
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/2986182E32F811F1836DC44EA9833773.roa
File: 2986182E32F811F1836DC44EA9833773.roa (raw, json)
Hash identifier: LkAqBvJKZE3ibM9cU9n84aMldsrAuTSQuzb/c6yXmNs=
Subject key identifier: 9A:DD:A1:B9:D6:55:15:FF:BE:A9:D2:A8:D1:85:13:E7:C9:86:C0:6F
Certificate issuer: /CN=A916ED7C/serialNumber=655B0426EA34B19746EC1D3BDCB1B37674DFA1EC
Certificate serial: 0447
Authority key identifier: 65:5B:04:26:EA:34:B1:97:46:EC:1D:3B:DC:B1:B3:76:74:DF:A1:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/2986182E32F811F1836DC44EA9833773.roa
Signing time: Wed 08 Apr 2026 03:08:05 +0000
ROA not before: Wed 08 Apr 2026 03:08:05 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 134687
IP address blocks: 103.136.108.0/24 maxlen: 24
103.136.110.0/24 maxlen: 24
2404:9140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.crl
rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:10:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1095 (0x447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ED7C, serialNumber=655B0426EA34B19746EC1D3BDCB1B37674DFA1EC
Validity
Not Before: Apr 8 03:08:05 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69d5c695-f7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:c0:f4:fc:fd:40:3e:97:a5:62:7c:5e:70:
7e:3f:84:13:90:a4:6a:e2:83:a6:1b:d1:71:5f:5e:
a9:ea:a7:fb:98:8e:ee:82:30:65:83:0d:44:c7:f4:
dd:67:4f:bb:d4:ea:8e:01:5a:50:6d:03:0f:56:e4:
7b:6d:b8:02:2f:2e:a6:2d:b5:05:7b:41:68:3a:17:
b8:2d:ae:90:c8:5b:c5:6b:12:8b:c0:91:77:cb:0a:
00:28:9a:89:be:0b:4d:fa:d4:dc:7c:8f:ce:f3:53:
5b:3f:5d:30:66:9c:01:87:ec:b1:6f:93:f7:4d:1d:
fd:51:c2:f4:e3:c7:d7:fc:cc:02:42:cb:db:4d:f8:
40:20:71:bc:9b:a4:16:5a:2a:cc:7e:a9:e8:eb:27:
20:7f:47:fd:e4:38:bd:8f:7c:0a:5b:86:25:90:d8:
17:4f:c4:f1:46:17:5d:59:b2:e4:ae:97:00:2b:c2:
6f:e0:f7:a5:4b:5b:6a:73:a1:42:57:af:07:37:8c:
3b:2b:32:bb:5e:06:e4:80:7c:c2:bb:a6:00:25:5a:
dd:7e:46:7a:63:f4:76:15:3d:a8:25:64:1e:c8:0e:
2e:77:27:17:d9:e4:53:1d:0a:74:4e:59:a9:7d:62:
6c:7b:54:ba:9c:69:3e:53:1b:d6:19:ec:17:c6:bd:
05:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DD:A1:B9:D6:55:15:FF:BE:A9:D2:A8:D1:85:13:E7:C9:86:C0:6F
X509v3 Authority Key Identifier:
keyid:65:5B:04:26:EA:34:B1:97:46:EC:1D:3B:DC:B1:B3:76:74:DF:A1:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/2986182E32F811F1836DC44EA9833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.136.108.0/24
103.136.110.0/24
IPv6:
2404:9140::/48
Signature Algorithm: sha256WithRSAEncryption
09:7e:85:80:83:f0:43:7e:5a:74:92:3e:82:16:b0:97:12:6e:
ac:28:a8:26:8e:04:49:64:aa:07:a1:1c:ab:7e:91:a2:6b:a9:
d1:cd:1b:83:4f:86:4b:ca:d0:02:25:0f:a2:27:95:be:0a:61:
cd:3c:34:30:39:74:33:ad:b5:30:71:29:5e:38:4f:0f:53:8a:
e5:50:38:84:16:a2:6a:e5:c0:1a:0f:79:3a:dd:e3:68:1c:f1:
de:b3:33:1a:a5:73:ef:64:5c:36:3c:c4:72:8a:65:f2:b5:9f:
a1:45:16:fe:2f:97:9f:59:28:97:78:c3:05:d5:61:37:b6:27:
55:16:48:7c:45:6d:c3:23:18:41:f1:48:24:fb:6f:09:01:e5:
82:30:0a:87:a8:f1:73:6e:cb:47:cc:2d:e3:3a:89:8e:9d:3a:
d0:78:dd:41:e2:4b:b0:5f:bf:b7:1c:26:b2:25:94:f2:d3:0d:
cc:ea:ac:4d:b3:36:63:32:7b:89:b8:93:04:80:1a:ed:9f:a9:
ea:03:71:7c:40:ac:a9:ae:76:e2:65:71:97:e3:69:84:a4:84:
98:cf:74:78:5e:08:20:af:ce:6e:ba:83:ef:8a:6e:82:6d:5a:
3b:18:9d:85:78:d0:d0:13:be:43:00:8c:ff:a5:a5:56:43:06:
42:97:7b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:31 2026 by rpki-client