
$ rpki-client -vvf rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/718673B6BB7F11EC9E187F19C4F9AE02.roa
File: 718673B6BB7F11EC9E187F19C4F9AE02.roa (raw, json)
Hash identifier: vBsafuWlA5fDTGa/5s57fr9OWMHZTtKdoWY5g838LV8=
Subject key identifier: B7:25:F0:F5:AE:0C:0C:B8:83:15:6C:8C:48:B0:85:E8:84:31:C2:0C
Certificate issuer: /CN=A916593B/serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504
Certificate serial: 03E7
Authority key identifier: 49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/718673B6BB7F11EC9E187F19C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:04:04 +0000
ROA not before: Thu 04 Dec 2025 23:38:04 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 45809
IP address blocks: 103.70.24.0/22 maxlen: 24
2001:dce:7::/48 maxlen: 48
2001:dce:8::/48 maxlen: 48
2001:dce:9::/48 maxlen: 48
2001:dce:a::/48 maxlen: 48
2001:dce:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl
rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:10:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 999 (0x3e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916593B, serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504
Validity
Not Before: Dec 4 23:38:04 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a45563-4b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:36:85:7e:99:a6:88:38:be:87:c4:2d:75:3d:
8e:5d:d2:e2:19:f9:23:77:8c:e2:75:d2:8f:ae:f7:
e5:15:74:40:aa:9a:e8:62:af:75:30:2f:38:eb:b7:
94:1a:4b:1c:fc:a3:65:4c:54:8d:0d:6a:1c:c3:47:
64:ce:32:44:3d:5b:19:cc:21:ae:ec:51:92:78:d4:
66:58:11:0c:6e:b1:bc:14:3a:c1:c9:e4:23:fc:b1:
0c:78:6d:3c:56:17:29:8d:12:b3:f6:cc:03:49:29:
70:4f:e4:fa:86:a2:df:71:28:01:99:d0:b0:ef:cd:
4c:25:56:dd:ec:68:58:fc:c6:ab:0b:c1:ff:c8:8a:
c0:27:f0:78:d9:1c:4b:85:82:63:b5:eb:04:43:af:
46:c5:24:76:6a:16:bb:05:aa:77:69:83:c5:69:f8:
a5:6e:15:73:08:da:a0:21:bd:1f:fe:00:30:41:46:
b0:62:00:fd:04:37:13:7c:ad:1c:fd:a0:08:c4:1b:
8a:6c:9b:ac:67:e7:ee:6b:d9:33:83:62:50:96:93:
cb:d2:9f:64:c6:78:7b:cd:9c:7a:44:76:51:09:e9:
22:82:57:38:a2:8b:0a:50:70:1d:c1:45:05:f4:46:
bc:6f:de:19:70:a1:3c:ca:2c:95:c0:fb:31:5e:ea:
3f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:25:F0:F5:AE:0C:0C:B8:83:15:6C:8C:48:B0:85:E8:84:31:C2:0C
X509v3 Authority Key Identifier:
keyid:49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/718673B6BB7F11EC9E187F19C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.70.24.0/22
IPv6:
2001:dce:7::-2001:dce:a:ffff:ffff:ffff:ffff:ffff
2001:dce:2000::/48
Signature Algorithm: sha256WithRSAEncryption
2f:f0:9f:80:d0:f8:99:77:d9:72:cf:36:13:60:c2:52:0e:78:
70:e0:d4:f0:7e:82:b4:96:09:f9:a4:42:7b:c9:18:47:3d:3e:
c8:e9:3d:84:75:32:13:f9:2a:bb:09:65:3f:a0:ea:8c:eb:22:
68:25:fb:99:32:1c:ff:16:c5:d3:4e:55:c3:7b:bc:e3:a9:16:
de:d2:9e:4d:f9:99:10:3f:2a:bf:2c:bb:b1:5f:23:d6:d3:8c:
93:9b:76:4e:30:24:5f:14:63:1a:5d:71:ef:3b:00:3f:cb:d3:
d9:d3:a6:1a:76:3d:e4:30:66:89:4e:db:4b:cb:44:1e:9c:8f:
77:ae:ef:f3:d6:3d:78:98:ce:04:d4:fc:6c:b8:12:c8:40:df:
8e:fc:d3:49:f4:d1:60:44:7a:45:cb:cb:b0:b0:67:9e:4f:88:
a0:b0:d7:b8:6d:83:ff:cd:c1:37:64:43:0c:9c:13:40:33:95:
5f:31:8d:b6:2d:24:fe:e4:c4:a9:9e:97:a7:40:06:32:36:9c:
97:ba:da:25:db:13:31:29:f3:11:81:df:db:f8:1a:3c:27:ec:
61:a8:13:7c:e0:99:9d:ea:4a:d7:7e:e2:4f:38:67:20:1b:6b:
ca:30:56:f3:ac:d4:9b:79:80:89:c4:66:6f:d2:98:c2:57:01:
da:ef:64:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:45 2026 by rpki-client