
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/A8F4AE389D7E11EF91A24C73C4F9AE02.roa
File: A8F4AE389D7E11EF91A24C73C4F9AE02.roa (raw, json)
Hash identifier: sJJVQcrcDn8bKf98XRrR/T0aEFVHTC976St8NAsOMvU=
Subject key identifier: F1:7F:B0:D2:8A:66:5E:7F:51:3D:FC:2A:06:74:24:E2:37:A5:3C:2B
Certificate issuer: /CN=A917B736/serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17
Certificate serial: 018F
Authority key identifier: 30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/A8F4AE389D7E11EF91A24C73C4F9AE02.roa
Signing time: Mon 05 Oct 2026 05:54:15 +0000
ROA not before: Mon 05 Oct 2026 05:54:14 +0000
ROA not after: Mon 31 Jan 2028 00:00:00 +0000
asID: 8075
IP address blocks: 103.103.44.0/23 maxlen: 23
103.103.46.0/23 maxlen: 23
2401:ef40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl
rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B736, serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17
Validity
Not Before: Oct 5 05:54:14 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=6ac33b86-34d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:33:18:d2:67:7d:a5:a9:55:e0:ba:4b:25:
6f:2d:fa:ac:76:a1:6d:33:85:51:7c:99:6e:3a:a5:
18:e1:98:0f:ea:d1:81:b7:ea:90:73:a9:c4:bd:37:
b4:07:c5:f9:60:4c:ed:5e:9d:56:78:65:a9:a6:38:
da:16:04:f7:55:44:e0:d2:57:b1:9c:7f:03:56:5f:
18:e1:c9:5c:32:0a:94:52:0d:82:b4:bb:c3:e7:13:
c2:3d:08:e4:e7:11:97:0a:4a:e0:04:26:9b:40:79:
a6:a7:16:87:b5:2d:2d:07:5b:6b:ec:85:44:ff:72:
05:c0:c6:4a:b1:d2:36:fc:c8:08:21:71:66:e5:be:
ec:95:b7:b3:82:43:cf:e1:f3:b1:b3:5a:8e:b7:06:
fc:5e:c7:d8:e1:bf:d7:ff:d4:6b:ff:08:54:85:6b:
9c:4e:bc:c2:e4:78:07:ab:a9:7b:ec:63:78:6f:77:
31:9b:46:a0:08:f4:3f:59:e3:3a:a6:58:18:4d:92:
20:1f:a0:28:db:24:20:61:c9:db:41:8c:c0:e8:05:
d5:af:a7:2e:9d:8e:48:ec:3e:4a:e2:a2:ca:89:2c:
ba:e6:48:d7:74:17:6f:d7:c4:6b:44:5a:95:aa:a4:
63:08:cb:ef:fb:97:53:87:29:de:a4:65:2a:d4:32:
27:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7F:B0:D2:8A:66:5E:7F:51:3D:FC:2A:06:74:24:E2:37:A5:3C:2B
X509v3 Authority Key Identifier:
keyid:30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/A8F4AE389D7E11EF91A24C73C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.103.44.0/22
IPv6:
2401:ef40::/48
Signature Algorithm: sha256WithRSAEncryption
19:c0:87:06:2e:98:3b:b8:6a:54:fd:b3:46:ea:64:53:d0:20:
fa:aa:fe:75:e8:66:c6:f7:1c:de:28:7b:91:51:83:3c:ac:f5:
1e:bc:78:e7:b3:d9:90:68:af:8a:aa:61:08:40:8c:3c:2d:54:
a6:24:5a:a8:fa:8c:16:28:a9:08:f7:8c:05:ac:8b:15:06:8e:
fa:cc:80:06:9b:d4:76:19:00:5a:78:af:24:bd:cf:6d:1d:b4:
77:a8:c0:f8:ca:87:f0:34:b4:9d:f3:c9:6f:92:81:8b:89:e8:
95:ab:a0:2a:72:1c:5c:00:e0:b7:42:93:cb:5e:21:29:f5:35:
0b:8d:c9:71:4e:a0:e9:98:5e:b6:ec:5c:59:c0:7e:ed:05:d8:
d7:4a:73:28:ab:cd:7f:b6:50:41:bf:70:f5:21:ac:b0:be:c5:
d4:ac:60:86:5c:9f:7e:d1:9a:f4:e5:7a:c0:a1:6b:53:bc:d5:
34:cf:ed:f7:43:d3:b1:bf:b0:7c:1d:68:ce:12:52:52:b6:1b:
99:aa:80:62:b7:35:a0:51:af:74:dc:b1:d9:99:48:e8:cd:37:
1e:2f:5a:46:b2:b5:22:50:c1:72:b0:07:6b:e0:e2:79:57:00:
75:82:32:cc:e3:7e:c2:d3:00:14:9d:ae:5f:9c:34:14:43:6f:
fa:19:65:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:23:47 2026 by rpki-client