
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/49E05638EA0B11F09069D0EA6F6F56BC.roa
File: 49E05638EA0B11F09069D0EA6F6F56BC.roa (raw, json)
Hash identifier: 5lCa0uM9qsyo4Ls9OwY1shMD+q998RLPGqM4GruFZ8A=
Subject key identifier: A9:03:7A:45:48:15:FB:63:FD:80:1F:F1:06:07:95:19:34:C7:5C:11
Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Certificate serial: 0BDF
Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/49E05638EA0B11F09069D0EA6F6F56BC.roa
Signing time: Sun 01 Mar 2026 18:34:24 +0000
ROA not before: Wed 21 Jan 2026 08:40:55 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 197537
IP address blocks: 103.23.72.0/24 maxlen: 24
103.23.73.0/24 maxlen: 24
103.23.74.0/24 maxlen: 24
103.23.75.0/24 maxlen: 24
103.246.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3039 (0xbdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Validity
Not Before: Jan 21 08:40:55 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a486b0-4134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5a:4c:32:b7:3f:af:c1:b3:17:4c:04:e7:84:
9d:5d:cb:9e:ce:4b:31:e5:42:cc:23:ca:5a:34:8a:
f4:01:7c:7d:23:4c:d4:50:8b:45:fa:73:4c:aa:a5:
15:48:b4:d8:cd:25:97:c7:16:a9:58:cb:32:d7:1c:
61:bf:12:64:be:81:fc:92:f2:5b:39:03:a4:81:51:
2d:7b:9b:4e:e8:2c:6f:d3:2e:2d:72:57:2c:94:a2:
f6:be:79:5c:b4:fc:88:ed:76:e3:19:9a:e0:44:1f:
15:08:14:0e:4e:05:e1:26:b1:90:06:bf:00:6a:33:
5d:f1:18:a5:0d:1b:38:fd:9b:27:b1:18:b1:09:cb:
8d:9e:fb:f1:a7:7a:bb:f0:5e:ce:51:75:3e:bf:92:
c0:03:9e:ed:da:3c:22:99:90:b3:03:95:29:79:5c:
fb:94:e6:b9:d5:a8:dd:ba:7d:ea:96:90:cd:66:37:
f3:9e:f7:05:93:e2:0e:00:3c:9e:d5:05:e3:77:fa:
b4:a2:a3:4e:85:4d:5b:8e:16:ae:54:5c:e3:55:5c:
1a:d6:de:bc:0c:61:85:99:36:ac:2a:f7:59:dc:23:
1d:47:67:91:ed:fb:e0:56:d7:a2:46:70:84:82:3a:
b2:ad:47:79:4b:44:c5:1c:e6:92:75:74:81:8a:74:
cd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:03:7A:45:48:15:FB:63:FD:80:1F:F1:06:07:95:19:34:C7:5C:11
X509v3 Authority Key Identifier:
keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/49E05638EA0B11F09069D0EA6F6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.23.72.0/22
103.246.255.0/24
Signature Algorithm: sha256WithRSAEncryption
42:fb:e5:8b:52:40:ff:a1:3b:5c:b8:ed:67:a6:b9:3f:23:f7:
1d:c6:29:67:68:4e:fa:a2:ef:1f:fb:db:6d:2f:b4:67:a4:b0:
37:8e:d6:fb:d3:4c:eb:83:e5:16:7e:a2:e7:18:b1:55:0c:e1:
fb:22:d6:5e:a7:eb:d7:7e:0a:9e:bc:2d:99:89:3e:f7:b6:f5:
a4:92:1c:7e:12:49:fa:13:93:f4:90:cd:45:f9:2e:81:fb:09:
09:b8:71:1d:86:8e:92:24:b2:ca:04:ec:49:55:3e:45:6e:2e:
95:6d:2d:48:0a:a9:47:80:67:9f:d2:ea:6c:65:cd:93:29:54:
88:3a:61:31:10:7b:ba:30:83:a5:e6:64:03:dd:dd:1d:49:5b:
59:64:c3:b4:d9:2d:b3:a4:07:92:74:de:a3:6d:c2:ec:ad:79:
82:fc:89:df:09:6b:f8:25:bf:f5:88:5f:c7:f6:64:53:e6:e3:
64:00:e1:8d:0b:f0:1d:9d:f7:62:92:f2:dd:00:fe:09:19:a9:
ea:f5:ca:0c:c2:95:a6:8c:b8:85:ea:0c:3f:fa:8f:fe:e9:36:
a7:c4:0a:1f:b6:4e:7f:a5:44:0a:c8:06:f0:50:2e:84:2c:af:
45:e0:ec:3a:53:79:20:4f:e0:67:09:ae:6c:4e:78:b2:81:b6:
1a:04:86:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:20:25 2026 by rpki-client