
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/FF037E8C242A11ED9547B486C4F9AE02.roa
File: FF037E8C242A11ED9547B486C4F9AE02.roa (raw, json)
Hash identifier: F9A0wbG9NVz5Hpz2mCwKTslS2OQaqnT/r9honcurHU0=
Subject key identifier: 08:AC:CC:FD:71:09:FA:92:47:A7:44:49:10:C1:3E:B1:B3:F6:D9:3B
Certificate issuer: /CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694
Certificate serial: 034B
Authority key identifier: A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/FF037E8C242A11ED9547B486C4F9AE02.roa
Signing time: Thu 01 Oct 2026 01:49:09 +0000
ROA not before: Thu 01 Oct 2026 01:49:09 +0000
ROA not after: Sat 30 Jan 2027 00:00:00 +0000
asID: 136789
IP address blocks: 103.186.104.0/23 maxlen: 24
2400:6fa0::/32 maxlen: 34
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl
rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 01:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 843 (0x34b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918016E, serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694
Validity
Not Before: Oct 1 01:49:09 2026 GMT
Not After : Jan 30 00:00:00 2027 GMT
Subject: CN=6abdbc15-b765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b1:f0:19:0b:83:1d:d8:ea:10:d3:b1:48:5f:
e3:fa:a2:11:a6:6b:c9:a7:24:b2:11:ef:9e:f9:be:
e2:9c:43:88:b9:3b:e2:a7:57:e8:09:e3:4c:4f:e2:
8d:60:dd:82:21:46:11:86:a8:05:a1:12:bb:45:5e:
90:80:00:fe:0b:d1:d0:f4:b4:a8:cd:ec:92:f4:bf:
d4:9c:e0:b7:cf:e2:ba:a1:01:4a:77:2a:ee:48:28:
29:44:e6:8b:58:21:ea:08:32:04:0e:c6:e5:4f:23:
ba:82:7b:c2:dd:7f:8b:27:aa:e2:47:8d:da:04:6e:
c8:a8:56:1f:a7:8e:ce:77:40:a5:da:28:31:ba:1d:
b3:c5:a5:97:87:7d:eb:fc:db:e0:93:22:91:e8:1e:
e3:03:9c:25:49:e4:06:52:b0:eb:72:3a:61:6f:fd:
7b:13:d5:8e:4a:6d:6b:41:6b:87:76:6f:44:78:c9:
2e:8f:d3:95:18:ae:d8:13:47:97:b8:f4:e7:ec:af:
ce:d8:eb:81:67:5a:5c:30:86:6c:4f:25:2e:f2:29:
dd:dc:0a:2e:1c:13:f8:d6:b3:bb:ba:09:06:44:1f:
60:50:50:a2:4e:7f:5e:a4:1b:a7:6e:09:5f:f2:b3:
62:51:0f:bf:5c:03:ab:aa:02:df:02:68:69:08:17:
03:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AC:CC:FD:71:09:FA:92:47:A7:44:49:10:C1:3E:B1:B3:F6:D9:3B
X509v3 Authority Key Identifier:
keyid:A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/FF037E8C242A11ED9547B486C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.186.104.0/23
IPv6:
2400:6fa0::/32
Signature Algorithm: sha256WithRSAEncryption
4a:2e:8f:76:5d:5d:32:2e:ca:52:6f:bf:b0:26:c9:ee:72:2b:
8e:48:a3:c5:89:7e:58:f2:c7:9e:2a:6e:4e:0d:03:1e:b8:44:
ce:92:25:17:95:1b:ad:b3:f1:c9:56:56:2f:dd:70:ca:e8:4c:
7d:4d:c6:f3:dc:b6:7d:2d:39:52:03:81:f3:79:8c:5b:1f:cd:
11:b6:09:9a:a9:68:ca:56:01:7c:32:51:ce:3d:e1:33:ad:4c:
be:d4:4d:0b:e5:73:e6:0c:f3:99:cf:11:19:81:75:84:59:78:
c1:16:9e:1e:96:62:be:7f:78:bd:ea:f7:86:d6:83:a0:da:47:
dc:34:eb:fa:ca:b4:9c:b1:8b:78:96:00:7f:31:20:94:aa:5c:
e9:21:dd:7a:a4:04:c0:2f:b8:4e:61:69:7c:b9:4c:2e:3a:7c:
53:db:f3:63:d8:60:81:f1:6f:b3:f5:28:9b:d8:4f:bc:c2:1a:
1b:8a:0f:49:d3:71:0f:5a:a8:fe:3a:2f:46:9e:75:57:eb:fa:
b6:34:d6:21:5a:e2:20:99:d9:fc:47:b2:25:6d:d7:cb:69:a4:
dc:6b:56:fe:4c:28:da:8f:88:a5:f0:7d:9b:18:36:f0:dc:45:
3d:8a:19:73:5b:4e:ee:a1:8d:df:57:9e:e3:a7:07:02:7d:68:
e2:cf:3a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:52:09 2026 by rpki-client