
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/94FFF24CA5CA11F181152D707111F970.roa
File: 94FFF24CA5CA11F181152D707111F970.roa (raw, json)
Hash identifier: Sg/maMpg/w2UI4nRD9hbatihlbcBBZLif00188ZZAbA=
Subject key identifier: EE:92:0D:CE:A7:0C:66:E5:FB:46:85:DC:9C:76:FF:0D:8F:00:3C:69
Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Certificate serial: 0C54
Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/94FFF24CA5CA11F181152D707111F970.roa
Signing time: Tue 01 Sep 2026 06:01:33 +0000
ROA not before: Tue 01 Sep 2026 06:01:33 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 6939
IP address blocks: 103.246.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 18:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3156 (0xc54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Validity
Not Before: Sep 1 06:01:33 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a966a3d-8f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6c:32:62:fe:05:71:3e:23:0c:ea:bb:b4:9f:
c1:e8:b5:95:35:4d:88:fa:6c:9f:e4:a5:c8:2d:10:
30:56:ab:37:5f:1f:58:96:a6:af:12:d7:d6:a4:64:
6d:8d:4a:4a:5a:92:b2:cc:d3:d4:87:7e:a5:7c:13:
45:85:5b:d1:9f:d2:6f:cc:33:b8:d1:cc:9b:69:22:
1d:10:ea:4a:8f:33:ca:08:81:7e:ed:54:33:fd:81:
9d:44:b5:ca:84:47:e1:94:6b:7e:ea:db:4a:0f:44:
a0:36:d5:64:d5:1d:14:9b:c8:e8:27:04:dc:81:06:
0f:62:da:ba:2a:94:57:06:91:38:aa:d9:8d:05:0a:
ba:b0:8b:5f:78:cc:ad:b9:89:66:bc:68:74:62:1d:
9d:43:2a:b3:6c:3c:ab:27:b2:64:6e:4e:7d:a1:fe:
00:f7:2b:de:dc:d0:51:59:c4:be:7d:0f:d4:ff:4d:
d7:c8:b4:c3:fc:f8:a7:7e:40:a1:ca:67:cb:8e:30:
10:21:19:5c:2e:b2:82:89:dc:c6:98:30:37:4d:3d:
fb:ef:aa:12:e0:0c:51:ab:ec:17:6b:ce:4f:56:11:
08:9b:b6:62:94:24:46:e8:e9:69:0d:87:9a:91:3b:
4a:4c:94:c5:93:97:2b:8d:82:2d:0f:8d:b1:f5:0a:
b2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:92:0D:CE:A7:0C:66:E5:FB:46:85:DC:9C:76:FF:0D:8F:00:3C:69
X509v3 Authority Key Identifier:
keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/94FFF24CA5CA11F181152D707111F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.246.255.0/24
Signature Algorithm: sha256WithRSAEncryption
97:52:1a:77:69:81:bc:7b:e9:51:cf:b6:68:e0:a8:54:94:05:
e6:4c:05:ff:e5:f7:6f:49:74:eb:fb:dd:8a:a8:5b:21:05:f3:
61:4b:50:f3:1d:7a:e7:96:a5:60:ee:8e:e6:84:ef:b0:45:5a:
3e:25:bf:72:be:0a:85:21:87:d1:bd:a8:7c:da:f8:1f:98:e7:
04:7e:b8:09:9c:0a:e6:68:80:12:b4:15:19:a9:1b:66:9b:a5:
65:7f:58:81:15:e4:fd:46:b8:a3:cd:11:99:81:0c:80:90:dd:
1d:f6:62:a8:cf:e6:a9:f9:36:e1:94:64:c4:94:80:03:92:b7:
22:f2:74:bf:df:ac:5e:60:86:f1:7e:69:6a:16:ba:aa:6d:59:
e7:b2:db:af:08:c6:4d:e9:e2:2b:a3:24:56:e3:7e:62:76:23:
73:f8:c5:de:25:e4:c7:b4:09:b5:d3:1f:dd:05:0a:f1:7b:e1:
d0:32:af:51:bc:54:6f:9d:b7:ee:3b:eb:05:99:f3:53:f7:80:
94:a2:81:bb:1f:f2:4e:0f:9b:5a:b2:6a:b6:49:68:aa:8a:df:
0b:a0:bf:ad:45:49:74:f1:39:95:63:ea:ae:6e:5b:95:ef:02:
de:ba:7f:87:e8:26:bb:c5:01:6a:d3:c5:a8:ed:f0:fb:0a:01:
6b:cd:5a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:59:40 2026 by rpki-client