
$ rpki-client -vvf rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/329CC664C5C611F0A1D9E964C4F9AE02.roa
File: 329CC664C5C611F0A1D9E964C4F9AE02.roa (raw, json)
Hash identifier: YCG2l1LtUjs6+bU4/BveZWRs1WbU2AsMfrMrgXTaseM=
Subject key identifier: 2A:46:87:AA:05:5B:7F:73:F4:DB:AC:F1:D8:47:F5:60:B4:31:8A:B7
Certificate issuer: /CN=A918190B/serialNumber=C53F06A05FD5F1D9235E1F9530F2CD3CE31110E2
Certificate serial: 39
Authority key identifier: C5:3F:06:A0:5F:D5:F1:D9:23:5E:1F:95:30:F2:CD:3C:E3:11:10:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xT8GoF_V8dkjXh-VMPLNPOMREOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/329CC664C5C611F0A1D9E964C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:02:53 +0000
ROA not before: Thu 20 Nov 2025 04:06:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 103.19.144.0/23 maxlen: 23
223.27.176.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.crl
rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xT8GoF_V8dkjXh-VMPLNPOMREOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918190B, serialNumber=C53F06A05FD5F1D9235E1F9530F2CD3CE31110E2
Validity
Not Before: Nov 20 04:06:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3d68d-b4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:6d:28:4a:9e:05:3a:d8:0c:ef:15:87:39:
dc:a0:10:a0:bd:45:6e:b3:96:46:52:0c:4d:53:d1:
09:1e:16:eb:1b:ad:c4:39:f2:46:34:6f:19:b5:68:
78:e3:8e:29:d2:d2:ec:0e:39:59:5e:83:57:6e:52:
68:75:6d:05:14:fe:c1:e5:b0:c6:63:df:8f:01:d0:
36:c9:e2:37:28:f2:09:53:a5:20:91:8c:97:c2:30:
88:b4:a8:bc:01:cc:6e:1d:b4:9a:7b:12:db:00:3c:
50:07:f7:75:f4:98:8f:31:03:1b:fd:5d:5d:c3:fa:
40:e9:a3:e2:94:72:63:b3:71:0b:34:05:97:6a:d9:
0c:62:0c:eb:50:7c:a4:7d:72:18:cd:e7:65:fa:24:
62:bd:ed:5c:3b:76:56:e5:41:f8:07:80:2b:fd:d8:
e4:c2:39:f0:29:07:af:54:9c:61:c9:53:a1:a5:89:
75:43:02:b3:f4:f6:78:fc:e1:05:d8:5a:0d:b0:ef:
56:f2:b6:8e:a4:77:a0:42:f6:fb:03:14:d8:cf:51:
77:1a:6e:04:25:07:be:10:0c:f5:25:8c:d0:83:dc:
dd:fe:81:64:db:bf:3c:33:d1:a6:cb:f5:6f:a5:96:
ab:01:68:31:86:0c:69:ba:33:5f:aa:d0:1b:10:62:
3b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:46:87:AA:05:5B:7F:73:F4:DB:AC:F1:D8:47:F5:60:B4:31:8A:B7
X509v3 Authority Key Identifier:
keyid:C5:3F:06:A0:5F:D5:F1:D9:23:5E:1F:95:30:F2:CD:3C:E3:11:10:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xT8GoF_V8dkjXh-VMPLNPOMREOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/329CC664C5C611F0A1D9E964C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.19.144.0/23
223.27.176.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:dd:14:79:b9:7f:e3:1c:2d:6d:2a:51:f6:da:50:3a:9c:83:
d6:bf:0d:d9:c5:64:99:dc:61:8c:4a:5f:c6:19:28:7a:6e:26:
b8:68:60:f3:89:8b:43:db:40:50:3a:4d:da:4b:ce:56:0f:ee:
61:b3:24:29:4d:d9:1a:23:5c:32:8e:ff:12:45:20:a3:40:9e:
b1:8e:be:13:fe:63:1f:8b:2b:ff:24:1b:64:ed:f9:11:af:9b:
98:90:8c:e6:fa:a2:6f:c5:a9:85:63:24:c4:a5:bf:30:36:4f:
5d:dd:cf:ec:4d:b7:b2:0c:d5:29:c0:8a:47:25:78:2b:6a:96:
9a:28:43:85:74:06:ea:af:a8:08:89:e2:ae:a0:5d:35:f9:b0:
97:c7:bb:24:79:75:c3:b5:36:58:e5:f9:49:96:11:8b:91:e2:
d6:8d:74:27:46:99:43:30:18:93:e3:59:35:e0:dc:90:11:4e:
cd:10:79:b4:e0:4a:3e:1a:00:9c:39:f7:2e:af:09:0a:8e:6c:
57:04:2b:ec:72:82:3c:c7:8a:20:32:a1:e4:4e:fd:49:88:78:
6a:0f:83:33:e3:d6:c6:3d:ee:56:4e:c1:c8:2b:0c:cb:4b:d9:
61:24:fd:45:29:05:cf:8b:4d:5a:ad:51:f4:dc:ca:62:d0:d7:
77:98:0b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:44:47 2026 by rpki-client