
$ rpki-client -vvf rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/403C37D454EE11F18BF3D50DA0833773.roa
File: 403C37D454EE11F18BF3D50DA0833773.roa (raw, json)
Hash identifier: CqiZbfQsdSr5WOK24+P608ghGihUdoFddSIGup2XQa4=
Subject key identifier: A1:3E:0A:0D:0F:98:E7:5B:D7:FB:09:D6:84:F9:A6:FB:4E:7E:6A:CE
Certificate issuer: /CN=A911636A/serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445
Certificate serial: 02D2
Authority key identifier: 5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/403C37D454EE11F18BF3D50DA0833773.roa
Signing time: Thu 21 May 2026 08:48:52 +0000
ROA not before: Thu 21 May 2026 08:48:52 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 150434
IP address blocks: 103.40.156.0/23 maxlen: 24
2400:c360::/32 maxlen: 32
2400:c360::/36 maxlen: 36
2400:c360:1000::/36 maxlen: 36
2400:c360:2000::/36 maxlen: 36
2400:c360:3000::/36 maxlen: 36
2400:c360:4000::/36 maxlen: 36
2400:c360:5000::/36 maxlen: 36
2400:c360:6000::/36 maxlen: 36
2400:c360:7000::/36 maxlen: 36
2400:c360:8000::/36 maxlen: 36
2400:c360:9000::/36 maxlen: 36
2400:c360:a000::/36 maxlen: 36
2400:c360:b000::/36 maxlen: 36
2400:c360:c000::/36 maxlen: 36
2400:c360:d000::/36 maxlen: 36
2400:c360:e000::/36 maxlen: 36
2400:c360:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl
rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:37:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722 (0x2d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911636A, serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445
Validity
Not Before: May 21 08:48:52 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a0ec6f4-d65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:40:6f:5b:76:03:6b:b0:23:81:ac:41:bd:ec:
1c:7c:c4:14:99:e6:9a:ac:3a:84:5b:7a:4a:be:59:
60:50:41:6b:3c:a9:37:cf:cd:70:d1:8a:22:cb:f5:
92:85:41:ea:c1:d1:b1:2d:33:80:a2:5a:ce:46:40:
7a:e7:45:15:dc:d2:73:80:bc:45:f3:0f:d0:c3:5a:
ba:ee:62:59:06:19:30:f9:40:ff:9e:3d:41:26:e6:
74:e9:4d:02:99:7f:1d:59:b0:f4:e6:19:23:6c:b6:
b8:26:2d:72:76:46:03:79:2f:5c:f3:d3:4d:a2:f8:
a8:a7:78:73:e2:b9:d4:3d:ac:f7:9a:67:72:df:46:
bf:29:57:25:90:9c:70:1a:73:02:1f:77:2d:72:80:
9d:ca:47:f6:3a:0e:31:56:27:c1:39:eb:5d:26:3e:
e5:f2:d0:c7:21:cc:70:2d:9c:9c:65:ca:c9:25:db:
01:ba:67:c5:03:c3:30:db:64:19:3c:f0:cc:60:d0:
1e:1e:b7:12:b5:b3:84:32:a3:cf:62:4e:9a:e5:9a:
3e:f8:86:77:d8:93:26:2a:ca:64:34:fc:06:2d:78:
3f:8c:91:b6:86:6b:49:1d:47:d2:03:23:03:f7:7e:
b5:7a:41:f7:94:73:e2:1c:49:80:a7:76:d2:4e:0a:
78:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3E:0A:0D:0F:98:E7:5B:D7:FB:09:D6:84:F9:A6:FB:4E:7E:6A:CE
X509v3 Authority Key Identifier:
keyid:5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/403C37D454EE11F18BF3D50DA0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.40.156.0/23
IPv6:
2400:c360::/32
Signature Algorithm: sha256WithRSAEncryption
3c:52:b5:93:89:33:96:d1:8f:07:40:5d:18:ac:44:87:56:c3:
82:79:33:1a:c4:cf:91:fd:9b:0c:23:ca:fe:d5:c0:af:85:57:
69:d1:f6:52:ee:bd:47:46:b0:76:5e:61:74:49:85:93:b0:f1:
9c:a0:70:d5:85:88:1d:a0:c6:70:b6:3f:e1:6b:46:38:75:be:
43:0f:a4:f3:4c:44:59:31:ac:eb:14:63:67:89:68:a0:eb:6b:
9b:3e:db:ef:20:92:25:df:7a:a7:3a:98:04:7b:8b:23:44:ae:
46:2b:2b:cd:9e:6c:76:dd:4f:27:7d:9e:b7:3f:d1:d3:dc:2b:
96:90:4a:7a:4a:ac:dc:13:a3:33:3e:28:b9:93:b2:16:31:3a:
56:b2:61:d1:93:a9:4b:98:a9:23:f2:93:b4:1c:c5:a0:61:e6:
8c:f2:0f:68:3e:e1:d5:cf:86:87:77:4f:65:51:cd:ca:b7:43:
70:0d:5c:30:47:c8:c0:87:92:6d:04:ed:67:28:b8:be:a3:26:
67:de:1e:4f:15:09:81:4b:15:63:93:a4:77:da:39:d9:ee:21:
cd:6f:bd:2b:ae:64:e1:8a:d8:1f:5e:f7:82:43:fa:c3:f4:d7:
2d:d4:42:4a:ff:84:63:f6:7e:42:59:32:fe:0d:c5:23:27:90:
08:c8:e0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:07:28 2026 by rpki-client