
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/7E18ACF0C66811F084C00543C4F9AE02.roa
File: 7E18ACF0C66811F084C00543C4F9AE02.roa (raw, json)
Hash identifier: 7XFhCYpRi5MWgMi60pgzWpPeSkzwa4nMJXrUSx4/k1M=
Subject key identifier: A9:D4:0C:21:F9:DF:40:BB:F0:89:5B:BA:59:C7:07:AB:AB:76:59:3F
Certificate issuer: /CN=A911FFAB/serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010
Certificate serial: 0827
Authority key identifier: F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/7E18ACF0C66811F084C00543C4F9AE02.roa
Signing time: Tue 31 Mar 2026 21:27:03 +0000
ROA not before: Tue 31 Mar 2026 21:27:03 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 4764
IP address blocks: 103.18.148.0/23 maxlen: 23
103.18.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl
rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:58:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2087 (0x827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FFAB, serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010
Validity
Not Before: Mar 31 21:27:03 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cc3c26-d096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:2c:35:88:bf:0b:54:5c:53:fa:41:ef:92:
b8:94:1a:cc:66:6b:d8:84:3b:4b:d9:d3:f3:1c:31:
41:2f:84:d5:c5:99:26:36:15:db:55:ce:36:a4:86:
89:7b:3b:f9:3e:db:a7:ce:6f:9b:41:7c:94:37:07:
94:1b:bc:a8:6f:77:ee:91:23:20:25:f9:bd:2d:2e:
e5:b7:15:75:f4:0f:bf:56:e0:32:a6:fe:6f:00:d6:
94:8b:fa:64:f5:94:37:dc:1a:ab:f4:5c:90:36:fe:
a3:92:05:77:71:68:53:83:1d:5e:5f:91:6f:78:49:
35:9c:d9:31:27:2b:a7:fb:f5:e3:7f:07:f8:2c:84:
eb:5b:30:82:71:be:e3:4b:fd:ad:2b:38:aa:a7:90:
44:3c:c5:cf:b3:c8:34:a1:d0:62:a8:5f:74:8b:c2:
64:d9:85:b9:54:d2:28:52:4e:ab:73:94:22:b4:b6:
c5:8f:e4:5e:da:43:2e:46:dc:2c:52:f2:a1:31:92:
46:db:57:f5:c4:8c:2a:73:07:68:d7:03:60:e4:c6:
15:94:50:24:3d:22:3d:24:61:d3:51:cd:ec:a3:43:
88:ce:b4:2e:4d:54:4a:66:c3:71:f8:6e:50:64:d8:
b7:6f:71:95:ba:51:85:a8:78:70:27:33:31:52:db:
49:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D4:0C:21:F9:DF:40:BB:F0:89:5B:BA:59:C7:07:AB:AB:76:59:3F
X509v3 Authority Key Identifier:
keyid:F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/7E18ACF0C66811F084C00543C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.18.148.0/23
103.18.151.0/24
Signature Algorithm: sha256WithRSAEncryption
21:72:d7:65:0f:f7:f0:dc:d5:62:17:63:b2:e5:15:47:65:d5:
72:19:d4:cf:fd:95:bd:e8:3b:d3:32:a2:3b:9d:6d:94:d6:ea:
d6:97:23:ff:8a:b1:fb:32:1e:d2:23:40:1d:85:03:b2:6f:00:
ef:0e:70:28:d8:e3:a9:12:98:1f:32:d3:76:20:31:2c:74:5c:
e3:ce:86:8e:88:a1:a4:8a:0e:ee:a1:ba:c4:3d:51:f9:5b:78:
72:81:01:45:1a:ca:21:9e:41:9c:b0:b8:d4:af:d3:ea:4a:80:
10:3d:68:f6:4c:35:1c:60:38:6c:56:a6:e2:c1:0e:d2:3b:dc:
75:7a:7f:85:96:cf:49:d5:d3:ab:16:b3:e9:da:92:36:d7:e8:
c9:80:0d:8f:63:eb:3a:b5:b7:ce:df:8b:da:92:75:e1:37:18:
97:e0:07:e6:a2:b8:e1:1d:11:13:7e:5b:1f:f5:11:18:66:65:
13:d5:18:30:49:af:39:b1:b5:12:cc:8b:6d:03:52:bc:d9:0e:
12:30:8b:07:66:f5:0f:14:26:fa:c6:4c:7d:a6:bf:61:7f:82:
dc:f3:49:d1:60:b0:2e:d4:8a:f6:62:d5:48:3d:46:3f:76:b5:
02:85:d5:dc:6b:06:8a:f8:ce:a9:1a:b5:d3:c0:28:bc:91:b4:
5a:27:0f:1c
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUZGQUIxMTAvBgNVBAUTKEYwOEI2QTE2MzJDOUNBQzJFODY4OERFQTQ4ODdEOTMw
MkU5NTYwMTAwHhcNMjYwMzMxMjEyNzAzWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNjM2MyNi1kMDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxXksNYi/C1RcU/pB75K4lBrMZmvYhDtL2dPzHDFBL4TVxZkmNhXbVc42pIaJ
ezv5Ptunzm+bQXyUNweUG7yob3fukSMgJfm9LS7ltxV19A+/VuAypv5vANaUi/pk
9ZQ33Bqr9FyQNv6jkgV3cWhTgx1eX5FveEk1nNkxJyun+/Xjfwf4LITrWzCCcb7j
S/2tKziqp5BEPMXPs8g0odBiqF90i8Jk2YW5VNIoUk6rc5QitLbFj+Re2kMuRtws
UvKhMZJG21f1xIwqcwdo1wNg5MYVlFAkPSI9JGHTUc3so0OIzrQuTVRKZsNx+G5Q
ZNi3b3GVulGFqHhwJzMxUttJ1wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKnUDCH5
30C78IlbulnHB6urdlk/MB8GA1UdIwQYMBaAFPCLahYyycrC6GiN6kiH2TAulWAQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkZBQi9BQTdGQTQwMDE2
OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlzTG9hSTNxU0lmWk1DNlZZ
QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhJdHFGakxKeXNMb2FJM3FTSWZaTUM2VllCQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUZGQUIvQUE3RkE0MDAxNjkyMTFFQkI0NUQ4OTFEQzRGOUFFMDIvN0UxOEFDRjBD
NjY4MTFGMDg0QzAwNTQzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQBZxKUAwQAZxKXMA0GCSqGSIb3DQEBCwUAA4IBAQAhctdlD/fw3NVi
F2Oy5RVHZdVyGdTP/ZW96DvTMqI7nW2U1urWlyP/irH7Mh7SI0AdhQOybwDvDnAo
2OOpEpgfMtN2IDEsdFzjzoaOiKGkig7uobrEPVH5W3hygQFFGsohnkGcsLjUr9Pq
SoAQPWj2TDUcYDhsVqbiwQ7SO9x1en+Fls9J1dOrFrPp2pI21+jJgA2PY+s6tbfO
34vaknXhNxiX4AfmorjhHRETflsf9REYZmUT1RgwSa85sbUSzIttA1K82Q4SMIsH
ZvUPFCb6xkx9pr9hf4Lc80nRYLAu1Ir2YtVIPUY/drUChdXcawaK+M6pGrXTwCi8
kbRaJw8c
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:31:28 2026 by rpki-client