
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/BB848D8675D911F1B46C33AD6CA30FBC.roa
File: BB848D8675D911F1B46C33AD6CA30FBC.roa (raw, json)
Hash identifier: hKK67kho1xmsmO4LWvmGhYdHu4g9sHo6GKRHNdTGbfY=
Subject key identifier: 1B:77:CD:33:0F:30:22:60:96:35:EA:92:8C:FC:57:11:64:18:BF:82
Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Certificate serial: 0C2C
Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/BB848D8675D911F1B46C33AD6CA30FBC.roa
Signing time: Thu 02 Jul 2026 05:49:04 +0000
ROA not before: Thu 02 Jul 2026 05:49:04 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 216138
IP address blocks: 103.246.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Jul 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3116 (0xc2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Validity
Not Before: Jul 2 05:49:04 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a45fbd0-0952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c9:cb:0b:c4:fd:e0:d1:70:2f:99:64:a0:db:
fb:22:16:fd:1e:2a:66:7c:87:56:8c:af:70:af:f4:
d0:98:8d:ae:c2:e9:47:52:f5:4c:46:ce:4d:d2:e9:
ab:aa:ba:79:5c:c1:59:fb:20:48:1a:23:f5:f7:61:
fa:8c:dd:84:81:c6:cd:9e:3e:f8:16:8b:f3:72:4c:
f0:4f:51:8a:71:d1:e5:00:da:2b:ac:cf:a9:eb:2f:
a1:19:82:ed:74:e7:37:03:a1:0e:b1:05:e7:b4:6d:
a2:00:00:63:f6:14:3f:44:42:fa:49:7d:d8:c7:d9:
17:8c:36:43:49:37:bb:c8:eb:b9:02:17:ac:16:2b:
c2:60:15:3a:f0:0d:fa:c7:65:ac:65:a0:7c:4c:d3:
54:af:8f:19:0c:06:55:01:6a:19:9c:c6:56:bc:e4:
81:56:af:f7:4c:9f:74:b4:49:26:3e:cd:4e:b1:7a:
d8:80:67:36:ac:a2:af:43:ab:c9:92:70:25:93:0e:
2e:51:da:1f:e9:8d:74:b8:72:b6:3e:b2:f1:63:3b:
49:6a:db:fa:e3:c9:57:92:87:a0:3b:e1:b6:f6:8e:
12:5d:3b:d0:fa:cc:04:ad:80:46:c2:df:a8:cd:c1:
72:d3:24:11:7f:95:b0:a8:50:ab:5b:f4:46:66:4e:
64:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:77:CD:33:0F:30:22:60:96:35:EA:92:8C:FC:57:11:64:18:BF:82
X509v3 Authority Key Identifier:
keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/BB848D8675D911F1B46C33AD6CA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.246.255.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:7d:df:51:e6:f3:47:7f:96:c0:ef:35:fb:7a:e6:88:7d:34:
f0:6c:ca:bb:62:f6:9e:99:1f:fd:ad:bb:38:25:71:dc:63:7c:
e2:a7:f9:11:0a:1a:5d:4b:6e:d8:e3:39:fe:15:f3:b3:54:9c:
b3:3b:94:b6:66:7c:89:c0:b6:04:8a:12:e7:2c:75:fc:c0:1d:
a5:c4:2c:0c:1a:1c:5b:82:a9:3b:57:1a:47:08:6b:28:6f:55:
dc:e6:9b:f4:aa:57:3b:a5:09:d1:7c:6d:97:cc:cf:75:16:5d:
c5:ed:96:57:13:94:33:e1:46:84:38:f0:6b:62:0f:81:c9:da:
52:c0:b7:bc:c7:0c:4a:c0:4f:7c:81:0a:62:3b:97:bb:7a:6f:
da:20:ef:1b:0a:41:41:4d:64:0c:ef:f7:e5:a4:6c:cc:75:3a:
d4:a3:07:9d:82:6d:bf:28:8b:9e:24:11:5d:bc:db:22:e5:0e:
9e:0b:94:d3:9e:e1:db:a3:d6:e1:7e:b3:24:f0:6d:bf:60:93:
f0:7a:15:96:28:e3:c6:b0:23:ed:ca:37:69:57:50:ea:9b:cf:
f2:fc:a7:79:c8:4b:67:fc:8c:18:3e:5a:ea:62:2a:01:91:f2:
f3:fa:54:2f:f7:18:27:a9:f0:61:27:f0:22:40:f9:7f:9b:b6:
13:c1:24:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:35:45 2026 by rpki-client