
$ rpki-client -vvf rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/A1CB8D62C13411ECA5838429C4F9AE02.roa
File: A1CB8D62C13411ECA5838429C4F9AE02.roa (raw, json)
Hash identifier: lA+CaygcBrj0YtEqp60seW0ZCX6+tWFwXRqNraQ10Ek=
Subject key identifier: 78:C9:92:01:FA:4A:C4:5D:52:A6:E5:51:89:04:A9:60:13:95:DB:AA
Certificate issuer: /CN=A917039B/serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89
Certificate serial: 03FC
Authority key identifier: D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/A1CB8D62C13411ECA5838429C4F9AE02.roa
Signing time: Wed 27 May 2026 01:31:07 +0000
ROA not before: Wed 27 May 2026 01:31:07 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 135163
IP address blocks: 103.186.156.0/24 maxlen: 24
2001:df0:ab40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl
rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1020 (0x3fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917039B, serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89
Validity
Not Before: May 27 01:31:07 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a16495b-5c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e2:47:e9:d4:26:39:03:60:08:f2:da:e5:59:
58:19:c2:70:04:66:32:a8:f5:1e:a3:d0:2d:03:c6:
12:cb:5c:bc:51:9b:42:93:92:11:96:b1:5d:8e:21:
87:45:0e:5f:59:f8:40:4d:c8:39:88:8b:6f:ce:94:
4d:18:3f:04:bf:fe:4c:c9:9a:2a:fc:17:c6:7d:53:
62:f2:3c:f3:ac:b3:3a:db:cb:38:31:68:da:2e:e5:
a1:2a:79:1c:1d:cf:4f:e6:ad:62:03:ba:ad:52:36:
ce:30:14:d1:7b:de:ac:c4:71:af:2f:b7:ea:ec:c2:
43:9d:a8:8c:fe:31:8e:30:c7:b4:99:84:07:e9:9d:
1a:1c:dd:ea:05:7d:b2:f0:3a:0e:bc:d1:44:bd:14:
71:f7:86:8a:fc:e7:e2:42:1d:73:82:a9:42:1c:df:
5c:49:22:48:d3:12:11:35:f9:25:d7:43:34:49:19:
77:8d:77:02:83:d7:72:0d:67:4d:6b:17:72:c8:26:
9c:5c:77:95:fa:59:d4:b8:57:e2:08:9b:7d:95:76:
75:93:fb:2d:9e:b1:73:2e:91:d8:8e:a4:24:4c:60:
76:21:21:00:b8:2a:4c:0a:63:78:84:fa:1f:90:3a:
d8:2d:d2:4e:c6:4e:23:dd:96:54:5f:53:b1:43:39:
6a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C9:92:01:FA:4A:C4:5D:52:A6:E5:51:89:04:A9:60:13:95:DB:AA
X509v3 Authority Key Identifier:
keyid:D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/A1CB8D62C13411ECA5838429C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.186.156.0/24
IPv6:
2001:df0:ab40::/48
Signature Algorithm: sha256WithRSAEncryption
cf:7a:63:12:e4:d6:e5:b4:2c:86:24:4f:11:5b:43:95:96:a5:
07:f8:38:62:fc:6d:b7:24:c6:c1:ef:a7:d8:e0:a9:f7:0e:e2:
da:69:c3:c5:67:67:11:a2:2f:ee:04:f0:c1:f0:4e:3a:1b:da:
27:17:c1:25:fd:90:33:c2:3c:aa:71:a3:f0:b7:d2:61:91:b4:
ca:07:28:6d:f2:0a:ec:da:0e:9d:41:b4:0d:b1:0b:eb:23:b8:
4d:0c:3f:11:ce:d1:e5:b2:69:77:2c:aa:49:16:8a:53:32:f7:
7c:0d:63:b3:34:07:88:6a:e4:9c:81:4c:fa:b4:43:73:b3:ad:
56:91:2a:db:5d:5d:48:3a:38:ce:eb:16:d7:53:96:a0:d1:48:
fc:83:8a:cb:2b:9a:48:52:a7:74:da:af:0b:5b:57:c4:89:9b:
8c:23:e9:af:1f:cf:f3:66:1c:bf:16:b0:47:a6:ad:6c:29:ff:
04:a7:e0:bf:9f:1e:e8:2b:c7:af:ef:81:eb:6a:a0:c7:b1:2f:
1c:a0:fb:3e:b6:6e:18:a5:ba:fa:5a:9f:6b:dc:a4:8f:4e:52:
ed:a3:8a:51:0c:67:78:8a:4f:af:df:6d:10:ec:2b:12:3b:f3:
34:4f:1d:2e:ae:75:99:66:cf:cf:b5:af:96:04:69:c6:b2:ea:
81:8e:3a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:02:05 2026 by rpki-client