
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/D1A879DA769011F18B30BBE765A30FBC.roa
File: D1A879DA769011F18B30BBE765A30FBC.roa (raw, json)
Hash identifier: MWgXgLvg84RJCX9V3qs+7dPPh/hqmJ2OanGVl5DYgwY=
Subject key identifier: 4D:3F:B9:92:DC:03:85:BB:BD:00:04:8E:3F:82:0C:9B:F6:8D:9D:C6
Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Certificate serial: 1E3A
Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/D1A879DA769011F18B30BBE765A30FBC.roa
Signing time: Fri 03 Jul 2026 03:41:12 +0000
ROA not before: Fri 03 Jul 2026 03:41:12 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 136525
IP address blocks: 103.246.110.0/24 maxlen: 24
103.246.111.0/24 maxlen: 24
111.88.136.0/24 maxlen: 24
111.88.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl
rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 16:13:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7738 (0x1e3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A, serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Validity
Not Before: Jul 3 03:41:12 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a472f58-41c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:f6:a1:0b:67:23:d2:8b:8b:99:0f:12:92:
90:5e:bc:42:0a:d7:38:16:03:06:f5:df:e1:42:88:
23:b6:75:62:3e:27:34:25:68:ef:49:5d:95:d0:3f:
85:35:10:34:63:5c:54:05:f8:ea:9e:f5:74:06:90:
1f:e9:d0:f4:93:51:a9:34:67:3b:d3:87:04:00:9d:
54:c4:22:db:45:8f:c5:0f:2b:20:a9:93:4b:b9:15:
79:24:c7:5f:e2:2a:56:e9:25:f3:c2:74:04:53:41:
e8:b5:6d:43:8a:ac:8d:5d:12:db:33:f3:f8:fc:77:
a7:18:0a:08:47:21:ad:7e:4b:3a:50:3f:fa:83:2f:
65:67:b8:aa:5d:ba:ad:9b:b1:de:fa:74:2f:54:4d:
05:93:08:b0:8b:dd:eb:b7:f5:ed:10:28:2c:95:bf:
ba:b0:e7:dd:4e:d4:64:40:cd:da:3b:bc:e7:92:0b:
53:c5:5c:e2:b5:cc:b2:9e:5d:61:62:63:7e:0c:36:
72:71:b8:96:c4:48:16:ca:f3:cc:03:36:83:95:2d:
b2:da:c6:9f:38:9a:92:82:e3:21:24:7f:ac:83:6e:
75:b7:1b:23:c7:5d:f8:cc:42:03:34:c8:ea:63:b4:
93:e2:fc:b1:55:16:34:af:d6:fa:c4:b5:05:17:dd:
32:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3F:B9:92:DC:03:85:BB:BD:00:04:8E:3F:82:0C:9B:F6:8D:9D:C6
X509v3 Authority Key Identifier:
keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/D1A879DA769011F18B30BBE765A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.246.110.0/23
111.88.136.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:d9:67:be:0c:13:50:c0:f1:bd:ba:67:b3:8f:54:bb:e3:6f:
41:fc:66:d7:8c:7e:3d:77:2c:1d:c1:af:f2:50:93:48:28:c5:
05:62:45:b4:b7:0e:93:94:29:05:bd:ce:d1:60:46:36:6b:6f:
8e:9c:63:88:8b:a3:04:2b:9b:27:e0:91:7d:d9:c5:1a:a6:1a:
d1:90:0e:c0:40:d9:72:c0:b9:0e:9b:c1:cd:22:d5:f1:45:ad:
4a:8a:e0:3c:72:ab:ac:f2:50:8b:a1:e2:3b:af:9f:b3:08:71:
85:fe:8f:0e:f3:1e:d8:a1:35:22:a5:cc:49:55:0c:21:7a:87:
d4:0d:83:64:8a:23:20:b8:d4:a0:93:d1:85:f0:5d:ff:e1:35:
0d:91:e9:d7:fb:ca:12:48:6a:bd:c3:51:80:6f:72:62:8f:79:
0b:6b:45:00:c3:c6:6d:c9:85:0e:3d:5a:65:1b:16:05:92:77:
af:40:93:95:3d:38:f9:31:14:7f:1f:59:14:47:bf:43:10:44:
28:55:33:73:a7:4f:24:8e:97:05:af:cd:82:60:c9:fa:2c:b9:
d2:af:a6:fa:c8:b0:91:55:96:c5:29:3b:b1:d2:14:a3:d6:6d:
52:ef:26:c6:c5:5e:27:80:01:00:4a:3c:b8:9e:7c:9a:04:33:
f4:9c:ca:52
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICHjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E4NEExMTAvBgNVBAUTKDhBMUExMEVCOEZCQTQ1QzIxNTJDQTg5NTZGNDMyRjlB
ODEzOTYwM0EwHhcNMjYwNzAzMDM0MTEyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQ3MmY1OC00MWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvcT2oQtnI9KLi5kPEpKQXrxCCtc4FgMG9d/hQogjtnViPic0JWjvSV2V0D+F
NRA0Y1xUBfjqnvV0BpAf6dD0k1GpNGc704cEAJ1UxCLbRY/FDysgqZNLuRV5JMdf
4ipW6SXzwnQEU0HotW1DiqyNXRLbM/P4/HenGAoIRyGtfks6UD/6gy9lZ7iqXbqt
m7He+nQvVE0Fkwiwi93rt/XtECgslb+6sOfdTtRkQM3aO7znkgtTxVzitcyynl1h
YmN+DDZycbiWxEgWyvPMAzaDlS2y2safOJqSguMhJH+sg251txsjx134zEIDNMjq
Y7ST4vyxVRY0r9b6xLUFF90y1wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFE0/uZLc
A4W7vQAEjj+CDJv2jZ3GMB8GA1UdIwQYMBaAFIoaEOuPukXCFSyolW9DL5qBOWA6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTg0QS8xODA1MTkxQUUx
RUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJjSVZMS2lWYjBNdm1vRTVZ
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lob1E2NC02UmNJVkxLaVZiME12bW9FNVlEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0E4NEEvMTgwNTE5MUFFMUVGMTFFNjlEMzY1MDFCQzRGOUFFMDIvRDFBODc5REE3
NjkwMTFGMThCMzBCQkU3NjVBMzBGQkMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQBZ/ZuAwQBb1iIMA0GCSqGSIb3DQEBCwUAA4IBAQDI2We+DBNQwPG9
umezj1S7429B/GbXjH49dywdwa/yUJNIKMUFYkW0tw6TlCkFvc7RYEY2a2+OnGOI
i6MEK5sn4JF92cUaphrRkA7AQNlywLkOm8HNItXxRa1KiuA8cqus8lCLoeI7r5+z
CHGF/o8O8x7YoTUipcxJVQwheofUDYNkiiMguNSgk9GF8F3/4TUNkenX+8oSSGq9
w1GAb3Jij3kLa0UAw8ZtyYUOPVplGxYFknevQJOVPTj5MRR/H1kUR79DEEQoVTNz
p08kjpcFr82CYMn6LLnSr6b6yLCRVZbFKTux0hSj1m1S7ybGxV4ngAEASjy4nnya
BDP0nMpS
-----END CERTIFICATE-----
Generated at Wed Jul 22 02:32:36 2026 by rpki-client