
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/0E35A0A0097611F0B5B04858C4F9AE02.roa
File: 0E35A0A0097611F0B5B04858C4F9AE02.roa (raw, json)
Hash identifier: 7/gwqGUBAOb3hEJ8slgdeW3dddqMQy1lCsCPeg2AjSY=
Subject key identifier: 18:FE:30:F6:28:70:D5:1E:14:E7:B6:C4:BE:FD:B1:1C:73:34:3C:8A
Certificate issuer: /CN=A917C373/serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2
Certificate serial: 1F3A
Authority key identifier: DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/0E35A0A0097611F0B5B04858C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:40:13 +0000
ROA not before: Sat 30 Aug 2025 16:08:33 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 10112
IP address blocks: 103.70.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl
rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:25:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7994 (0x1f3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C373, serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2
Validity
Not Before: Aug 30 16:08:33 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a441bd-8375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a4:4a:14:d3:63:2f:49:11:da:45:93:84:84:
d0:f6:9f:e5:2b:5a:32:53:b0:9f:5e:ef:af:00:1a:
4f:cd:bb:5a:8d:8a:27:d6:22:25:f4:6a:b8:e2:0d:
c4:9f:16:4e:99:cf:23:fc:fb:7b:a9:fe:24:f7:fc:
6f:bb:97:f4:d0:b9:97:0a:f8:6b:c4:d9:93:87:e1:
9e:93:4a:8a:47:b8:ff:ed:ad:12:08:39:aa:7a:8f:
56:1d:4b:a1:39:89:1b:12:e9:77:b3:79:19:a1:b5:
3f:7f:e5:ab:36:61:bd:3c:3d:66:a8:04:33:43:e2:
60:84:46:3e:ce:1d:b0:1e:60:65:36:ff:e3:e8:8a:
18:c5:fe:01:18:b7:a6:4c:0c:72:56:68:23:41:73:
4f:9e:63:1e:66:d2:17:0d:59:5c:27:03:8c:84:0d:
0b:8c:42:12:fc:39:09:f1:33:c4:19:df:b0:ea:fd:
c2:92:9b:90:ce:40:25:a2:f8:f3:76:59:33:23:52:
e2:80:ef:4c:29:a2:07:72:e8:49:79:0a:79:19:f9:
96:6b:2a:d1:2e:81:8c:7b:23:ee:db:59:d4:eb:ac:
8b:a2:6c:cd:17:3f:41:92:3c:b1:2f:4e:87:8d:18:
bf:1e:76:e8:86:2d:8b:b1:d3:f1:7b:30:74:d4:12:
6d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FE:30:F6:28:70:D5:1E:14:E7:B6:C4:BE:FD:B1:1C:73:34:3C:8A
X509v3 Authority Key Identifier:
keyid:DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/0E35A0A0097611F0B5B04858C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.70.136.0/24
Signature Algorithm: sha256WithRSAEncryption
32:20:50:a3:f7:8f:12:8b:6c:18:14:ab:b9:0c:76:72:47:55:
1b:b4:dd:1b:49:95:7a:06:34:c9:a7:2f:55:ca:c8:12:35:41:
62:55:fa:ee:9f:b6:62:7a:d9:92:6e:59:fa:55:c1:c6:a4:fa:
26:6e:3c:f9:cf:5a:cf:70:66:b8:6d:61:fd:9e:89:15:4f:11:
3b:b4:74:97:c5:f5:3b:f4:8f:a7:08:f7:9e:ca:db:fa:d3:48:
a6:b3:40:de:00:b7:ac:63:96:94:97:12:84:b9:af:22:5e:25:
b0:38:16:ad:04:dd:69:96:ad:f0:3e:c3:4d:3e:8d:fd:bf:0a:
eb:10:2c:51:77:0f:66:d2:51:28:ad:2d:a5:28:9a:98:63:96:
f4:f5:1a:63:34:45:bf:86:9c:0c:08:d2:8a:e5:6b:df:e2:d6:
36:28:53:b2:62:02:d8:e4:ee:3e:f3:d6:7b:ba:58:42:6c:0e:
e2:d8:69:7b:28:78:71:60:4d:05:97:a7:96:e8:0f:35:a5:82:
a4:63:13:bb:8e:27:9d:a8:7b:be:38:77:21:2e:d2:b7:a9:e2:
53:4d:60:56:4e:4d:ec:03:49:44:16:54:b9:50:c4:7d:69:43:
e7:55:4f:05:e1:f4:df:93:73:70:94:88:d3:75:ef:cc:d2:07:
5c:ee:f8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:52 2026 by rpki-client