
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/F70D5712B01B11F1AF4372F03411F970.roa
File: F70D5712B01B11F1AF4372F03411F970.roa (raw, json)
Hash identifier: hUcrrrUBVLByI2vT36TB+CJnPow9opUMWOBIoChZd9M=
Subject key identifier: 2A:97:14:B0:C2:60:5D:C9:AE:6D:30:BA:4C:83:79:89:C3:32:B2:95
Certificate issuer: /CN=A919400C/serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
Certificate serial: 0719
Authority key identifier: 19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/F70D5712B01B11F1AF4372F03411F970.roa
Signing time: Mon 14 Sep 2026 09:09:18 +0000
ROA not before: Mon 14 Sep 2026 09:09:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142028
IP address blocks: 103.166.89.0/24 maxlen: 24
2001:df6:8580::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl
rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1817 (0x719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919400C, serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
Validity
Not Before: Sep 14 09:09:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aa7b9be-d40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:10:78:2d:58:c9:de:43:b7:1a:c8:2e:9b:05:
0a:14:91:53:51:2c:92:05:b1:da:e3:3a:0c:a0:f9:
80:d0:66:c1:a2:c4:07:99:2e:3d:e9:21:14:c6:da:
4b:2f:4e:f7:87:9e:de:1c:af:2a:e9:7b:dc:02:1f:
fb:ee:64:74:f6:39:35:ec:b0:b2:b3:74:4c:77:71:
88:dd:57:4d:b1:58:fa:9c:8c:42:d9:0f:e3:a9:eb:
75:11:05:bc:1e:19:e6:f8:46:7f:4b:a7:d9:32:5e:
f5:4d:16:c8:9c:52:9c:48:90:00:a4:bf:3d:9c:c4:
00:4d:96:0a:70:cb:50:61:f9:43:95:51:69:2d:d5:
42:dd:59:2a:1f:c4:8a:76:12:5e:63:9d:3b:6f:7e:
5f:f2:11:18:6b:08:d1:ba:14:38:ad:ab:da:96:ce:
b0:85:e5:ce:6c:fb:83:48:42:37:91:ca:f4:28:02:
73:6d:a1:a5:c9:d1:86:6b:cd:56:e3:8a:fc:ff:8f:
6d:94:76:81:d6:ec:6c:21:cd:55:51:f5:a4:09:fa:
73:49:8e:c6:23:35:54:54:0c:d0:9e:d4:25:80:ce:
83:23:83:30:44:c9:94:85:72:ea:08:c7:b7:30:0b:
aa:aa:56:19:a7:e0:85:e7:75:c7:44:82:b5:3a:ae:
72:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:97:14:B0:C2:60:5D:C9:AE:6D:30:BA:4C:83:79:89:C3:32:B2:95
X509v3 Authority Key Identifier:
keyid:19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/F70D5712B01B11F1AF4372F03411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.166.89.0/24
IPv6:
2001:df6:8580::/48
Signature Algorithm: sha256WithRSAEncryption
3f:03:3b:e4:c8:1d:31:62:46:cc:72:33:5f:0e:a4:e0:35:b0:
d3:54:84:44:38:2d:58:3a:9c:ab:c9:38:9f:63:45:d2:1b:1c:
e1:06:0d:16:20:15:02:91:8a:f9:82:d5:99:6d:3e:db:f3:fd:
c9:6d:6a:fe:7f:ce:ab:79:f1:31:ee:ff:0c:7c:4a:39:a7:fc:
be:0f:84:89:36:16:d1:2b:91:71:27:51:20:35:4e:92:46:17:
16:e1:8b:8d:ec:18:7d:a6:10:47:ec:35:4e:61:bf:09:78:a3:
cb:6c:0a:23:88:49:a6:47:26:31:2f:f2:c5:74:aa:6f:ad:d4:
9a:ac:84:82:e0:03:3d:64:8f:02:05:b6:76:3f:cb:22:ff:1c:
18:19:ba:5e:f8:d5:b8:fe:ab:88:f1:df:73:ad:0f:64:5f:db:
88:b2:0d:af:5b:07:b7:c0:f7:67:14:23:7c:85:a7:cb:07:8c:
f4:52:c6:b3:e3:a6:be:39:93:6a:29:90:1d:a5:4a:0a:e2:e3:
ab:2d:1c:a0:c1:7b:64:c1:29:55:18:b4:02:96:51:58:b6:66:
9b:1f:4c:32:88:8e:c6:6a:23:13:0a:4b:6e:3f:54:7b:68:96:
31:37:34:ec:eb:d5:6a:d0:d1:db:65:50:ae:4f:28:25:54:77:
97:71:b0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:41:20 2026 by rpki-client