
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFF46604DBBA11EA9B1B9F48C4F9AE02.roa
File: FFF46604DBBA11EA9B1B9F48C4F9AE02.roa (raw, json)
Hash identifier: C96v+6kouuLI0LxMOpZFSXHpnESIJZ7xssCX//36kqI=
Subject key identifier: 1C:7A:F1:A2:55:EB:14:E2:3C:CB:2D:8B:25:4D:2C:D7:E8:8B:C1:30
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FC89
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFF46604DBBA11EA9B1B9F48C4F9AE02.roa
Signing time: Wed 16 Sep 2026 06:07:12 +0000
ROA not before: Wed 16 Sep 2026 06:07:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58971
IP address blocks: 103.83.244.0/22 maxlen: 24
103.134.134.0/23 maxlen: 24
103.158.218.0/23 maxlen: 24
2405:e5c0::/32 maxlen: 32
2405:e5c0::/34 maxlen: 34
2405:e5c0:4000::/34 maxlen: 34
2405:e5c0:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 11:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64649 (0xfc89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 16 06:07:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aaa320f-3a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:af:be:26:00:aa:5e:ca:0a:17:f7:c6:ad:20:
78:0e:c2:99:87:c9:af:d3:58:e4:ac:55:cd:06:d0:
76:0b:85:80:2d:ce:17:bb:53:d2:a2:52:d7:b3:ff:
c9:54:9d:b3:44:3c:e2:ab:b1:1a:99:1d:af:bb:7d:
e6:64:0c:6f:4b:b9:43:5c:58:94:94:8b:5e:65:2f:
10:1b:44:da:88:00:12:50:86:0b:f3:02:60:a4:4f:
c2:1d:00:c2:30:76:20:fc:3f:7b:2f:95:70:33:f0:
fa:0d:1f:ad:8c:7d:27:b1:e7:60:19:ad:a7:37:58:
21:1a:5d:20:08:54:ea:a0:66:9d:c0:09:fb:7a:9d:
05:a8:3d:79:2a:b3:ce:1d:c0:fd:df:45:a1:63:1c:
98:af:ae:f3:2f:f6:eb:56:b7:d5:5c:23:dc:56:2d:
8a:d0:db:d9:31:32:5e:90:0a:0e:89:19:10:9e:61:
c0:64:c8:ad:c3:ff:a6:60:d0:55:30:16:b6:8f:63:
00:e0:0b:ad:f0:58:6e:e7:76:c6:4a:c5:fc:47:a0:
0e:56:18:1a:64:40:df:ba:9c:6f:20:86:46:70:9f:
76:f3:2a:b4:f9:37:2b:1b:21:c0:aa:4c:53:df:f3:
76:5f:d8:35:39:c4:f4:79:1f:f6:07:fe:65:c4:7c:
b9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7A:F1:A2:55:EB:14:E2:3C:CB:2D:8B:25:4D:2C:D7:E8:8B:C1:30
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFF46604DBBA11EA9B1B9F48C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.83.244.0/22
103.134.134.0/23
103.158.218.0/23
IPv6:
2405:e5c0::/32
Signature Algorithm: sha256WithRSAEncryption
ba:9a:e1:83:6d:02:8c:e9:46:3c:c6:6e:97:cc:f5:59:87:fe:
68:1d:b7:bd:4a:3b:ef:ef:bc:41:ae:93:ce:e8:33:d3:a3:ba:
87:a2:01:a8:2b:57:54:32:71:03:b4:ad:57:c0:16:94:2a:86:
04:96:5a:b7:d2:51:6d:95:1c:ec:79:e4:d5:6b:b2:ca:cc:24:
8d:e5:ac:78:72:84:bb:52:a7:09:4d:b2:19:0a:96:55:18:c1:
27:bd:29:16:60:5c:45:f6:5a:50:61:20:68:d8:1a:4a:8e:24:
75:f2:33:2e:90:13:e3:1a:a9:1d:91:72:ec:ca:b2:be:ac:ad:
85:26:60:51:92:7f:85:c4:89:b4:53:91:35:ed:d0:68:22:40:
3d:15:cb:a6:66:d1:ea:37:9c:e6:b6:3d:b0:f3:27:a1:41:24:
1f:06:a7:f9:c0:45:00:b6:8d:cb:c8:e7:68:0b:2b:57:e9:a9:
42:fa:c2:d5:d7:64:4e:d0:b9:89:1e:4d:21:50:13:ec:62:1d:
4e:c6:f7:a1:d9:57:0a:b0:c6:71:08:33:5f:88:fb:d0:20:9a:
46:82:3a:03:27:39:9c:3c:2a:27:2b:89:30:b8:eb:59:29:4a:
94:86:c1:99:19:2b:ac:66:8e:44:4d:6a:b9:a6:75:8d:af:a2:
12:a9:ae:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:18:14 2026 by rpki-client