
$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/397504CA4DD211ED8314A659C4F9AE02.roa
File: 397504CA4DD211ED8314A659C4F9AE02.roa (raw, json)
Hash identifier: P0KeHWR0nhVzTFoIweWQ7rQd0IdMvhiODj2AzNtW8Zc=
Subject key identifier: 0B:C9:51:E1:AC:0B:F8:5D:1C:1A:2B:BC:F7:4F:93:3D:DB:12:42:A8
Certificate issuer: /CN=A918ACDD/serialNumber=3691533300ACC1E0105EE0317063507F87B4012D
Certificate serial: 0282
Authority key identifier: 36:91:53:33:00:AC:C1:E0:10:5E:E0:31:70:63:50:7F:87:B4:01:2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/397504CA4DD211ED8314A659C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:09:34 +0000
ROA not before: Wed 25 Jun 2025 02:09:18 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 149834
IP address blocks: 103.187.192.0/23 maxlen: 23
103.187.192.0/24 maxlen: 24
103.187.193.0/24 maxlen: 24
2400:7ee0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.crl
rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ACDD, serialNumber=3691533300ACC1E0105EE0317063507F87B4012D
Validity
Not Before: Jun 25 02:09:18 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4024e-8453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:55:7f:59:ef:9e:ad:3e:2c:9b:43:8e:1c:
61:39:54:bc:80:b2:9c:d5:ea:4b:40:b9:59:3f:65:
5d:38:b5:07:60:e9:e8:5f:17:5c:6c:ce:09:1e:1e:
d3:08:e9:89:0c:4c:58:74:df:56:db:6e:26:a5:63:
ef:9f:b8:ee:85:b8:54:ec:ce:4f:a6:c2:6b:1d:94:
20:0c:16:d4:ad:4e:43:11:65:be:54:4f:c4:d8:5c:
85:d6:6e:3f:0b:5b:6e:15:67:15:3b:f6:0d:28:b5:
50:2a:79:0b:9b:a1:33:9c:66:b1:4e:7c:1b:dd:dd:
de:8c:14:8f:f6:2a:cf:4d:0b:17:00:b9:48:75:cf:
56:7f:11:ba:27:46:b8:ee:ca:46:2a:84:4f:49:77:
0e:c4:c1:81:15:56:fd:ff:06:86:1b:9a:25:10:59:
04:ef:09:ea:f6:5c:9f:73:24:c6:31:cd:b4:f2:8d:
18:3f:05:91:1d:1e:fb:77:ed:b8:48:4b:29:53:8c:
b0:f0:88:de:3f:43:be:f8:73:8c:4f:50:b5:b9:41:
37:95:97:b5:78:fd:d3:d8:8e:0b:a7:40:91:7b:9f:
d1:0a:d3:cc:80:77:56:cf:f1:f0:ed:73:71:42:02:
2d:20:8d:e3:bf:0a:80:ea:15:42:9e:f1:ec:ef:39:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C9:51:E1:AC:0B:F8:5D:1C:1A:2B:BC:F7:4F:93:3D:DB:12:42:A8
X509v3 Authority Key Identifier:
keyid:36:91:53:33:00:AC:C1:E0:10:5E:E0:31:70:63:50:7F:87:B4:01:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/397504CA4DD211ED8314A659C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.187.192.0/23
IPv6:
2400:7ee0::/32
Signature Algorithm: sha256WithRSAEncryption
40:11:2c:37:b1:1b:c5:97:67:2b:f6:50:d9:dc:38:54:86:72:
5a:f1:2c:7c:67:66:bc:de:09:2a:85:fd:c0:ea:de:d2:d2:c9:
dd:f6:f3:04:1e:21:b6:d0:61:71:98:e5:ef:8b:22:32:8b:90:
9e:41:28:69:ff:a9:9d:78:c4:ba:45:50:bb:82:f7:13:67:31:
59:6f:a6:56:f3:2b:d6:a9:54:8b:fa:38:64:49:d8:f6:d6:ef:
ca:f3:ed:e8:64:d9:cb:98:79:3c:d1:2a:5a:f6:b2:74:7b:c1:
99:e5:6a:67:ec:7f:3f:d5:81:10:b1:fc:6d:c6:d3:b0:59:e1:
97:a4:f4:6e:eb:58:c6:ac:61:8f:1a:de:35:da:e4:a2:38:54:
42:d9:72:7a:a3:78:f5:e7:15:f2:ce:82:51:6f:69:5b:dc:30:
5f:34:99:40:4e:86:cb:02:4a:bc:c5:60:cd:64:8b:d1:48:44:
87:1a:57:37:6a:02:fc:60:fb:98:2b:90:cf:62:85:64:8e:60:
bc:5d:10:2a:bc:29:bc:dc:21:6e:6a:ff:98:bf:b9:89:5f:45:
85:72:97:ab:13:44:0f:28:ef:06:c1:78:f2:0e:90:cb:af:ed:
cb:e7:7c:73:13:fc:5a:37:cd:17:2e:b6:86:35:ef:e2:0a:36:
56:d7:3f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:50 2026 by rpki-client