
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/1F59A248F69E11EC947BBC5EC4F9AE02.roa
File: 1F59A248F69E11EC947BBC5EC4F9AE02.roa (raw, json)
Hash identifier: dyH4e+gx3HXeT/oT8iwilMjLeLPk/EJ/gCFp5UvAwZM=
Subject key identifier: 95:6B:1A:81:B6:D4:7D:18:DC:41:52:B0:C6:9C:D6:02:41:D1:8F:3B
Certificate issuer: /CN=A917983D/serialNumber=6F00246A8588848C3A172752F32AE4EA30C680A4
Certificate serial: 039B
Authority key identifier: 6F:00:24:6A:85:88:84:8C:3A:17:27:52:F3:2A:E4:EA:30:C6:80:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwAkaoWIhIw6FydS8yrk6jDGgKQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/1F59A248F69E11EC947BBC5EC4F9AE02.roa
Signing time: Tue 11 Aug 2026 00:49:20 +0000
ROA not before: Tue 11 Aug 2026 00:49:20 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 139922
IP address blocks: 103.190.40.0/23 maxlen: 24
2001:df0:e440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.crl
rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwAkaoWIhIw6FydS8yrk6jDGgKQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 923 (0x39b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917983D, serialNumber=6F00246A8588848C3A172752F32AE4EA30C680A4
Validity
Not Before: Aug 11 00:49:20 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a7a7190-35ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:39:2f:82:ab:e5:b5:c5:91:c8:e2:25:c5:b5:
a2:18:af:2a:bf:85:35:c0:c0:a8:3f:ba:19:75:9f:
2b:cc:e9:fc:7f:8a:52:ef:33:82:1b:98:c1:df:2f:
88:b0:6e:ff:a2:69:be:7f:90:98:b3:42:bd:ae:fc:
06:41:d5:52:9d:97:18:82:c7:30:69:bc:89:52:67:
92:d8:64:95:09:1f:84:83:00:c8:0d:8e:02:94:fc:
9b:a6:a2:dc:75:75:62:d7:e6:c2:3f:5a:83:44:69:
cc:eb:ff:54:7c:ef:64:9f:31:7e:4b:6e:18:b1:08:
61:30:2a:9b:c5:2f:8f:d0:2f:3d:a7:d8:cb:ff:bc:
95:4f:b6:d0:8a:5e:be:cc:90:ea:c7:d6:3e:f5:90:
fc:8f:ce:af:3c:f1:9c:b6:41:18:65:99:94:b7:08:
dd:77:de:a9:ce:e5:17:81:5b:7f:9f:91:ab:92:e6:
3a:8a:27:7e:2d:43:15:c8:30:55:dd:60:0d:a8:d9:
0a:72:05:64:99:be:dd:b7:de:81:78:bf:c8:8e:52:
e2:05:96:fc:64:1c:6e:7b:7e:b5:dc:27:6d:c5:76:
03:25:fc:8d:cf:eb:4e:69:50:67:12:4a:f1:7c:f5:
d8:fd:f0:56:c7:ed:3d:f6:3c:fa:aa:4b:35:57:df:
f3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6B:1A:81:B6:D4:7D:18:DC:41:52:B0:C6:9C:D6:02:41:D1:8F:3B
X509v3 Authority Key Identifier:
keyid:6F:00:24:6A:85:88:84:8C:3A:17:27:52:F3:2A:E4:EA:30:C6:80:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwAkaoWIhIw6FydS8yrk6jDGgKQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/1F59A248F69E11EC947BBC5EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.190.40.0/23
IPv6:
2001:df0:e440::/48
Signature Algorithm: sha256WithRSAEncryption
3b:2a:a8:78:f3:48:67:70:56:94:35:e5:d2:10:bc:bf:52:28:
63:ed:66:5f:e5:9c:a8:18:03:1a:13:fe:db:f1:7e:fd:0d:4a:
fa:1d:65:08:c1:8f:44:9d:06:53:e3:78:0f:90:9a:70:eb:ce:
87:ca:60:c5:21:83:6f:d0:fa:46:28:fa:f7:19:dc:27:c6:f2:
88:cf:8e:8f:3b:27:2e:47:b2:b1:7b:f5:fe:03:44:eb:28:d6:
cd:35:2a:ac:b6:1b:3b:5d:92:f3:f3:7c:e1:d1:40:a0:5f:6c:
10:46:e0:24:a4:5c:00:d7:9b:15:8e:44:a2:f0:31:b1:48:7c:
26:b3:8c:31:6d:b3:fe:cd:68:86:93:e2:0a:05:a0:95:99:1f:
d2:41:64:78:d0:61:6a:d7:ba:9b:e8:ce:29:ef:4a:30:de:84:
82:61:d8:a1:31:f1:79:39:59:64:37:5f:4d:ae:c1:65:99:ac:
ee:91:60:24:ff:52:76:06:3a:8f:a6:0b:23:8a:94:d1:4d:3a:
95:19:90:4a:85:8d:ca:f7:26:75:ac:1d:38:c9:be:91:23:d5:
b0:42:4d:e9:03:f9:52:89:62:71:a7:12:91:d4:76:e0:c8:fa:
f3:8a:77:d0:4b:d5:5a:b7:13:24:fe:bd:5c:2f:67:32:f3:61:
3a:5a:30:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:21:16 2026 by rpki-client