
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/CD377A6C06B411EE841D6C4AC4F9AE02.roa
File: CD377A6C06B411EE841D6C4AC4F9AE02.roa (raw, json)
Hash identifier: DSwrQXXqByoPFQJXpbDE85/HMdoqbU+SR14BjY//Wvs=
Subject key identifier: 72:09:2E:FD:5D:74:03:FC:16:6E:78:C2:47:BB:E0:84:A5:E7:51:64
Certificate issuer: /CN=A918A750/serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192
Certificate serial: 0200
Authority key identifier: C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/CD377A6C06B411EE841D6C4AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:36:30 +0000
ROA not before: Fri 07 Jun 2024 07:41:39 +0000
ROA not after: Sat 01 Jul 2028 00:00:00 +0000
asID: 150809
IP address blocks: 103.214.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl
rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A750, serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192
Validity
Not Before: Jun 7 07:41:39 2024 GMT
Not After : Jul 1 00:00:00 2028 GMT
Subject: CN=69a3de6e-a21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:3f:8b:61:a2:01:bb:0c:87:49:7f:2d:b5:
57:1a:73:e7:a5:a3:b9:4f:6c:61:9c:9f:20:da:2c:
b4:29:51:c6:b9:84:02:12:91:d9:e9:52:b4:65:ce:
4d:e1:b6:ee:43:5e:da:1f:f3:60:13:0e:de:62:81:
4e:7b:fe:50:26:ac:9a:6c:d5:44:75:56:31:fd:90:
54:65:d4:95:21:95:fe:84:a9:9a:69:d3:d7:7d:31:
03:c5:a9:20:71:50:7a:b1:bb:08:7f:93:17:04:74:
3a:b9:b6:c4:39:67:3b:9e:c1:01:fc:91:fc:e0:6c:
59:4f:51:3b:28:5b:8e:a9:7b:5f:11:ca:08:b8:46:
af:54:06:92:ee:04:cd:04:52:85:8b:d5:af:06:98:
44:54:32:ff:1f:0d:57:cf:ef:62:29:a8:54:92:29:
ce:b0:d7:8f:f2:5a:6a:97:a8:fa:5b:12:64:46:c6:
d6:35:67:ae:1a:84:3a:fd:2f:3b:f3:c0:5b:9c:c5:
01:62:71:0d:1f:71:8f:44:cd:18:b5:36:c4:b5:42:
0b:c5:eb:da:30:26:06:4a:46:b4:fe:f4:fc:24:49:
70:38:8c:38:76:6f:5f:fc:e7:e9:4b:36:50:e4:92:
03:a8:47:c7:ac:1f:c8:5d:af:d9:35:87:ac:50:3a:
be:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:09:2E:FD:5D:74:03:FC:16:6E:78:C2:47:BB:E0:84:A5:E7:51:64
X509v3 Authority Key Identifier:
keyid:C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/CD377A6C06B411EE841D6C4AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.214.40.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:25:19:ab:0f:ad:00:08:37:da:b9:8c:49:40:17:98:fe:73:
23:6e:0a:d1:05:a1:a4:1a:a3:ba:10:18:e2:4f:c2:a9:24:c5:
fd:39:9e:8f:de:99:b6:a7:21:17:c4:6d:1c:2c:78:09:79:17:
73:28:59:6d:ac:f3:28:99:f6:c6:5d:11:45:0a:dc:e1:2c:20:
6b:b5:71:df:e2:64:32:ae:db:7a:89:d8:cb:28:f2:db:25:e4:
9e:ef:7a:d2:75:57:f7:c4:89:80:bb:7f:78:63:25:78:ae:84:
db:bd:a9:74:ec:be:c8:42:10:6e:8f:83:7e:21:43:66:d3:2a:
d3:79:a4:ee:96:04:3e:47:bb:cb:92:09:ec:3a:72:31:a4:0d:
59:15:ee:ff:e2:73:f4:f6:dc:2f:93:a2:40:e9:dd:17:32:16:
90:fb:8d:91:aa:72:2b:e1:d8:11:9c:f3:00:31:2a:4d:b1:bb:
49:1f:db:3d:4a:dd:0e:1d:74:a8:68:fe:e1:10:68:3e:64:a8:
5f:d0:85:c9:82:e0:e4:85:78:a1:e9:73:bd:85:4c:28:5f:75:
be:11:a5:34:ee:d3:2f:92:41:da:cb:19:3a:41:25:65:1d:17:
d1:2b:01:92:36:c3:7e:5e:87:80:00:ab:8a:7f:50:3a:b5:20:
d9:80:80:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:08:52 2026 by rpki-client