
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/327DF186AD9B11F195F881806B11F970.roa
File: 327DF186AD9B11F195F881806B11F970.roa (raw, json)
Hash identifier: cRsm61pSfodtY4EsMThVpWUby09uimjvb/ixyEbd6aE=
Subject key identifier: E1:F7:76:DD:2B:27:4F:EF:20:77:25:EB:E8:D9:6B:5F:7B:E7:F9:FD
Certificate issuer: /CN=A918ADBA/serialNumber=E71F782A53DA16DB1FD30C6C0D2615427522A6DE
Certificate serial: 9C
Authority key identifier: E7:1F:78:2A:53:DA:16:DB:1F:D3:0C:6C:0D:26:15:42:75:22:A6:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/327DF186AD9B11F195F881806B11F970.roa
Signing time: Fri 11 Sep 2026 04:42:30 +0000
ROA not before: Fri 11 Sep 2026 04:42:30 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 4764
IP address blocks: 103.29.204.0/24 maxlen: 24
103.29.205.0/24 maxlen: 24
103.29.206.0/24 maxlen: 24
103.29.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.crl
rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156 (0x9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ADBA, serialNumber=E71F782A53DA16DB1FD30C6C0D2615427522A6DE
Validity
Not Before: Sep 11 04:42:30 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6aa386b6-12b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cd:14:b3:79:3a:1d:9b:eb:e7:8f:99:b8:64:
7a:13:96:db:9b:45:6b:78:3b:6a:43:af:43:18:b0:
fe:05:8d:44:a4:42:2e:77:61:dd:0f:c2:ca:dc:d7:
0f:86:ef:f3:35:9b:7c:31:2c:0e:5a:52:3c:4e:c8:
47:34:78:e1:75:30:48:f0:3b:0a:c6:52:ea:db:8b:
da:8b:5f:68:9c:5b:4a:8c:71:a1:c8:79:e1:fc:ec:
44:c5:81:e2:83:0c:18:26:49:75:83:c3:47:33:39:
10:e9:bd:8f:26:e5:3a:fd:ee:30:6b:ed:87:6e:11:
83:27:78:dc:ea:07:38:7a:c4:d9:3c:dc:c3:05:68:
8b:c6:32:34:06:f2:e6:5e:f8:bc:3f:c9:a6:e5:9a:
8f:d0:7d:b2:03:4c:15:f0:fc:9f:1c:c1:54:15:fc:
49:51:d5:89:45:5e:8e:09:d3:7f:7f:80:a1:ec:6c:
5e:e3:48:ea:3e:1e:27:6d:ce:0e:6c:71:8c:1e:6c:
87:d7:0b:0a:fd:66:06:25:9e:83:fb:57:69:6a:92:
5e:f4:94:94:74:b4:7d:a4:63:66:6a:40:4a:44:81:
cd:f7:d6:3e:9f:64:f3:56:5d:10:af:df:66:14:bc:
f2:04:ff:c1:85:46:69:c5:b2:7e:35:5c:50:27:c7:
0b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F7:76:DD:2B:27:4F:EF:20:77:25:EB:E8:D9:6B:5F:7B:E7:F9:FD
X509v3 Authority Key Identifier:
keyid:E7:1F:78:2A:53:DA:16:DB:1F:D3:0C:6C:0D:26:15:42:75:22:A6:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/327DF186AD9B11F195F881806B11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.29.204.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:7d:58:8b:80:cd:bc:d8:80:30:84:26:1f:db:eb:90:f1:cb:
cb:bd:0f:c1:40:06:51:7d:02:af:11:ee:37:e6:df:81:bc:9b:
69:7f:69:82:94:14:01:17:34:e1:64:69:09:83:f1:c9:c3:be:
c2:fc:7c:ec:f0:ad:7d:c5:27:6b:d4:ea:b1:d5:0c:9e:e1:d7:
c6:3f:9d:65:5a:be:20:d3:d5:31:97:89:2b:bb:0d:09:6f:0d:
84:0f:56:08:6f:2b:5b:0b:66:ce:44:4f:09:1f:82:85:c6:ef:
ec:57:df:24:6c:1a:a6:04:9f:ca:b0:62:5b:16:7b:2e:d9:34:
77:28:82:7b:ca:74:3a:e9:47:38:07:7d:91:64:4b:51:7d:26:
8d:ae:8c:1d:c0:6b:1f:f3:26:11:c9:a2:86:32:9d:a7:36:16:
3f:40:7d:94:3f:fb:61:a0:f8:9b:60:38:0c:2a:8c:07:d9:75:
93:90:37:8b:ea:a0:48:e5:38:e5:a9:a4:82:4b:59:fa:d5:a3:
e3:89:70:81:79:b4:82:90:99:ba:0b:a6:b2:f3:aa:dc:db:7d:
16:77:f4:0f:fe:91:8d:db:b7:f2:e9:fa:dc:fe:81:cc:1e:fa:
7a:3a:b4:6b:62:4e:57:c7:ed:81:8d:a1:00:69:9a:7f:08:e6:
98:15:7e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:22:26 2026 by rpki-client