
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/0E35A0A0097611F0B5B04858C4F9AE02.roa
File: 0E35A0A0097611F0B5B04858C4F9AE02.roa (raw, json)
Hash identifier: /fHf2RWdustvdg5S47Z7gIzIMDXWlqkBjyrgu7K/3D4=
Subject key identifier: 2E:82:96:2D:20:46:2A:BD:4A:07:C4:B7:83:CA:18:DA:CB:2A:45:9B
Certificate issuer: /CN=A917C373/serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2
Certificate serial: 1F9D
Authority key identifier: DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/0E35A0A0097611F0B5B04858C4F9AE02.roa
Signing time: Mon 31 Aug 2026 16:28:56 +0000
ROA not before: Mon 31 Aug 2026 16:28:56 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 10112
IP address blocks: 103.70.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl
rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 15:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8093 (0x1f9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C373, serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2
Validity
Not Before: Aug 31 16:28:56 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a95abc8-939a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:38:13:0f:f7:64:35:5a:1f:11:60:7d:f3:4d:
e6:35:94:29:1c:7e:b9:e8:e7:13:97:94:1c:58:1f:
2f:9a:8b:ae:56:6a:93:30:b7:17:86:04:c4:8e:98:
ef:06:60:96:3e:65:c8:a5:f2:8e:be:e7:ac:cf:b7:
4c:5a:a0:1a:29:7d:17:3e:90:1c:83:57:ca:41:ca:
a4:8d:9b:fe:80:26:66:4b:67:1e:e4:2d:b2:76:70:
30:52:e7:b3:59:ec:da:fa:ef:69:58:59:11:3e:35:
0c:72:29:8a:1a:c0:8c:d7:e3:f9:02:4b:2c:59:76:
e7:2c:22:ce:15:88:4c:81:07:07:c4:7e:4f:91:2d:
84:25:45:2e:b1:a6:68:3c:87:8d:91:26:e7:40:96:
87:95:c3:09:18:6a:04:24:a9:82:a5:40:79:22:57:
d9:1a:de:f7:35:b0:d2:5d:5f:8b:3f:e4:20:dd:b7:
d3:32:3d:41:69:46:ff:ff:f8:53:4b:0d:1f:8b:08:
c3:6c:9d:db:6d:a5:10:1e:69:33:7d:79:e8:0b:86:
1a:3a:1a:5c:7a:e7:d6:53:37:27:91:35:06:7e:4a:
87:19:9c:d0:62:a4:4c:72:21:b5:1a:39:c9:69:cc:
43:75:f0:2f:3e:65:b3:90:a8:0c:5b:07:e5:0f:52:
0b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:82:96:2D:20:46:2A:BD:4A:07:C4:B7:83:CA:18:DA:CB:2A:45:9B
X509v3 Authority Key Identifier:
keyid:DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/0E35A0A0097611F0B5B04858C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.70.136.0/24
Signature Algorithm: sha256WithRSAEncryption
37:20:20:7c:a9:5a:fa:01:20:88:61:15:af:c5:b9:2a:d2:30:
8a:0a:2b:c3:e9:f8:de:5b:76:58:ad:39:20:6f:11:0c:67:c3:
74:b6:5a:4c:ac:77:94:56:96:75:e8:8c:48:08:2a:4a:50:1e:
ef:d2:1c:52:c3:2c:85:09:8c:a8:e7:e1:35:b9:6d:3e:0e:ec:
a6:a1:ce:99:da:f7:bf:64:cd:8d:59:20:51:5a:c8:ae:96:e5:
7b:8b:03:8b:47:05:21:9f:4e:28:cf:07:29:eb:21:2e:eb:dd:
f3:b7:48:b2:64:78:c3:53:df:e6:b4:14:6b:b2:5e:66:06:7f:
db:85:86:62:4d:49:7a:e6:d7:59:fa:07:60:5e:a1:91:48:dc:
89:22:c9:24:21:b6:fb:97:a4:bc:a4:22:d9:13:60:d1:f3:03:
78:84:54:51:64:0c:4c:8f:a6:39:c0:25:a6:86:3a:07:e8:f7:
5c:dd:5b:31:bf:04:ad:a4:c1:17:99:c2:8c:7b:77:e2:16:68:
ff:06:11:52:40:b9:43:68:a1:e1:6a:13:92:66:c0:28:c8:9d:
16:84:29:50:98:b6:0c:1f:11:14:64:a8:86:20:2b:cc:13:d0:
df:c2:4b:7c:54:58:17:48:b0:c5:0e:55:f0:cc:e6:26:3a:84:
89:53:d6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:32:49 2026 by rpki-client