ac:56:e8:1d:f5:ef:c4:92:d0:0a:73:ed:eb:86:67:0b:00:
e6:d5:95:fa:23:ce:01:0e:91:7b:21:7c:bb:bb:13:68:ed:36:
cc:c6:d0:e0:90:0d:e8:67:d4:d0:d9:66:8b:c6:79:43:29:a3:
47:00:30:07:97:38:f5:4b:26:05:56:86:ed:f6:e0:00:72:5b:
5d:ae:33:f4:52:ac:bc:be:05:b9:c1:fd:12:8a:f4:ca:a8:d0:
f8:19:6a:5d:d5:c1:d4:bb:ea:3e:49:54:fc:1a:88:cb:b3:05:
da:07:24:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 22:13:18 2026 by rpki-client