
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/FC03153ADBDD11F0AA14A9C858641951.roa
File: FC03153ADBDD11F0AA14A9C858641951.roa (raw, json)
Hash identifier: EdwwfeGg+I1FV0TO2Yo9fyXXUYr+6L+mXyJX65OsxaA=
Subject key identifier: 62:D5:A9:1F:5E:CF:C8:F3:04:BF:A4:30:A4:4C:86:28:11:A1:E1:7D
Certificate issuer: /CN=A913EFAB/serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3
Certificate serial: 0641
Authority key identifier: 9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/FC03153ADBDD11F0AA14A9C858641951.roa
Signing time: Mon 24 Aug 2026 23:44:01 +0000
ROA not before: Mon 24 Aug 2026 23:44:01 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 138926
IP address blocks: 103.170.178.0/24 maxlen: 24
103.170.179.0/24 maxlen: 24
2402:41a0::/32 maxlen: 32
2402:41a0::/48 maxlen: 48
2402:41a0:1::/48 maxlen: 48
2402:41a0:2::/48 maxlen: 48
2402:41a0:3::/48 maxlen: 48
2402:41a0:4::/48 maxlen: 48
2402:41a0:5::/48 maxlen: 48
2402:41a0:6::/48 maxlen: 48
2402:41a0:9::/48 maxlen: 48
2402:41a0:32::/48 maxlen: 48
2402:41a0:170::/48 maxlen: 48
2402:41a0:171::/48 maxlen: 48
2402:41a0:172::/48 maxlen: 48
2402:41a0:173::/48 maxlen: 48
2402:41a0:174::/48 maxlen: 48
2402:41a0:175::/48 maxlen: 48
2402:41a0:176::/48 maxlen: 48
2402:41a0:177::/48 maxlen: 48
2402:41a0:178::/48 maxlen: 48
2402:41a0:179::/48 maxlen: 48
2402:41a0:2380::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl
rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 22:45:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1601 (0x641)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EFAB, serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3
Validity
Not Before: Aug 24 23:44:01 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8cd740-f90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8e:1f:54:d5:4d:8d:4f:43:3c:a6:a2:1a:fa:
16:f3:b1:0a:ad:56:ca:53:03:68:63:2a:9e:b6:6a:
cb:1d:d4:20:2f:ea:8d:c5:d8:96:d6:05:34:3e:55:
5a:bf:23:96:1d:db:3d:af:74:d9:8a:ba:94:1a:90:
25:18:1e:73:d9:e6:eb:0d:20:dc:90:ac:10:39:be:
56:79:71:24:1a:ee:cf:ac:2e:cf:9b:3c:8b:e0:90:
8f:9f:39:5f:25:8c:a3:5c:1c:65:25:3e:8a:49:00:
d6:23:fc:67:27:62:25:db:d6:d1:af:9f:c1:54:20:
07:63:c3:d3:20:1c:2f:ef:c2:4f:3e:14:af:10:c8:
0a:08:0f:a5:e5:4e:e5:7d:d3:8d:25:13:65:5e:4f:
29:73:ff:e1:fa:3c:65:ac:fd:50:5d:59:a7:a8:9e:
c9:a2:e1:5c:1c:4e:88:6f:2f:13:f9:37:4b:5b:0c:
46:2f:c7:cd:43:ac:e3:44:34:ad:fe:bf:18:db:a0:
50:94:9e:62:37:83:35:6c:be:d1:80:f1:2e:77:f2:
70:6e:fb:8b:e4:54:38:36:cd:9e:56:e4:1f:dc:78:
bf:92:a5:4a:34:3c:35:15:5c:1e:c4:46:7b:0d:9a:
44:5a:0b:60:f3:1c:c8:56:82:64:22:70:c6:e2:52:
63:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D5:A9:1F:5E:CF:C8:F3:04:BF:A4:30:A4:4C:86:28:11:A1:E1:7D
X509v3 Authority Key Identifier:
keyid:9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/FC03153ADBDD11F0AA14A9C858641951.roa
sbgp-ipAddrBlock: critical
IPv4:
103.170.178.0/23
IPv6:
2402:41a0::/32
Signature Algorithm: sha256WithRSAEncryption
53:12:e6:cd:81:e8:7c:33:31:a9:df:56:d4:3a:93:14:c8:0a:
b5:2c:54:61:ae:54:23:19:64:a0:0d:f4:ca:b6:69:42:71:6e:
d1:c0:8b:fe:a4:5e:70:59:65:79:af:6d:80:10:e3:a8:c3:43:
2b:be:23:1a:62:1a:d7:11:8c:7c:42:5f:24:dc:97:94:b4:39:
fd:ae:5f:03:0e:fc:51:a1:85:35:63:94:ea:29:59:07:06:cf:
6b:64:3c:8a:bd:be:e9:1d:a7:5c:3b:8b:57:40:01:ac:9a:9d:
26:ad:cc:c0:52:4d:73:85:aa:8c:75:0d:9b:84:70:97:63:91:
bd:e6:bc:e9:03:a6:69:b7:04:8b:6a:83:27:f7:ec:80:03:06:
67:c0:2d:4a:0e:72:ec:35:60:5c:23:00:82:d7:96:6b:bf:d6:
34:29:52:12:b8:3b:dd:8e:91:09:4a:46:df:9d:e7:c7:d3:b1:
8d:45:1a:43:4b:58:26:c0:2e:28:60:67:88:6b:e5:70:57:5c:
b1:17:39:8b:5e:f7:fc:23:6a:40:31:17:2c:fa:8a:d5:06:23:
a2:38:38:4f:39:14:d7:2f:4f:54:44:73:9c:63:bf:5f:b2:da:
99:27:57:b5:4a:09:21:81:32:99:fa:b7:20:56:bd:7e:2d:51:
9d:a2:28:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 17:05:37 2026 by rpki-client