
$ rpki-client -vvf rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/8C6A656045C211EE9E812B5BC4F9AE02.roa
File: 8C6A656045C211EE9E812B5BC4F9AE02.roa (raw, json)
Hash identifier: FhcGuFtYWPB3/UMlAbb6s+HgN6NpeJak3M+SLvTkxXg=
Subject key identifier: 84:CE:A8:34:0C:77:9E:FC:F9:04:A1:94:65:11:1E:41:26:D2:9A:A8
Certificate issuer: /CN=A918779B/serialNumber=356FEDFC1512FB8826075F0D62600E40AD8E7AED
Certificate serial: 07A8
Authority key identifier: 35:6F:ED:FC:15:12:FB:88:26:07:5F:0D:62:60:0E:40:AD:8E:7A:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NW_t_BUS-4gmB18NYmAOQK2Oeu0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/8C6A656045C211EE9E812B5BC4F9AE02.roa
Signing time: Wed 10 Jun 2026 17:20:41 +0000
ROA not before: Wed 10 Jun 2026 17:20:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138903
IP address blocks: 103.136.230.0/23 maxlen: 23
103.136.230.0/24 maxlen: 24
103.136.231.0/24 maxlen: 24
2001:df0:1680::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/NW_t_BUS-4gmB18NYmAOQK2Oeu0.crl
rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/NW_t_BUS-4gmB18NYmAOQK2Oeu0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NW_t_BUS-4gmB18NYmAOQK2Oeu0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:17:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1960 (0x7a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918779B, serialNumber=356FEDFC1512FB8826075F0D62600E40AD8E7AED
Validity
Not Before: Jun 10 17:20:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a299ce9-00af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:48:a2:05:f0:0f:ca:4a:89:15:19:10:fc:8a:
6d:ec:4c:80:bf:4c:f5:0a:5f:17:c4:21:2b:1c:23:
97:03:2a:01:b1:9e:76:15:64:02:3e:67:9b:09:58:
eb:da:93:06:b7:bb:70:47:12:7b:78:36:c3:da:46:
64:d3:cb:fe:95:2c:57:f4:d2:b5:7f:46:fb:e2:2e:
6e:9c:29:31:ae:fb:85:f2:00:16:ad:81:2e:b4:67:
ea:d6:74:14:a0:22:f7:8f:a5:93:7e:f2:90:68:48:
9b:7b:64:cb:b7:b1:53:0f:d8:94:db:85:6a:22:40:
84:48:9f:3a:b4:01:50:42:a9:01:22:2a:a4:7b:a1:
ae:39:59:e5:35:05:29:a4:ed:6a:a1:cd:88:eb:a9:
29:ef:55:f9:21:87:0e:68:63:45:10:89:70:01:1a:
1c:a1:d0:a6:71:a1:12:ac:fe:ff:7a:6e:fc:bf:ee:
36:02:8b:e3:3c:a8:8c:7c:24:eb:12:59:47:95:ea:
6f:f7:61:0a:68:e8:f2:57:ac:3a:23:be:c1:95:5d:
d5:0a:d3:53:f3:f2:55:b1:a8:a9:7a:8a:5e:44:77:
36:57:23:a3:bc:76:3c:f3:bf:e4:3b:75:61:fc:ae:
b5:7b:35:67:87:45:35:e2:6a:d7:0f:0a:5d:fd:2f:
72:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CE:A8:34:0C:77:9E:FC:F9:04:A1:94:65:11:1E:41:26:D2:9A:A8
X509v3 Authority Key Identifier:
keyid:35:6F:ED:FC:15:12:FB:88:26:07:5F:0D:62:60:0E:40:AD:8E:7A:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/NW_t_BUS-4gmB18NYmAOQK2Oeu0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NW_t_BUS-4gmB18NYmAOQK2Oeu0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/8C6A656045C211EE9E812B5BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.136.230.0/23
IPv6:
2001:df0:1680::/48
Signature Algorithm: sha256WithRSAEncryption
99:81:42:c5:6c:03:59:68:e1:3a:63:9e:72:25:72:7b:26:31:
84:75:f4:4e:36:84:40:fe:92:6b:3e:63:64:70:57:21:ac:8d:
80:d0:08:2c:b7:29:5d:c7:3c:24:74:ca:7b:f0:cc:b6:c0:65:
78:63:13:5d:86:fa:cc:d1:f8:3a:b4:95:18:19:4c:92:e0:b9:
b5:52:43:a4:37:0e:7e:be:26:d0:e2:9a:5b:44:7a:10:3d:0f:
0c:19:a4:c8:a0:5d:19:b4:7e:b5:cc:31:b4:81:d5:c7:c3:75:
bb:c6:05:75:45:5c:05:5c:2a:46:68:d5:c3:a5:09:52:68:45:
7b:37:28:28:de:dc:f7:dc:11:0f:c7:f5:4e:d8:97:d5:ed:4f:
0b:66:b3:f9:d2:67:22:49:5d:28:d0:e0:3e:8b:56:83:4c:34:
a3:44:6f:78:92:d3:ce:60:e4:ac:5f:77:dd:71:dc:79:d5:ec:
3d:54:de:a3:1c:ec:00:ac:e9:61:ed:f3:b0:d7:bc:3f:d6:9d:
bf:18:f4:bc:42:9a:5b:36:aa:55:9a:73:57:a2:19:30:94:4d:
df:f0:7b:a3:c5:ca:0d:b1:54:4c:48:4e:82:85:26:94:57:a1:
36:42:b2:1a:51:72:ea:2f:7a:61:d6:01:d9:10:66:a3:f2:7e:
bf:da:c6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:03:04 2026 by rpki-client