
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/5407E320236911EA9967DA1CC4F9AE02.roa
File: 5407E320236911EA9967DA1CC4F9AE02.roa (raw, json)
Hash identifier: yob4fNVclP9e/XfDAOctMejkUsHSd7sQtI7hbNABoZY=
Subject key identifier: C8:FF:36:30:29:A7:BA:5C:E3:31:25:36:7B:20:97:4B:BB:56:C9:1A
Certificate issuer: /CN=A919040F/serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
Certificate serial: 0CC4
Authority key identifier: C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/5407E320236911EA9967DA1CC4F9AE02.roa
Signing time: Fri 02 Oct 2026 19:36:19 +0000
ROA not before: Fri 02 Oct 2026 19:36:19 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 16509
IP address blocks: 103.143.45.0/24 maxlen: 24
2001:df1:6e80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl
rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 18:42:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3268 (0xcc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919040F, serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
Validity
Not Before: Oct 2 19:36:19 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ac007b3-33a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:79:46:24:35:46:08:78:d7:43:1f:d0:39:67:
f3:c3:d5:cb:bc:6c:39:8b:53:56:bd:45:34:e9:a3:
91:eb:ec:dd:b0:94:2c:a0:3d:3c:b7:da:6b:ac:7b:
22:ab:86:6c:7c:35:22:eb:40:2d:b0:ed:0e:1f:01:
44:5d:9c:a7:03:4c:07:9f:5c:82:52:80:35:10:9f:
1f:52:e9:b4:f8:a0:c9:44:6d:8f:9c:6a:4c:3e:11:
bc:12:32:de:3f:cf:40:f0:ea:20:88:9f:fe:85:73:
67:56:f3:53:92:5b:d8:79:6b:8e:82:a3:ff:de:38:
74:13:2c:4b:97:28:11:c8:45:cf:2f:41:8a:1d:33:
fa:88:af:c8:1c:7f:d1:67:a2:24:47:d2:fa:70:a6:
41:ea:97:42:80:bc:22:7a:f1:b7:6f:60:91:d6:1d:
4a:ce:25:09:a8:f1:7b:a7:cb:ef:c3:0a:bf:cc:82:
d1:ae:30:54:4b:f5:23:55:a9:5a:05:2b:dc:c2:26:
99:8a:cc:a3:55:13:2a:0f:ab:a6:09:6d:ce:eb:34:
67:2c:e2:1b:8b:3f:0d:74:ac:c7:e0:05:bf:0c:0d:
37:c1:57:79:41:8f:68:19:7c:f6:52:53:f2:11:a7:
ff:d4:a5:82:92:ad:56:ba:d6:19:d6:cb:0d:91:0a:
49:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FF:36:30:29:A7:BA:5C:E3:31:25:36:7B:20:97:4B:BB:56:C9:1A
X509v3 Authority Key Identifier:
keyid:C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/5407E320236911EA9967DA1CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.143.45.0/24
IPv6:
2001:df1:6e80::/48
Signature Algorithm: sha256WithRSAEncryption
7d:a5:fa:d9:08:85:ba:b5:56:12:6e:d2:fc:97:63:a8:5c:fa:
9a:c3:fa:e0:5d:ab:54:a5:50:b4:21:2f:66:2a:85:e6:5d:9c:
86:41:9f:ac:08:46:90:97:c6:d9:eb:23:76:33:30:25:af:b1:
e8:83:a4:ed:ba:af:5f:64:36:5d:75:54:95:b3:ba:c0:f8:dc:
cd:02:92:9d:aa:db:38:be:49:df:5a:2b:00:b4:a9:64:42:b9:
d8:17:0e:34:dc:1a:ba:8f:95:f2:45:65:0c:5c:48:a9:2d:2c:
c9:61:d1:7c:73:32:73:08:f5:cc:8a:d0:5d:c6:4f:75:3a:84:
7e:6d:dc:1e:2a:12:61:54:3d:be:0a:76:5f:94:95:77:e8:84:
00:6c:41:14:53:f0:f7:71:39:24:f3:f9:a1:97:59:e1:18:43:
7f:85:bf:9d:63:9f:2c:d8:2c:05:44:4a:17:57:43:bb:94:78:
a6:2e:7a:1f:8b:f0:af:03:f3:35:73:74:da:07:69:a3:5d:e9:
e5:6c:69:fc:f2:c9:9f:95:6d:fb:8f:02:a4:c8:aa:3b:78:27:
19:57:30:7c:53:80:9a:33:b1:41:b4:62:a8:57:c1:a3:0a:36:
fe:53:6e:78:75:79:ad:6a:1e:f1:97:19:c2:52:5d:fd:51:f8:
a9:78:35:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:15:18 2026 by rpki-client