
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/D55B87F6601611F1A6BBF85C8B47A888.roa
File: D55B87F6601611F1A6BBF85C8B47A888.roa (raw, json)
Hash identifier: joIYL0vbhrAb4D4K2F1w64Y2XlE1DwwslhZvhJrSWt8=
Subject key identifier: E9:B6:30:FA:31:E5:A9:94:90:01:1C:97:20:1E:9A:8E:16:95:3A:14
Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Certificate serial: 0C15
Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/D55B87F6601611F1A6BBF85C8B47A888.roa
Signing time: Thu 04 Jun 2026 13:11:01 +0000
ROA not before: Thu 04 Jun 2026 13:11:01 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 216138
IP address blocks: 103.23.72.0/24 maxlen: 24
103.23.73.0/24 maxlen: 24
103.23.74.0/24 maxlen: 24
103.23.75.0/24 maxlen: 24
103.246.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3093 (0xc15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Validity
Not Before: Jun 4 13:11:01 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a217965-f4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a8:b2:4c:99:25:16:d8:52:f1:fa:02:c4:ea:
a6:9b:44:eb:02:6e:ff:2d:0d:d1:65:19:47:43:2e:
97:55:3d:88:76:b3:ba:e9:0f:58:59:08:e4:ff:fc:
80:2b:01:fd:34:04:68:ab:48:e8:68:26:27:dd:d5:
ce:6e:97:da:f5:49:af:d5:2b:e0:eb:76:f2:90:62:
74:67:48:28:30:a8:04:0d:90:30:84:f1:3f:77:0f:
27:3d:cd:e5:1f:3c:17:d9:d0:02:0d:cc:85:95:61:
3d:a4:11:ad:41:ff:2b:0d:e7:e3:65:76:59:98:06:
57:80:7c:3b:ba:25:b5:77:e1:5d:23:54:d1:dc:c5:
f7:15:29:98:0e:25:ee:82:c1:36:50:f6:de:08:b1:
c9:31:7a:2e:18:2d:7e:0f:19:06:0c:7d:78:a5:1b:
42:91:a3:32:94:70:a1:0e:9f:b1:66:ba:80:cd:64:
49:98:e2:1b:2e:79:e5:60:10:ab:68:51:e2:49:cd:
fa:0d:90:eb:a6:63:95:ce:27:5d:56:d2:d9:cc:a3:
27:f8:61:60:c2:28:64:5d:90:bf:b2:70:59:2a:81:
b4:7e:93:76:f6:3f:df:02:81:22:0d:20:ae:87:e5:
5f:a2:be:0a:4d:f8:8b:5e:f2:5b:6d:6d:52:e1:01:
0e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B6:30:FA:31:E5:A9:94:90:01:1C:97:20:1E:9A:8E:16:95:3A:14
X509v3 Authority Key Identifier:
keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/D55B87F6601611F1A6BBF85C8B47A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.23.72.0/22
103.246.255.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:8b:2e:ea:08:82:3c:ee:58:d9:7b:c5:8c:f4:4b:07:50:5e:
9d:d7:1b:b2:7f:00:29:93:03:b1:5d:e3:f1:ed:d8:f2:28:10:
3b:db:c3:49:ee:47:cd:3f:66:f5:90:1e:e0:ab:c3:f9:46:b4:
36:5a:9b:bf:4a:44:90:b1:a1:8b:77:30:b9:62:50:b6:0e:a4:
a7:c5:63:2f:c4:60:5d:6d:2f:60:63:eb:c3:0a:e7:9d:ac:c4:
cb:76:ef:42:32:6e:14:c2:d5:27:f5:71:c4:8c:1d:77:28:3a:
2b:7d:16:00:03:24:7c:dd:0d:35:3b:b5:6e:01:16:35:1a:b7:
f6:e1:de:78:98:15:bb:67:77:55:d6:1a:20:b1:fc:39:0e:d1:
c6:78:1b:42:e8:2a:bd:11:80:7f:a4:76:13:80:f8:7c:75:9b:
d4:ea:10:ff:80:2c:e3:63:91:b5:7e:9b:eb:ca:d0:d2:bb:82:
ce:4d:2e:c4:e3:fe:58:8b:7b:29:e5:ee:89:b6:7d:74:38:4b:
ce:d3:f2:b1:fc:41:73:1b:d6:c4:8c:27:f2:58:84:7d:5c:e4:
79:74:b8:e7:85:ef:b1:c2:1c:a5:38:11:ee:39:25:29:d2:0f:
7b:f8:c9:f6:3b:d3:d4:c3:6f:f5:fa:71:af:12:2b:ef:78:f6:
c7:51:4d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:52:05 2026 by rpki-client