
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/B18D8C2C2A4111EBA1B1BB3DC4F9AE02.roa
File: B18D8C2C2A4111EBA1B1BB3DC4F9AE02.roa (raw, json)
Hash identifier: jDWTj1CH9kzVVP1BL/M5YfXchDhUlvJZPClkLUm6R8g=
Subject key identifier: 50:C3:CA:E5:9A:C5:DB:91:0C:31:BC:A7:0D:90:E9:60:0F:FF:85:A3
Certificate issuer: /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial: 09B0
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/B18D8C2C2A4111EBA1B1BB3DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:13:36 +0000
ROA not before: Tue 20 May 2025 21:50:54 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 38296
IP address blocks: 203.151.104.0/24 maxlen: 24
203.151.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2480 (0x9b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Validity
Not Before: May 20 21:50:54 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48fe0-465e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:fc:56:cb:74:e6:71:86:c1:ec:c5:2c:5d:
aa:e8:bc:d8:27:6d:ba:b0:58:3c:8f:cc:4d:17:81:
5f:67:22:3a:d0:c4:5f:8f:ed:93:74:fb:f3:32:17:
9a:0e:36:c4:47:ce:d0:c6:2c:ca:9e:0f:b5:6f:fa:
56:8d:d0:12:11:ad:f2:92:35:33:23:b7:4a:89:e5:
5e:a7:be:96:71:42:21:c0:7c:1d:a9:a2:99:9d:16:
29:24:87:57:f6:cc:7f:ce:19:9d:6b:0c:f2:cb:0d:
72:37:ce:9c:ba:de:eb:2b:ad:61:4c:27:d3:08:ee:
a8:88:73:98:09:e4:4f:4f:df:b0:9f:b2:89:f6:b1:
d6:8f:17:3a:05:86:98:c7:04:af:59:65:7c:54:0a:
51:c4:62:33:41:4b:3a:f1:09:27:89:06:5b:1c:7c:
e4:86:b3:c7:89:e2:72:cf:7d:4f:47:e8:83:10:96:
2b:c9:e2:df:f9:b8:36:14:9c:a9:af:ff:45:f3:99:
0f:3b:b0:b2:7f:11:22:f4:65:10:80:2a:62:2f:65:
53:52:a9:90:95:7a:ce:3e:59:a0:0b:95:d6:a6:50:
35:4b:fe:3a:1f:93:0c:cc:69:3f:1b:8c:93:d0:1e:
ba:60:69:6a:d1:a4:8f:99:2d:81:96:57:26:9c:a5:
64:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C3:CA:E5:9A:C5:DB:91:0C:31:BC:A7:0D:90:E9:60:0F:FF:85:A3
X509v3 Authority Key Identifier:
keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/B18D8C2C2A4111EBA1B1BB3DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.151.104.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:c9:05:25:7a:1d:cb:83:7c:3b:3b:3c:2d:d9:e1:7a:56:a6:
33:8d:eb:a2:37:ca:bc:19:03:8d:db:94:5e:e1:5a:8e:ca:8c:
76:64:29:5f:47:e2:b3:03:ee:40:3f:4a:cd:83:76:d6:ae:b8:
85:b9:0b:66:53:fa:12:ac:5e:ad:a5:6a:15:4a:ca:60:e3:06:
a4:2d:af:0f:99:5f:19:fc:97:a1:8c:78:0c:10:5a:d1:ce:52:
22:4d:99:4b:e9:cc:c0:d3:c9:98:a9:85:fd:2d:7c:f5:e3:34:
b7:0c:ec:38:69:5a:a6:73:e8:89:e8:40:0d:4a:94:95:ed:a0:
1b:f9:8a:f0:89:af:3d:1f:33:12:fb:dc:b5:67:91:aa:29:f8:
80:d6:2f:4b:dc:71:ac:16:a3:9d:d2:de:3b:90:b1:bf:ff:e0:
1f:a5:02:59:e4:6b:1d:60:7a:8e:c1:1e:2e:1d:82:dc:e9:92:
1b:de:96:b8:00:ed:b6:71:6a:47:a2:35:10:5c:dd:58:18:ec:
77:ae:71:0a:24:6f:e4:bf:e4:0c:e7:a7:c3:af:38:3c:73:48:
4d:8e:c1:c9:12:f2:a4:f0:56:d4:78:69:e6:e1:39:3d:8f:4f:
97:f4:b1:58:75:2d:20:46:b8:89:55:6a:8c:30:72:87:07:e8:
ae:12:5f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:10:57 2026 by rpki-client