
$ rpki-client -vvf rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/303C97563EB611EBA4FCB055C4F9AE02.roa
File: 303C97563EB611EBA4FCB055C4F9AE02.roa (raw, json)
Hash identifier: NBqcYaP1mLGHLtPIUim7xHYRFSA/kjEWSIQ+kAnV1V0=
Subject key identifier: 76:00:31:53:B0:80:4E:0F:71:92:43:10:A9:92:C7:F0:33:A2:F0:B0
Certificate issuer: /CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Certificate serial: 0819
Authority key identifier: CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/303C97563EB611EBA4FCB055C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:03:51 +0000
ROA not before: Fri 12 Sep 2025 21:32:33 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 14618
IP address blocks: 103.155.132.0/23 maxlen: 23
103.155.132.0/24 maxlen: 24
103.155.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:46:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2073 (0x819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918054D, serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Validity
Not Before: Sep 12 21:32:33 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a46367-67da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:83:b0:b8:04:a0:fc:11:8e:cd:64:92:eb:77:
f2:5b:3d:3a:a6:7e:f4:f2:7b:be:2b:fb:93:77:26:
63:49:a3:48:c5:6e:70:d4:d2:8e:2a:d3:43:60:d7:
3d:5b:27:85:e4:45:9e:8c:61:be:08:d1:bf:f4:2c:
66:40:58:43:ec:45:1c:4a:f5:84:ba:6c:5c:dc:f2:
d7:cc:e4:94:ef:9f:c1:04:e4:ae:72:d5:1f:6c:9a:
74:47:c7:76:1d:81:82:16:d5:ec:5a:2f:66:c2:ea:
1a:d6:09:21:9a:df:f6:13:1c:3f:c9:b2:fb:d9:5c:
0e:5b:a6:4a:2b:0d:c0:4f:9f:73:f4:35:60:d1:c3:
ee:7c:28:98:44:e8:08:ee:2e:f4:43:84:a8:7f:21:
ec:3c:75:58:11:d0:39:0a:73:e2:f5:8e:da:ad:ef:
58:f1:1c:9c:0d:d4:03:bc:18:58:f7:f6:db:d9:08:
13:54:a6:e7:15:0b:17:98:2d:63:b1:ff:c1:ce:9a:
cb:e0:3a:32:f8:b5:37:e0:6a:b0:d9:d8:8b:d9:00:
e4:0d:d7:95:67:b5:17:76:82:f9:fd:7e:db:1d:2d:
20:5a:da:25:bc:22:1f:10:63:a6:f3:7e:fc:04:23:
d1:f7:52:c6:08:35:38:c3:19:81:1e:9f:3e:32:e7:
aa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:00:31:53:B0:80:4E:0F:71:92:43:10:A9:92:C7:F0:33:A2:F0:B0
X509v3 Authority Key Identifier:
keyid:CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/303C97563EB611EBA4FCB055C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.155.132.0/23
Signature Algorithm: sha256WithRSAEncryption
54:f4:6d:37:08:6d:00:a5:04:81:a5:1f:0a:58:a2:a8:b4:8f:
a0:77:77:6d:87:98:58:68:6f:5e:ed:39:aa:ff:68:c8:02:dd:
7f:e4:81:6a:d6:7a:03:ef:04:87:4d:59:79:94:c6:52:f4:34:
5b:7c:93:0a:9e:89:d8:f4:7a:de:c9:a3:52:96:4c:5f:57:1e:
0f:57:de:83:3c:6d:fe:df:1f:70:a2:28:79:a7:77:43:2a:27:
8f:48:3f:a6:e5:b4:b6:56:12:92:81:c4:9a:c9:cb:79:c7:09:
ec:7d:f0:fe:d5:6b:87:07:d4:e3:1c:f0:99:0b:c3:88:d2:ec:
95:8c:04:a0:9e:38:38:55:fc:c1:19:7d:0d:54:f5:73:05:f2:
c6:59:b4:e3:a7:09:39:f9:af:b8:65:54:fe:be:9c:91:70:4a:
34:28:5f:65:44:72:8e:5e:e9:19:67:d9:a4:c9:68:7c:46:c2:
63:89:2c:10:a1:7a:77:bd:ab:e7:f2:e8:e6:26:67:6b:52:72:
d4:6b:32:a7:fc:d2:39:dc:34:6d:51:b4:dc:90:c7:df:36:43:
34:bf:82:8c:53:7a:3b:95:89:94:80:3f:4f:17:cb:9d:50:b3:
8a:fb:e8:dc:6d:a1:6d:c5:6a:05:87:ab:aa:67:20:36:6a:0c:
df:bb:a6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:14 2026 by rpki-client