
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7ABD27E4889811EEB99AD46DC4F9AE02.roa
File: 7ABD27E4889811EEB99AD46DC4F9AE02.roa (raw, json)
Hash identifier: jZ81Tdfx/+nsLOQTxl8GU75vMdax+UmYLl8rBqC2vqY=
Subject key identifier: AB:7D:5F:31:76:00:98:4A:DE:31:25:21:67:65:20:60:31:82:F7:02
Certificate issuer: /CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
Certificate serial: 0876
Authority key identifier: ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7ABD27E4889811EEB99AD46DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:51:06 +0000
ROA not before: Wed 24 Sep 2025 21:12:13 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 141166
IP address blocks: 103.155.150.0/23 maxlen: 23
103.155.150.0/24 maxlen: 24
2001:df4:ce80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl
rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:44:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2166 (0x876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A3E6, serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
Validity
Not Before: Sep 24 21:12:13 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4525a-2720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:b3:0b:b6:66:62:3d:48:ce:c3:e6:08:cc:
d2:f3:e0:e3:8c:fa:8b:f8:77:ea:95:15:78:dd:a3:
39:26:8d:fe:e7:6b:4e:5b:76:1b:4d:25:47:92:ee:
09:8c:e7:98:4c:f5:4a:82:6c:39:74:67:81:38:f7:
52:83:fd:d5:bf:79:1c:29:a0:2e:3a:fe:14:68:f5:
68:3f:3a:b5:46:8b:48:a2:0e:73:73:65:d2:f1:47:
ed:b7:d6:75:d5:6c:b6:df:f0:4f:21:4c:b2:4c:d0:
77:ae:76:f1:c5:ee:44:15:55:48:93:aa:ae:b0:ca:
f0:40:9f:42:5f:9d:52:49:72:e8:da:3d:85:dc:52:
65:0f:6d:45:33:00:92:ce:35:41:f8:e9:72:2b:3b:
6b:c0:50:ce:91:d1:58:12:d8:f4:0b:9d:d5:73:3d:
89:66:10:4d:aa:79:59:fb:25:c3:9d:aa:13:44:52:
28:0e:22:c2:ac:02:27:9a:dc:05:5b:90:86:09:87:
c1:bb:f9:81:47:61:78:f5:16:61:b4:d4:92:f2:dc:
1a:3e:fb:b8:80:b4:0e:f9:08:71:65:b7:4b:cf:34:
4a:f7:62:89:49:5c:5a:c1:7c:2e:30:c3:7f:1a:40:
36:62:49:ef:9a:4a:df:65:6f:ab:05:08:ba:2b:49:
19:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7D:5F:31:76:00:98:4A:DE:31:25:21:67:65:20:60:31:82:F7:02
X509v3 Authority Key Identifier:
keyid:ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7ABD27E4889811EEB99AD46DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.155.150.0/23
IPv6:
2001:df4:ce80::/48
Signature Algorithm: sha256WithRSAEncryption
67:a5:f1:9b:05:13:bf:d2:ad:87:8b:f8:ef:22:ee:de:c5:17:
3e:de:11:26:be:29:ae:ef:94:71:d9:4c:67:b0:de:13:86:d5:
80:45:bd:c5:80:cc:4f:03:6d:43:19:af:d6:a5:62:d2:2d:35:
a8:6d:c4:26:d6:5e:ea:30:37:78:85:1d:1b:8c:ad:db:b9:85:
82:83:88:0e:7e:06:50:23:58:29:2f:96:50:70:c6:51:6c:9f:
b6:94:06:15:96:a4:f2:a5:8a:9a:a4:f3:fd:9d:4e:03:83:9d:
27:b3:71:95:f0:55:ca:96:f7:14:c7:0f:9e:cd:52:59:eb:40:
a9:c7:47:2a:e7:99:66:7f:23:0c:65:8d:c7:b4:d1:b4:02:b7:
3c:e7:54:10:d1:f3:6d:e0:02:c0:56:06:22:9f:98:e0:41:28:
ac:17:f7:5c:11:0e:b2:50:57:b6:0d:d6:91:8f:ad:7b:d1:88:
62:31:27:23:80:24:90:ba:55:72:aa:c3:d6:01:f5:c5:fc:ac:
79:13:df:43:fe:90:5b:b1:ad:f9:80:e9:58:b3:bb:55:5e:9b:
64:06:b7:02:85:96:7c:1c:20:10:63:8d:77:96:46:3d:b5:f4:
8d:f3:e8:dd:da:a5:af:ae:57:c4:8a:26:fc:07:6d:23:88:fa:
3f:f7:e4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:15 2026 by rpki-client