
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa
File: B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa (raw, json)
Hash identifier: N8v/F0kkHOcAXXcaXcs+RFT9ux96p8fZZgpGPcvAFVg=
Subject key identifier: 2A:87:94:D7:0F:44:DD:9D:0D:0B:05:CF:BE:96:FB:6F:55:F6:E6:32
Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial: 023E
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa
Signing time: Fri 07 Aug 2026 03:52:51 +0000
ROA not before: Fri 07 Aug 2026 03:52:51 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 38047
IP address blocks: 103.118.40.0/22 maxlen: 22
103.118.40.0/23 maxlen: 23
103.118.40.0/24 maxlen: 24
103.118.41.0/24 maxlen: 24
103.118.42.0/23 maxlen: 23
103.118.42.0/24 maxlen: 24
103.118.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 574 (0x23e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Validity
Not Before: Aug 7 03:52:51 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a755693-2607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9c:ee:b5:c8:50:71:73:04:5b:0a:aa:a7:9a:
82:4b:a2:b6:7d:55:d3:25:57:3c:c7:c6:31:de:51:
67:32:0f:73:ff:4f:61:f8:58:cb:ef:be:d1:b1:3c:
12:dd:59:56:ab:97:e5:d7:63:a6:17:35:29:c0:89:
95:45:20:3f:fd:db:47:b9:61:7e:6a:46:a2:84:cf:
16:47:57:ff:6c:e9:d4:ac:92:8d:4f:6d:02:13:2b:
93:27:37:42:a2:20:a7:27:09:52:91:2a:f5:94:08:
d3:71:57:57:eb:08:7f:53:b5:29:52:89:9e:2d:f9:
ea:1d:4b:44:cb:a3:ff:f9:b1:fe:ca:6e:7b:04:11:
9c:cd:f6:69:00:b2:33:36:73:f7:d1:3d:da:de:91:
16:4f:7d:78:b0:d2:fa:e0:9d:3a:5a:b4:52:6b:92:
ec:9e:29:f4:5e:41:11:f3:51:ee:05:15:b1:24:7d:
dd:1a:ea:76:90:e9:8d:9e:39:cb:50:bb:e2:29:dd:
8d:fc:f7:e9:67:b7:20:db:82:ab:99:d4:1e:31:39:
a0:fe:e3:e0:c0:73:2c:dd:07:2d:55:16:d8:aa:be:
6c:6a:00:c5:c8:bf:6a:92:26:0d:97:6c:14:f8:33:
73:08:70:92:ae:cb:ea:db:02:5f:53:3b:d7:77:2d:
8a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:87:94:D7:0F:44:DD:9D:0D:0B:05:CF:BE:96:FB:6F:55:F6:E6:32
X509v3 Authority Key Identifier:
keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.118.40.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:1d:36:3c:f6:09:0b:9d:ba:16:74:78:36:82:76:61:4c:06:
8a:71:2c:2f:b2:b2:17:21:28:16:f7:71:07:0d:f7:b9:da:84:
55:2a:d3:85:d3:1f:f2:e9:a2:0d:9a:b1:05:51:6f:50:bf:65:
06:d0:20:35:fb:ce:33:a4:7a:f0:0d:15:18:46:f9:28:83:9b:
42:2f:83:b1:f1:28:5c:5c:80:3d:4e:cf:7a:93:74:3d:42:e3:
17:92:ac:b4:b0:9f:ae:b5:55:8b:d0:7a:37:b8:b8:ee:16:75:
62:75:9c:38:96:2b:fc:c9:19:6d:9f:ed:f8:da:2d:f0:b8:23:
eb:40:8c:d7:3e:1c:67:9d:e1:1b:c9:35:7a:39:0e:f9:56:4f:
ea:a1:bc:d9:1b:49:55:93:a4:54:d3:5a:fc:fc:2d:d2:64:2d:
0b:73:ef:67:0f:cd:84:91:08:b1:90:3b:16:76:4b:23:06:07:
b2:c4:1c:bf:7d:c3:db:4c:18:6b:43:4c:45:4f:2f:e0:54:6c:
eb:67:bc:96:8c:3d:a5:23:13:a9:f1:71:ed:55:ec:5c:6c:ee:
1c:c5:14:73:a8:df:b4:9d:71:0f:dd:07:2b:85:28:8c:1a:2f:
c6:c9:b8:c4:27:3e:db:83:67:31:fc:8e:cf:35:b5:f9:8f:77:
ea:72:5a:79
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E2NkYxMTAvBgNVBAUTKEIyMkMzRDBBQkNEMzkxOTQ4NkEzRTYxRThENzg4OTIz
OTIyQkY2QTUwHhcNMjYwODA3MDM1MjUxWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTc1NTY5My0yNjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApJzutchQcXMEWwqqp5qCS6K2fVXTJVc8x8Yx3lFnMg9z/09h+FjL777RsTwS
3VlWq5fl12OmFzUpwImVRSA//dtHuWF+akaihM8WR1f/bOnUrJKNT20CEyuTJzdC
oiCnJwlSkSr1lAjTcVdX6wh/U7UpUomeLfnqHUtEy6P/+bH+ym57BBGczfZpALIz
NnP30T3a3pEWT314sNL64J06WrRSa5Lsnin0XkER81HuBRWxJH3dGup2kOmNnjnL
ULviKd2N/PfpZ7cg24KrmdQeMTmg/uPgwHMs3QctVRbYqr5sagDFyL9qkiYNl2wU
+DNzCHCSrsvq2wJfUzvXdy2KUwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCqHlNcP
RN2dDQsFz76W+29V9uYyMB8GA1UdIwQYMBaAFLIsPQq805GUhqPmHo14iSOSK/al
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY2Ri84RkNDOUQyOEM2
RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGtaU0dvLVllalhpSkk1SXI5
cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NpdzlDcnpUa1pTR28tWWVqWGlKSTVJcjlxVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0E2NkYvOEZDQzlEMjhDNkY5MTFFRTk3RTZGQjFEQzRGOUFFMDIvQjRCNkMyQjBD
MUFBMTFFRjgzQTMxRDZDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ3YoMA0GCSqGSIb3DQEBCwUAA4IBAQCcHTY89gkLnboWdHg2gnZh
TAaKcSwvsrIXISgW93EHDfe52oRVKtOF0x/y6aINmrEFUW9Qv2UG0CA1+84zpHrw
DRUYRvkog5tCL4Ox8ShcXIA9Ts96k3Q9QuMXkqy0sJ+utVWL0Ho3uLjuFnVidZw4
liv8yRltn+342i3wuCPrQIzXPhxnneEbyTV6OQ75Vk/qobzZG0lVk6RU01r8/C3S
ZC0Lc+9nD82EkQixkDsWdksjBgeyxBy/fcPbTBhrQ0xFTy/gVGzrZ7yWjD2lIxOp
8XHtVexcbO4cxRRzqN+0nXEP3QcrhSiMGi/GybjEJz7bg2cx/I7PNbX5j3fqclp5
-----END CERTIFICATE-----
Generated at Sat Aug 22 19:32:13 2026 by rpki-client