
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/EF3517E8099311ECAD398842C4F9AE02.roa
File: EF3517E8099311ECAD398842C4F9AE02.roa (raw, json)
Hash identifier: m5rNWZp0dOLnvfXWxVY4E1RwDznb8PJhyNSY32AfQA0=
Subject key identifier: 31:65:B2:31:86:3E:2A:DC:E1:23:00:3C:E1:90:09:74:6C:17:D1:05
Certificate issuer: /CN=A918A341/serialNumber=4722165A290C0FADB038E8CD2C63AEC71E8F83EC
Certificate serial: 05A5
Authority key identifier: 47:22:16:5A:29:0C:0F:AD:B0:38:E8:CD:2C:63:AE:C7:1E:8F:83:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/EF3517E8099311ECAD398842C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:36:58 +0000
ROA not before: Fri 30 Jan 2026 23:19:25 +0000
ROA not after: Mon 01 Jun 2026 00:00:00 +0000
asID: 142644
IP address blocks: 103.171.212.0/24 maxlen: 24
103.171.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.crl
rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:12:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1445 (0x5a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A341, serialNumber=4722165A290C0FADB038E8CD2C63AEC71E8F83EC
Validity
Not Before: Jan 30 23:19:25 2026 GMT
Not After : Jun 1 00:00:00 2026 GMT
Subject: CN=69a46b2a-5c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:be:b9:75:8a:6c:b5:1b:5b:49:6d:cb:1f:2f:
f1:72:ef:c7:77:a8:91:a6:e5:aa:48:a3:23:32:aa:
cb:c9:c8:2c:af:0f:b5:b9:74:28:76:74:9b:fd:14:
0e:28:3b:f1:08:d6:44:01:d6:72:20:04:0e:86:fb:
c2:90:c5:c1:42:62:9e:a2:7e:44:94:42:b4:44:e9:
7d:a5:29:03:40:f5:44:9c:c4:29:1e:84:e5:70:01:
64:37:7c:02:6f:b6:66:01:8f:53:fc:42:06:66:b8:
0e:a5:4f:10:ee:40:5a:d3:81:3b:23:5a:12:de:e3:
12:42:e7:d3:af:ef:f1:1c:33:0c:c8:81:f3:72:9d:
d4:2a:fa:1d:54:b5:9e:f1:f4:d1:26:6b:9c:2e:aa:
d5:6a:d6:66:ea:98:2b:34:01:41:9c:14:cc:e1:3e:
a6:71:e4:be:d6:7b:cb:2e:30:ab:69:4c:f8:05:6e:
ea:d1:59:6f:b2:bd:5a:f1:30:66:52:dc:4a:1d:08:
03:73:98:b9:2d:e8:a7:45:88:50:f7:ce:f2:03:e5:
f0:d9:e0:88:6d:24:6e:14:af:a4:41:fb:67:7c:42:
44:f7:c7:22:35:e8:c5:39:a9:cc:4f:a7:bf:c8:78:
7c:40:e0:42:51:74:12:e5:2d:4e:c1:11:aa:ab:6e:
4f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:65:B2:31:86:3E:2A:DC:E1:23:00:3C:E1:90:09:74:6C:17:D1:05
X509v3 Authority Key Identifier:
keyid:47:22:16:5A:29:0C:0F:AD:B0:38:E8:CD:2C:63:AE:C7:1E:8F:83:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/EF3517E8099311ECAD398842C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.171.212.0/23
Signature Algorithm: sha256WithRSAEncryption
