
$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/B66B434EBCE011EE98AEB646C4F9AE02.roa
File: B66B434EBCE011EE98AEB646C4F9AE02.roa (raw, json)
Hash identifier: GFImaBIJDxKMIRAiFX2CXsx2x2WQvz0QE3N7btck8OU=
Subject key identifier: 92:E9:61:72:1F:F6:4C:50:BD:06:14:B7:1C:EA:32:67:DD:3D:1F:AA
Certificate issuer: /CN=A918ACB2/serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD
Certificate serial: 01A5
Authority key identifier: E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/B66B434EBCE011EE98AEB646C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:12:53 +0000
ROA not before: Mon 05 Jan 2026 03:23:17 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 138329
IP address blocks: 103.71.222.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl
rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ACB2, serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD
Validity
Not Before: Jan 5 03:23:17 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a46584-9205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9e:55:42:41:0b:de:fc:43:75:d3:5d:9c:1f:
ff:93:ca:8b:17:5f:7e:ff:4a:d6:41:97:a2:2d:af:
a2:74:9d:7d:f6:18:18:8a:05:a1:55:20:19:b7:3c:
ef:6a:de:b7:c3:05:56:5b:24:d4:fe:c9:e0:74:26:
92:22:5b:d2:7f:2a:0f:f9:bf:36:ad:8e:89:cd:03:
b2:26:66:66:9a:47:d7:fb:da:0b:af:5f:eb:eb:ec:
cc:6d:c7:6a:95:c0:81:c5:71:96:b1:27:12:c3:5b:
16:26:19:99:cf:95:85:86:d1:f9:5a:f6:bf:9e:ee:
b2:33:8a:4b:54:b5:10:5f:67:10:c4:0d:3b:bb:f1:
75:54:96:93:da:f8:c4:77:4e:45:76:44:c6:47:ee:
38:0b:cf:1d:8f:c5:78:8f:1b:c6:40:59:fa:b5:23:
3b:2a:55:17:78:23:87:16:2f:dd:25:7e:4d:cc:3d:
ff:20:35:8d:62:e1:60:0e:2e:0c:e5:e1:38:69:d7:
14:98:a7:6d:57:2b:31:a8:28:c5:b0:79:1c:cb:cf:
e4:c2:d0:39:36:78:76:bd:3a:77:90:9e:df:ef:9d:
ad:b7:1c:57:a4:ba:5a:a1:d2:37:53:99:24:87:05:
cc:b7:fd:c9:e0:78:86:36:0e:39:91:65:01:3e:19:
2d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E9:61:72:1F:F6:4C:50:BD:06:14:B7:1C:EA:32:67:DD:3D:1F:AA
X509v3 Authority Key Identifier:
keyid:E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/B66B434EBCE011EE98AEB646C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.71.222.0/23
Signature Algorithm: sha256WithRSAEncryption
17:38:68:26:09:55:86:97:9b:89:38:ac:f3:38:5b:cb:bf:cc:
5f:3c:a4:91:2e:27:9e:a2:9f:6c:d0:95:01:ae:b6:f2:2b:5b:
68:78:9c:2a:53:e1:8a:dd:87:a1:80:ed:db:57:c4:8d:24:79:
14:d2:ac:ee:86:87:f1:74:cc:4c:19:bd:d0:db:16:dd:10:4e:
41:47:a9:f2:33:8c:aa:ee:d6:98:b2:06:1d:22:76:a1:b3:74:
5e:63:ff:cf:24:fb:63:1d:60:9d:c9:7f:ed:48:95:27:c6:1c:
c5:28:89:4e:90:06:4c:2e:0e:a1:81:9c:33:82:a7:21:73:44:
ab:e2:c1:93:55:2d:96:66:6f:fa:aa:5c:c5:28:cf:bb:d4:82:
06:24:11:96:69:e4:b2:fb:4d:de:7b:63:6b:a0:7f:4b:fa:40:
df:45:b9:cb:25:23:68:51:24:61:21:fb:b6:ed:26:22:b2:d1:
04:c6:e4:85:d4:e7:90:18:ef:25:e9:40:e2:05:ec:63:2d:73:
f4:b9:1e:af:b5:6a:fe:1e:4c:f6:64:2f:0e:f4:6c:d1:e9:c5:
71:e4:4b:91:22:5d:8f:1a:14:b3:14:96:ed:3f:03:96:35:eb:
08:b2:5c:08:5f:c7:ae:89:f7:c6:48:c3:e7:1f:18:c7:ec:2b:
40:4c:8a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:36:48 2026 by rpki-client