
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FC7C4036C76011EBA286D16EC4F9AE02.roa
File: FC7C4036C76011EBA286D16EC4F9AE02.roa (raw, json)
Hash identifier: 0wuDLnJ+bqct42x4zSy7VJNINO22XF7hIJcVl5zJZKY=
Subject key identifier: 0B:0D:DF:60:B7:50:FD:6C:2A:BF:48:15:6A:F7:6D:38:C7:2F:A2:87
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D3F7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FC7C4036C76011EBA286D16EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:28:56 +0000
ROA not before: Thu 08 May 2025 16:08:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137110
IP address blocks: 103.102.28.0/22 maxlen: 24
103.148.63.0/24 maxlen: 24
103.157.130.0/23 maxlen: 24
103.167.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54263 (0xd3f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:08:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bda8-f470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:49:01:6a:c3:68:e3:d9:fe:f5:0e:c3:d9:e9:
9a:80:9c:14:9d:dc:b6:69:2f:fc:8e:9a:d8:da:05:
c5:0e:6d:f3:77:e4:d8:a5:5f:74:65:36:91:5d:f3:
60:78:88:03:07:52:48:70:1b:92:9d:ab:51:08:a6:
2e:01:c5:0f:ab:cd:9c:ce:1f:60:84:23:63:c0:fa:
af:f2:52:89:c0:f6:d5:15:8f:78:26:db:06:7e:4c:
48:c6:33:92:d9:d0:89:b1:03:eb:6e:b1:c7:2f:bb:
49:03:1d:14:29:37:98:63:61:b8:dd:15:c9:7c:fb:
87:2e:58:27:b9:fb:2c:90:40:ac:8d:29:70:91:cf:
db:d7:b9:3b:d2:5c:66:38:c6:5c:dd:b0:26:2e:7a:
c6:0e:51:be:78:12:76:01:c0:3f:fa:50:2c:9f:19:
34:e2:6e:ad:db:2c:0b:2c:99:01:bd:8b:19:be:b1:
c7:3e:92:fc:20:0d:e8:3b:17:40:18:e3:95:0f:07:
18:a2:e9:20:9f:41:c3:1b:27:38:a0:f3:e2:ac:5e:
db:ea:15:7c:9c:b8:99:4a:d5:c8:d6:70:c4:74:0e:
66:33:81:03:88:a0:ba:fb:b9:7e:9f:81:8a:ad:2b:
26:26:ce:a9:2e:48:74:4b:18:fd:42:d5:ed:63:dc:
db:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0D:DF:60:B7:50:FD:6C:2A:BF:48:15:6A:F7:6D:38:C7:2F:A2:87
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FC7C4036C76011EBA286D16EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.102.28.0/22
103.148.63.0/24
103.157.130.0/23
103.167.130.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:a0:e4:5d:11:9f:34:43:b5:6e:92:e9:86:f0:82:14:98:61:
dd:21:da:5f:93:28:f6:61:a4:62:ee:3e:74:29:98:af:9c:9d:
52:55:2a:18:98:84:8e:5f:7e:43:4d:3a:25:61:a9:ae:b7:a3:
86:80:12:d1:90:54:49:9a:2a:d9:80:45:b0:36:15:e4:80:8a:
c2:e8:e5:31:6d:59:aa:81:b2:d2:47:b5:f4:ed:7c:1b:43:69:
b7:b0:70:60:f6:82:23:72:ce:bc:51:72:f4:5e:68:36:05:ae:
96:af:1a:3a:77:49:e4:03:25:dd:4b:37:3e:96:63:5f:a6:60:
1d:61:73:29:a9:e9:42:77:bf:01:46:81:69:cb:f2:1d:cc:3f:
48:1a:00:20:4a:00:9b:ea:b6:16:56:64:56:26:76:69:4e:00:
a5:be:a8:95:19:3d:7e:35:86:11:a1:9c:91:35:08:c5:d0:fb:
3e:9d:8a:a9:73:df:d9:9f:a0:01:c0:6a:fc:a8:b2:08:37:aa:
65:90:f6:c5:63:41:69:fa:7c:a5:39:54:96:62:38:88:50:a8:
2f:81:ba:78:00:b9:f1:d9:df:51:30:d9:66:ef:15:50:50:d2:
1a:f0:f8:51:d5:fd:ce:43:03:35:65:3a:6b:fc:44:96:ff:ba:
7d:5d:69:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:42 2026 by rpki-client