
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/365AF68C2CCD11F08845DC73C4F9AE02.roa
File: 365AF68C2CCD11F08845DC73C4F9AE02.roa (raw, json)
Hash identifier: JMC4EuohYAuR9ioGha9Vz6YB1g+lt1RMEiDJajpI5UU=
Subject key identifier: 67:CB:28:74:9A:FE:1A:4D:14:9B:85:65:FA:73:4A:6D:F7:DB:69:77
Certificate issuer: /CN=A918A5D6/serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF
Certificate serial: 9A
Authority key identifier: A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/365AF68C2CCD11F08845DC73C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:04:56 +0000
ROA not before: Fri 09 May 2025 12:01:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132911
IP address blocks: 103.27.120.0/24 maxlen: 24
2001:df5:5bc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl
rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:40:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A5D6, serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF
Validity
Not Before: May 9 12:01:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3e518-ce7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:12:2b:c5:fc:e4:3f:2b:02:51:36:53:97:
8c:2d:cc:53:e2:59:77:fd:de:ad:18:18:d5:6a:6c:
ab:e4:97:be:89:d3:93:18:60:73:78:51:88:67:ff:
02:85:92:70:61:a1:88:1d:2b:36:0c:55:e4:30:01:
7c:78:0e:68:8a:cd:2f:12:ac:f0:dd:59:ca:2d:3b:
d3:6a:53:d6:98:e1:70:5a:ba:ce:49:47:94:af:f6:
f7:5e:26:49:52:e9:d6:17:0f:75:ca:ff:56:d3:e3:
89:b0:45:d4:07:bf:0f:42:f5:b3:b5:e4:70:f4:24:
69:7d:fe:97:3a:e9:e0:11:5a:e2:81:a9:4e:51:12:
75:64:38:c5:64:d8:28:69:6c:ee:e9:2f:7e:18:fd:
90:67:88:29:57:c7:05:92:50:02:85:5a:97:4a:0a:
e9:7d:69:f6:c7:c2:1e:1b:0a:e1:43:42:aa:c4:a1:
6d:42:d9:f5:2e:7f:73:b7:fb:d4:b2:ed:24:da:aa:
3d:a8:fb:3d:49:fb:74:21:28:88:d2:5f:4e:7e:40:
9f:0e:47:c6:0b:80:1d:fc:5e:17:ef:64:13:e9:e5:
99:49:77:ed:4a:c0:9b:14:96:a4:f8:6e:d7:03:1d:
a4:0a:ad:8a:b1:c8:d4:db:83:6d:0f:41:42:ee:fb:
9d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CB:28:74:9A:FE:1A:4D:14:9B:85:65:FA:73:4A:6D:F7:DB:69:77
X509v3 Authority Key Identifier:
keyid:A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/365AF68C2CCD11F08845DC73C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.27.120.0/24
IPv6:
2001:df5:5bc0::/48
Signature Algorithm: sha256WithRSAEncryption
c8:ea:eb:12:30:8d:25:d8:c6:9c:c0:98:9d:b7:d4:f2:f8:cd:
06:9a:4f:e3:31:83:ce:bc:d4:f0:ac:02:e4:c4:14:02:dd:52:
bd:b5:6b:6d:b2:ae:45:7a:89:1e:ea:a9:dc:14:29:b5:e3:21:
b6:06:dd:4b:2f:bb:aa:90:04:ec:94:af:19:93:31:ac:59:e9:
22:a5:af:6d:92:c3:ed:71:36:59:3f:90:f5:09:2f:a2:25:08:
3c:8c:26:3a:c0:f2:bf:d2:d6:f8:6d:f1:73:a4:09:08:22:5f:
71:80:a5:bf:fe:3f:11:13:4e:b5:7a:02:16:d7:c9:f9:43:92:
0e:1a:42:b6:0f:22:14:70:4b:aa:69:53:be:96:b4:ca:40:aa:
8d:c5:50:a9:fe:20:9b:c7:43:22:32:98:79:4c:85:be:95:d3:
cd:57:91:8b:60:e9:46:32:1e:0e:83:bd:e7:97:98:c9:2e:ca:
db:cb:1f:a8:da:66:b1:ae:42:1e:6b:f0:72:d7:e5:d5:8a:b5:
87:98:b2:df:5c:0a:e2:31:a2:a8:b9:2d:b1:9b:9f:f9:85:bf:
51:d8:d7:38:e0:c2:18:74:4a:dd:9d:68:9c:0e:54:b5:57:cc:
d6:50:d8:fc:b5:02:dc:d5:2b:aa:34:68:17:b2:96:6e:d8:66:
26:4e:b6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:48:44 2026 by rpki-client