
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/C6454260AA9A11E7B4776E52C4F9AE02.roa
File: C6454260AA9A11E7B4776E52C4F9AE02.roa (raw, json)
Hash identifier: QtWEc3antTd2K+91CBKQnCvQy2+FDNwa+QWniiVB1lI=
Subject key identifier: 99:5F:FC:CF:DC:2A:9A:EE:34:18:3D:A0:21:40:81:4E:6A:64:59:EF
Certificate issuer: /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
Certificate serial: 18F6
Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/C6454260AA9A11E7B4776E52C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:25:11 +0000
ROA not before: Tue 26 Aug 2025 16:55:09 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 17929
IP address blocks: 103.246.196.0/22 maxlen: 22
103.246.196.0/24 maxlen: 24
103.246.197.0/24 maxlen: 24
103.246.198.0/24 maxlen: 24
103.246.199.0/24 maxlen: 24
2407:e500::/47 maxlen: 47
2407:e500:2::/47 maxlen: 47
2407:e500:4::/47 maxlen: 47
2407:e500:6::/47 maxlen: 47
2407:e500:60::/47 maxlen: 47
2407:e500:70::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl
rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6390 (0x18f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
Validity
Not Before: Aug 26 16:55:09 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a46867-b4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a3:61:b4:d3:39:03:68:db:cf:76:cc:05:84:
81:c9:ea:60:c4:fc:77:48:cb:4d:c0:99:53:13:72:
60:ef:22:eb:37:bc:af:02:14:f7:fb:92:3a:2f:d8:
9d:cb:c0:92:b2:25:9c:b2:e6:18:08:d0:54:6c:28:
21:45:2b:06:3a:a0:48:a0:3f:42:94:14:4f:70:f4:
01:b1:dd:a8:ac:95:9a:f9:94:12:46:31:b0:8e:78:
ca:00:84:ae:dd:8e:b7:f2:a9:8c:62:f4:32:1b:fb:
ef:d4:47:61:71:8d:00:a5:c7:7b:d7:94:7b:3c:12:
6a:89:e1:1e:d4:bd:46:57:8c:f5:91:4e:1d:f6:0e:
2f:27:96:c7:dd:e5:6d:9e:b1:c4:cc:87:c2:b4:64:
f2:5d:9c:41:9a:52:37:e6:68:e1:51:1b:5e:35:c4:
76:4a:6c:2b:90:8a:45:94:90:82:1f:58:72:23:fc:
46:37:52:5d:59:19:cc:da:ae:5b:e4:92:74:e1:81:
78:27:22:f5:9d:4b:d8:f1:b2:13:62:5f:c5:62:a7:
2e:1a:5a:20:96:da:eb:b7:9c:60:af:ab:ac:19:b3:
b2:28:1c:fe:46:b4:76:ab:fe:1f:c1:42:29:7f:40:
67:d8:5b:12:73:98:ce:c2:b2:c5:14:7c:7d:e0:35:
09:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5F:FC:CF:DC:2A:9A:EE:34:18:3D:A0:21:40:81:4E:6A:64:59:EF
X509v3 Authority Key Identifier:
keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/C6454260AA9A11E7B4776E52C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.246.196.0/22
IPv6:
2407:e500::/45
2407:e500:60::/47
2407:e500:70::/47
Signature Algorithm: sha256WithRSAEncryption
0e:25:3f:cb:cc:c8:09:02:94:c3:88:81:18:58:d8:1c:4c:af:
51:84:32:85:d3:4a:b6:ef:74:22:a2:8c:38:b4:03:c8:76:11:
9a:95:15:b3:06:0e:25:72:5c:d0:e3:52:ab:be:54:36:c3:5f:
c7:e6:bb:d2:63:52:d2:94:51:ea:d5:c8:e0:9d:30:93:06:5e:
c7:d5:87:08:88:12:a4:b8:6a:f4:ed:0f:09:f0:24:91:62:b3:
be:da:a6:97:43:00:b6:a1:31:a6:df:fa:4e:3d:13:5c:93:41:
fa:fb:c2:42:a8:c7:7d:f1:ae:72:9a:e9:c2:40:4c:71:57:54:
34:7f:b3:4b:a8:9e:74:d2:e3:72:4b:10:f8:81:0d:4d:a9:23:
0a:e4:91:48:f1:f6:24:6b:f5:58:75:e9:6f:4a:27:b3:59:21:
14:9d:68:f0:36:2f:ae:d7:dc:9b:b5:6d:52:df:02:d7:56:49:
52:80:0e:63:ad:03:34:b8:60:76:e9:d0:4e:c4:11:74:10:1a:
43:3c:29:ff:51:8c:8e:ba:93:e2:6b:79:23:bf:17:d6:7d:34:
2f:20:67:4c:83:3d:c4:b8:ad:60:b1:e9:91:c3:13:dc:a6:71:
1d:98:7f:d8:d4:2a:dd:1b:96:ca:0b:53:22:65:3f:3d:4d:62:
90:31:19:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:05:49 2026 by rpki-client