44:2b:cc:5e:62:d3:d6:12:5b:6b:74:19:ff:8b:66:4b:65:27:
3e:cb:bf:56:08:44:e5:6f:63:72:1b:4d:92:3a:06:a9:45:b0:
0a:6d:ec:df:7d:6d:48:3d:a9:3d:05:ec:db:39:cb:cd:68:bf:
00:ed:35:fb:31:07:37:df:c8:df:06:c0:89:50:01:f3:08:e6:
3d:9a:fd:aa:f1:a2:0b:e0:06:c2:7a:73:d8:a7:cb:5e:e6:23:
d4:2f:f8:bb:69:28:73:5f:e2:d2:cc:92:dc:68:b0:4f:f9:54:
6d:b8:06:45:d1:ea:82:b1:b9:0a:bd:4f:f7:a2:3a:c7:08:ba:
86:54:51:27:c2:49:59:f3:15:cd:1b:e3:a1:54:60:d0:26:77:
fd:c2:95:d5:75:71:b6:ca:2c:62:9a:4f:27:fa:cf:bc:ca:53:
67:18:cb:48:a9:1e:8c:2a:c1:b7:ab:2d:fd:26:3d:74:69:78:
17:81:cb:48:f0:46:c8:02:8b:70:00:93:db:a1:fa:20:fb:cd:
65:02:f6:90:6f:68:09:c0:3b:e2:f3:ae:0f:55:f7:3f:c0:0a:
0c:42:c5:41:5f:24:14:0a:71:05:3b:7b:fb:8c:e3:b1:28:85:
33:2d:fc:f3:0f:5c:ec:7d:32:72:aa:06:d0:3e:a3:37:3f:62:
e9:01:e3:b6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEEzNDExMTAvBgNVBAUTKDQ3MjIxNjVBMjkwQzBGQURCMDM4RThDRDJDNjNBRUM3
MUU4RjgzRUMwHhcNMjYwMTMwMjMxOTI1WhcNMjYwNjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NmIyYS01YzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAob65dYpstRtbSW3LHy/xcu/Hd6iRpuWqSKMjMqrLycgsrw+1uXQodnSb/RQO
KDvxCNZEAdZyIAQOhvvCkMXBQmKeon5ElEK0ROl9pSkDQPVEnMQpHoTlcAFkN3wC
b7ZmAY9T/EIGZrgOpU8Q7kBa04E7I1oS3uMSQufTr+/xHDMMyIHzcp3UKvodVLWe
8fTRJmucLqrVatZm6pgrNAFBnBTM4T6mceS+1nvLLjCraUz4BW7q0Vlvsr1a8TBm
UtxKHQgDc5i5LeinRYhQ987yA+Xw2eCIbSRuFK+kQftnfEJE98ciNejFOanMT6e/
yHh8QOBCUXQS5S1OwRGqq25PjwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDFlsjGG
Pirc4SMAPOGQCXRsF9EFMB8GA1UdIwQYMBaAFEciFlopDA+tsDjozSxjrscej4Ps
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTM0MS85QTdFQUM0QTA5
OEYxMUVDQTYzM0UxM0JDNEY5QUUwMi9SeUlXV2lrTUQ2MndPT2pOTEdPdXh4NlBn
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1J5SVdXaWtNRDYyd09Pak5MR091eHg2UGctdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEEzNDEvOUE3RUFDNEEwOThGMTFFQ0E2MzNFMTNCQzRGOUFFMDIvRUYzNTE3RTgw
OTkzMTFFQ0FEMzk4ODQyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ6vUMA0GCSqGSIb3DQEBCwUAA4IBAQBEK8xeYtPWEltrdBn/i2ZL
ZSc+y79WCETlb2NyG02SOgapRbAKbezffW1IPak9BezbOcvNaL8A7TX7MQc338jf
BsCJUAHzCOY9mv2q8aIL4AbCenPYp8te5iPUL/i7aShzX+LSzJLcaLBP+VRtuAZF
0eqCsbkKvU/3ojrHCLqGVFEnwklZ8xXNG+OhVGDQJnf9wpXVdXG2yiximk8n+s+8
ylNnGMtIqR6MKsG3qy39Jj10aXgXgctI8EbIAotwAJPbofog+81lAvaQb2gJwDvi
864PVfc/wAoMQsVBXyQUCnEFO3v7jOOxKIUzLfzzD1zsfTJyqgbQPqM3P2LpAeO2
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:01:45 2026 by rpki-client