
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/94469964A5CA11F181152D707111F970.roa
File: 94469964A5CA11F181152D707111F970.roa (raw, json)
Hash identifier: QqrZhvjRVVLJYdk/4iDOjN1gnzEDjY7DvM5B+0DqUxE=
Subject key identifier: CF:A3:37:C7:22:FB:09:5E:EF:A4:E2:A1:65:AB:0C:80:BF:15:36:68
Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Certificate serial: 0C53
Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/94469964A5CA11F181152D707111F970.roa
Signing time: Tue 01 Sep 2026 06:01:32 +0000
ROA not before: Tue 01 Sep 2026 06:01:32 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 4637
IP address blocks: 103.246.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 18:51:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3155 (0xc53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Validity
Not Before: Sep 1 06:01:32 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a966a3b-d9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:56:3c:bd:29:56:b9:d3:86:db:5d:50:e1:a5:
71:89:90:47:61:90:b1:3c:6d:a5:c8:d3:6d:f5:69:
2b:24:5c:55:2d:e4:66:76:93:f6:17:d4:d9:d4:a1:
40:26:0b:92:a0:95:ae:b4:a4:bc:7c:c0:99:b2:0e:
af:e1:8c:f9:75:29:97:4b:c7:b2:ca:7c:35:3b:a5:
87:49:fc:27:24:0c:84:85:35:a4:a9:6a:cb:3b:45:
67:a8:52:83:ee:08:6c:8d:9a:9f:5e:14:12:82:c3:
65:ce:78:d2:f6:6d:97:c0:43:e1:ec:c4:c6:f0:6d:
55:40:4a:8d:85:42:35:96:20:b0:7a:b2:b5:63:be:
ea:43:84:60:af:e6:20:c5:1c:f5:db:82:97:1b:a7:
a2:30:be:60:51:bb:70:df:a5:76:24:76:67:4e:ee:
92:cc:3f:6d:69:7e:9c:01:43:e8:1b:33:ee:da:47:
22:88:1f:59:1b:2d:b5:7b:e1:e6:31:03:6a:24:41:
09:2e:48:2a:39:b7:a8:1b:5c:e9:de:4b:a9:69:b9:
82:51:13:c2:7d:3d:dc:41:62:ac:84:b4:79:a6:15:
bc:b4:e2:d2:f5:cb:ac:00:25:ec:66:3c:5f:e4:05:
e1:33:61:b6:98:7a:af:bb:48:0a:53:e4:a8:ac:18:
76:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A3:37:C7:22:FB:09:5E:EF:A4:E2:A1:65:AB:0C:80:BF:15:36:68
X509v3 Authority Key Identifier:
keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/94469964A5CA11F181152D707111F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.246.255.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:1a:15:7e:3d:be:69:7a:72:10:5c:bd:ee:64:71:f0:0b:02:
80:f8:40:91:b3:eb:b6:4c:90:e2:cd:b1:70:9a:0e:d5:cd:d6:
25:ac:68:db:61:31:d1:7d:5e:52:d2:f2:c8:27:95:ec:a3:02:
ac:3b:85:42:4f:d0:e0:c0:6a:b8:df:a7:2f:64:c7:05:61:e5:
81:84:2d:31:bd:20:80:58:ca:de:d6:f0:d0:ff:2c:0f:8c:e9:
87:9b:38:3a:2d:dc:56:7f:b1:8e:a5:ac:01:61:b8:34:72:f4:
f1:3d:ce:42:1d:7f:98:75:0c:04:de:c8:b5:10:51:39:60:f3:
7f:08:a2:85:24:6f:ac:39:0f:75:c7:4e:c7:bc:12:3b:f1:be:
a4:a8:c7:f7:64:49:28:20:bd:9c:52:29:10:5c:f4:bd:1f:a0:
0e:67:72:c9:51:42:51:0f:07:4c:50:6a:56:a9:4e:01:46:7a:
08:12:7d:9c:4a:95:c7:22:0a:13:69:ac:4c:c8:86:27:cf:d1:
74:0d:25:b0:1e:39:c3:8d:a0:56:24:72:28:bd:15:4c:2a:55:
73:02:3b:dc:c6:4b:7b:a8:ae:61:9e:bd:94:a2:e9:47:2c:3a:
b2:72:bd:79:32:84:4f:5d:11:7f:c3:51:c1:30:16:06:61:d1:
77:f9:a1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:33:37 2026 by rpki-client