
$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/C4928820F06C11EC91459B5CC4F9AE02.roa
File: C4928820F06C11EC91459B5CC4F9AE02.roa (raw, json)
Hash identifier: 0wO7M/9BCooRsmuwMIusd2er4KtWGT09E2By+oSoPjc=
Subject key identifier: 5C:C4:55:D5:8B:73:7F:0D:52:04:9F:A4:85:48:F0:2E:A6:24:2D:CB
Certificate issuer: /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
Certificate serial: 0370
Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/C4928820F06C11EC91459B5CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:51:05 +0000
ROA not before: Tue 03 Feb 2026 21:33:53 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 140646
IP address blocks: 103.12.36.0/22 maxlen: 22
103.12.38.0/24 maxlen: 24
103.12.39.0/24 maxlen: 24
103.189.212.0/23 maxlen: 23
103.189.212.0/24 maxlen: 24
103.189.213.0/24 maxlen: 24
2400:88e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl
rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 880 (0x370)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919103F, serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
Validity
Not Before: Feb 3 21:33:53 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a46e79-7c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:12:78:07:ce:69:f1:03:14:e8:4a:ce:3d:
15:82:22:68:22:3e:3d:3a:16:71:51:65:b2:2b:a8:
2e:92:00:3d:8a:4c:ec:ac:97:12:4f:14:46:42:fc:
1e:4f:78:59:a7:aa:51:1c:d9:c3:a9:d1:89:b4:c6:
f3:1a:8f:66:3c:85:67:f7:c8:fb:22:65:7a:bf:18:
ae:db:52:d9:92:da:fd:ef:02:0f:0a:a5:17:e1:1e:
80:d1:4c:24:da:75:06:0c:08:af:e3:75:79:26:7d:
db:8c:f3:4d:4b:4f:82:97:45:a8:8b:46:b3:41:2e:
ce:90:26:c9:01:69:54:c5:10:bf:1b:14:aa:a8:4b:
34:01:32:bd:d7:8d:2d:a3:62:1e:f8:26:85:4c:5b:
30:fc:6e:99:48:48:35:da:fe:6e:f8:aa:80:66:b2:
fc:e9:61:42:34:db:29:b4:95:dd:de:4c:33:b9:01:
23:30:04:ff:a0:45:e7:b9:4b:ee:83:d6:23:ab:75:
33:c8:6d:22:76:2a:52:11:23:c2:a1:04:25:36:48:
31:71:ef:b2:22:99:fb:eb:80:14:a2:10:9a:f1:42:
78:ce:85:8a:4e:34:1f:0f:a8:46:a6:e8:a3:5f:fb:
c9:07:ed:12:92:39:55:3a:b5:17:d4:6f:ca:12:d5:
4e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C4:55:D5:8B:73:7F:0D:52:04:9F:A4:85:48:F0:2E:A6:24:2D:CB
X509v3 Authority Key Identifier:
keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/C4928820F06C11EC91459B5CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.12.36.0/22
103.189.212.0/23
IPv6:
2400:88e0::/32
Signature Algorithm: sha256WithRSAEncryption
17:b6:35:93:70:27:b7:b1:61:ee:81:6c:a6:f3:03:7f:0c:92:
73:f2:2a:d8:1f:d6:b5:4d:f0:f3:78:89:0e:22:a6:d6:9b:da:
15:c3:82:a8:42:8c:04:cc:8a:47:bc:b6:9c:cf:a7:04:b6:7d:
43:b1:1b:db:d3:c1:f6:84:cc:04:4a:dd:26:03:5e:c8:56:c3:
ee:40:b0:2c:d0:54:a9:43:24:cf:c1:b5:2b:c8:73:03:74:ac:
13:a5:b7:5c:fe:56:3a:59:4c:6f:01:9a:45:8a:17:2a:89:60:
1f:00:b1:bf:59:53:b1:62:68:db:b0:b4:a0:1d:e3:75:b2:59:
8c:03:15:60:f2:fb:e3:89:48:47:8d:96:66:15:c5:aa:ca:dd:
15:2c:a1:36:9e:b4:31:44:cd:90:93:d7:fb:47:a2:4f:8c:5e:
6d:e7:a8:d4:5b:63:be:6f:93:0d:35:83:f9:12:cc:06:7a:44:
c5:b4:37:31:a2:f1:06:e7:57:16:49:a9:e6:61:54:03:e2:32:
d5:f7:bb:d2:a5:43:d2:fe:3a:a7:9d:aa:9e:97:ae:57:ab:df:
69:49:83:37:6f:4f:c1:fa:d4:d0:80:9f:70:45:0f:4d:d5:d7:
65:a3:7f:d6:59:53:38:ec:cb:b1:c4:2e:75:d0:32:a4:6c:8b:
74:7d:e8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:22:34 2026 by rpki-client