
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/BA16840475D911F1B46C33AD6CA30FBC.roa
File: BA16840475D911F1B46C33AD6CA30FBC.roa (raw, json)
Hash identifier: /qKxnSXL8e1JhFVlrKwLNg4T/NwR0oewdz+ElfcHN+w=
Subject key identifier: 95:2E:A6:6D:E4:89:77:79:32:45:86:13:FA:A5:0C:30:3E:0A:3F:6A
Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Certificate serial: 0C2B
Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/BA16840475D911F1B46C33AD6CA30FBC.roa
Signing time: Thu 02 Jul 2026 05:49:02 +0000
ROA not before: Thu 02 Jul 2026 05:49:02 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 202736
IP address blocks: 103.246.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Jul 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3115 (0xc2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Validity
Not Before: Jul 2 05:49:02 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a45fbcd-fdb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:6a:b4:b7:41:d7:12:3c:e5:41:dc:98:45:
bd:78:12:77:c8:64:4c:33:40:ce:1d:63:bd:9e:ec:
78:3c:64:59:42:eb:a2:cd:b2:0c:8a:0d:a2:90:91:
bf:93:47:fb:3e:5c:f7:03:d9:86:f8:40:90:d7:4f:
2b:f1:fd:9c:73:2e:2f:bb:cb:e6:5d:96:31:02:c0:
b8:2d:6f:6e:36:cb:19:32:c7:61:51:d9:47:2a:c1:
41:d3:eb:13:82:05:74:b6:4f:bb:9a:60:2c:f3:b2:
dc:f5:36:7b:63:dc:c9:28:44:9e:f5:65:b4:68:0c:
df:ea:c8:93:08:a3:fb:12:f4:26:ea:2f:3e:df:b3:
74:48:57:1d:cd:a4:14:37:6e:76:1d:37:0c:c5:a0:
4a:fd:84:71:24:14:64:81:2e:95:7e:2d:6a:c7:fd:
d4:1a:7b:6a:c2:07:6e:dd:48:2b:7f:f8:11:00:76:
e6:4b:e2:66:53:81:13:70:39:d6:7e:a2:58:52:43:
ce:ba:39:65:1d:02:27:26:5e:c7:84:7d:5d:39:02:
0e:95:cf:8f:bf:0d:2b:bb:3e:ed:ff:33:68:fb:dc:
25:7c:9f:b2:7d:23:cf:61:e3:95:a2:23:b8:a8:a4:
09:90:8e:48:bf:ce:d6:9f:61:7b:7c:bb:1b:65:f7:
e5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2E:A6:6D:E4:89:77:79:32:45:86:13:FA:A5:0C:30:3E:0A:3F:6A
X509v3 Authority Key Identifier:
keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/BA16840475D911F1B46C33AD6CA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.246.255.0/24
Signature Algorithm: sha256WithRSAEncryption
28:7f:eb:b0:1b:1a:fa:46:db:47:c7:10:f9:60:1a:f1:0e:9b:
5a:a7:47:4f:19:22:50:75:e7:d7:c7:16:e2:64:0f:57:12:65:
cb:b8:e4:0a:66:4d:11:44:66:65:d8:a9:32:af:18:aa:a3:96:
37:56:88:bb:30:fa:42:19:f0:84:92:e1:7e:73:01:6a:be:59:
05:a9:4b:08:23:ac:3d:4d:af:da:fc:ca:c7:70:c4:55:2e:b3:
b2:e4:79:aa:db:d1:31:6d:cd:1d:99:d5:1b:19:91:72:65:eb:
04:0b:4a:ac:b0:a1:c7:93:3a:c5:bb:6f:09:c1:f3:56:e2:af:
6c:3b:36:d7:3f:7a:1e:60:d0:8a:3a:b0:17:de:74:50:a6:68:
bf:88:d2:ed:46:b0:0a:57:6f:c6:ba:59:d4:cd:95:1e:c5:97:
4c:3e:23:97:3f:e4:e8:6d:62:36:e2:f2:0b:8b:32:39:bd:0d:
6f:f0:aa:b5:32:2f:60:24:cc:ef:ef:b1:cf:32:7d:c1:b7:41:
31:23:3a:7b:4c:9b:54:0d:ef:90:19:5b:bb:a2:40:a9:bc:63:
b3:8a:fb:92:20:d5:dd:02:21:06:63:0b:21:fd:c3:7c:0a:a6:
21:93:85:ff:d8:e9:37:00:7f:ca:2f:b6:49:9c:e9:e5:83:fc:
22:21:ce:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:35:46 2026 by rpki-client