
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/303C97563EB611EBA4FCB055C4F9AE02.roa
File: 303C97563EB611EBA4FCB055C4F9AE02.roa (raw, json)
Hash identifier: QlgAUCXmC3Vf8gn3/9F5D2vvghvKK1U9Va+wORc0M0U=
Subject key identifier: 3D:1A:07:03:D2:DE:9D:1C:92:DF:72:41:B1:A8:95:9F:0D:86:7B:A5
Certificate issuer: /CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Certificate serial: 0885
Authority key identifier: CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/303C97563EB611EBA4FCB055C4F9AE02.roa
Signing time: Wed 16 Sep 2026 21:41:30 +0000
ROA not before: Wed 16 Sep 2026 21:41:30 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 14618
IP address blocks: 103.155.132.0/23 maxlen: 23
103.155.132.0/24 maxlen: 24
103.155.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2181 (0x885)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918054D, serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Validity
Not Before: Sep 16 21:41:30 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aab0d0a-109e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:95:b3:35:93:c9:8c:d8:c6:85:da:d8:87:68:
4f:a5:3b:3b:f6:ab:c6:dd:29:35:7f:43:05:da:56:
65:c4:44:34:5c:87:63:9b:30:a5:9b:1f:b4:e1:39:
9e:a5:a8:09:a4:24:54:45:47:17:0c:96:b5:7d:fa:
59:6a:e2:8c:ac:88:60:56:a1:24:2a:5a:23:9f:dc:
62:29:c1:f7:df:e7:c6:cc:8b:15:81:e1:29:ae:ee:
c0:5a:da:a5:f4:b2:b6:52:ae:85:2d:b5:04:51:6e:
f6:0a:19:fc:88:df:02:2c:c4:c1:74:42:05:8b:7c:
05:7a:4d:2c:b5:a7:37:c1:d2:08:b6:e5:21:45:31:
cd:74:f9:36:75:08:fe:4c:86:48:25:fd:67:a5:e1:
31:f6:09:16:cc:50:f0:ea:c1:41:e5:f0:06:4d:ee:
5e:c6:92:71:ac:24:eb:ad:0e:74:72:2b:e0:4a:dd:
f5:77:da:d0:01:39:6b:d6:f2:f4:2d:45:d0:b4:c0:
6f:f6:02:03:6b:32:1b:09:43:ba:ea:f7:a6:2b:49:
0d:99:b6:76:4a:f1:f1:81:c6:45:36:41:65:87:b0:
92:f1:c8:29:61:bd:ca:ef:37:2a:68:61:4c:ba:34:
bd:d1:60:48:37:33:4e:84:61:74:b5:e1:46:56:42:
33:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1A:07:03:D2:DE:9D:1C:92:DF:72:41:B1:A8:95:9F:0D:86:7B:A5
X509v3 Authority Key Identifier:
keyid:CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/303C97563EB611EBA4FCB055C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.155.132.0/23
Signature Algorithm: sha256WithRSAEncryption
11:a4:dd:c8:04:ee:58:3b:a6:67:f3:ac:fc:56:5b:f4:c6:fe:
3b:45:15:5a:0d:c6:49:27:d5:c1:69:f3:cd:b9:4c:16:f1:5c:
49:bc:7a:ea:74:e7:ef:33:09:4c:11:cd:38:91:f7:5e:f3:d8:
2c:1a:09:cf:55:96:c3:4e:e8:10:77:58:a0:c4:89:80:8f:4c:
a7:ff:d3:44:20:f2:69:51:35:82:f7:d4:b3:28:34:d3:35:58:
0c:f6:df:42:a4:ec:10:64:d5:fa:31:bb:9a:9a:68:d5:63:39:
ff:37:46:bf:f5:1e:15:c6:12:10:56:6f:68:f5:fe:09:25:2e:
61:8a:12:64:79:5b:19:7a:22:99:ab:5e:50:af:f1:af:14:98:
14:a2:5a:72:72:6b:8c:cb:2a:21:b6:63:62:04:81:ad:e9:20:
55:34:ef:c6:e2:9a:99:2c:3e:07:88:bd:bb:b6:b5:53:87:6e:
84:66:4c:ab:c9:25:5c:d5:74:98:c2:b1:12:1a:7f:28:c7:85:
ac:92:d2:da:f5:8f:d6:c0:86:f4:b2:75:63:3b:02:8f:a7:4a:
2e:f7:44:91:d0:32:ef:fa:b1:c7:38:6c:25:2b:fd:a1:0b:1c:
0a:52:36:62:73:95:42:d5:50:d3:ea:d0:55:11:53:87:80:9e:
5c:7b:4d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:57:32 2026 by rpki-client