
$ rpki-client -vvf rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/CD0710DA3F3511ED84AFEA5BC4F9AE02.roa
File: CD0710DA3F3511ED84AFEA5BC4F9AE02.roa (raw, json)
Hash identifier: yYK7V7dW/D0eC17jG/LycZEBlM7X3W0O8v5bUzFm2dA=
Subject key identifier: 64:38:29:38:1C:4D:6F:B2:1C:A6:2B:BC:BD:D1:A3:80:37:E9:1D:63
Certificate issuer: /CN=A914ED2B/serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE
Certificate serial: 0872
Authority key identifier: 0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/CD0710DA3F3511ED84AFEA5BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:43:35 +0000
ROA not before: Sat 30 Aug 2025 21:42:35 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 58715
IP address blocks: 103.155.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl
rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2162 (0x872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914ED2B, serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE
Validity
Not Before: Aug 30 21:42:35 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a45ea7-f850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:52:0e:7c:c9:77:b4:b6:bc:0c:b2:89:a9:25:
7f:22:ff:67:f9:c3:01:26:3b:c2:e2:d8:71:cf:7c:
48:ff:c9:94:35:56:25:88:58:35:bb:1e:d9:96:60:
42:a1:de:84:00:fa:48:73:5f:83:47:83:f2:f5:31:
a0:9b:57:11:06:81:bf:87:37:21:62:ac:4f:e9:bb:
97:27:47:c9:3c:ea:35:3f:4b:05:55:c5:b6:40:c1:
51:3c:a0:3e:b0:f5:b5:fa:c9:bf:46:f6:6d:f6:e8:
55:d5:6f:f0:52:ec:55:e5:0f:26:d1:7c:15:1f:45:
bf:51:10:22:65:11:15:8b:b3:2b:d6:98:8d:2d:41:
67:ce:56:4c:d7:ac:b8:fd:ea:4f:52:18:fb:cf:b7:
5c:0c:89:07:bb:4c:1c:17:30:bf:cf:ea:ce:c1:59:
a1:cc:90:ec:64:0c:b6:68:84:37:ae:26:99:60:9d:
73:f0:16:92:ae:5b:49:bd:78:cc:cb:f4:cf:01:4a:
1a:01:d1:9a:7a:23:6b:19:24:54:de:62:e5:50:7a:
ff:7c:d9:ee:af:25:75:e3:e0:d2:2f:a2:c2:67:4f:
ea:ec:e0:32:b0:0c:d3:14:47:e0:6d:6e:2b:47:07:
1f:74:2c:df:71:93:85:59:09:92:e8:fb:05:6a:b2:
6a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:38:29:38:1C:4D:6F:B2:1C:A6:2B:BC:BD:D1:A3:80:37:E9:1D:63
X509v3 Authority Key Identifier:
keyid:0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/CD0710DA3F3511ED84AFEA5BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.155.118.0/24
Signature Algorithm: sha256WithRSAEncryption
04:54:8a:2f:aa:d1:17:8b:3b:1f:9a:44:01:2b:45:4b:70:11:
d9:2d:c3:59:c7:ec:fd:98:0d:36:fe:0a:2b:4c:43:b8:c8:c9:
b2:9d:06:9a:ee:6f:39:ee:7d:52:13:a2:70:cd:b2:00:60:8b:
6d:fa:47:d7:75:97:49:a2:60:ae:e5:12:2f:25:b2:b8:43:32:
1c:a9:ab:a5:5f:51:63:63:ee:89:2a:31:05:80:fc:05:7b:68:
48:e7:d5:2b:38:cd:a5:e2:08:f2:38:35:25:f1:45:4f:b4:8d:
df:fa:fb:d3:09:d5:dd:f7:d0:fd:88:3e:54:51:2e:23:05:e4:
c7:20:fe:6d:75:e4:9b:28:06:f5:dc:a4:39:9c:b2:29:02:2e:
0a:ef:97:de:64:0d:b7:8c:dc:b2:e9:35:85:a8:c6:3c:b4:1d:
d6:aa:27:10:1a:7d:4f:ab:76:31:00:cf:28:b3:1e:70:c5:93:
07:b8:8d:4c:59:72:75:41:4f:39:89:c7:2a:3e:57:b9:7e:ce:
fc:12:5a:52:8c:a9:3f:b2:65:e7:52:e5:d4:32:97:d2:3a:36:
fa:ee:65:9e:da:82:da:9e:05:8f:3d:62:56:95:a1:2d:ef:47:
81:47:c9:66:d2:cd:56:3e:df:a4:ab:a5:1b:e5:d7:73:d4:c1:
ae:2b:1f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:06:39 2026 by rpki-client