
$ rpki-client -vvf rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/95C751AAC99F11F098604B44C4F9AE02.roa
File: 95C751AAC99F11F098604B44C4F9AE02.roa (raw, json)
Hash identifier: UHvpsaid7Pmo6YPIbYpolV2HsVFbpaGyjeGlBmkMR7I=
Subject key identifier: A6:27:22:87:37:18:73:49:67:84:CA:42:60:06:44:26:2C:9C:9A:B3
Certificate issuer: /CN=A918ADBA/serialNumber=E71F782A53DA16DB1FD30C6C0D2615427522A6DE
Certificate serial: 38
Authority key identifier: E7:1F:78:2A:53:DA:16:DB:1F:D3:0C:6C:0D:26:15:42:75:22:A6:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/95C751AAC99F11F098604B44C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:01:18 +0000
ROA not before: Sat 13 Dec 2025 08:04:58 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 58372
IP address blocks: 103.29.204.0/24 maxlen: 24
103.29.205.0/24 maxlen: 24
103.29.206.0/24 maxlen: 24
103.29.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.crl
rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ADBA, serialNumber=E71F782A53DA16DB1FD30C6C0D2615427522A6DE
Validity
Not Before: Dec 13 08:04:58 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a3d62d-b53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:94:41:76:0b:b0:60:a0:27:1b:a6:2d:56:97:
92:6b:3e:22:72:ca:a6:66:50:6c:0f:5e:9b:cb:38:
3e:cf:1c:34:c5:1e:cb:44:2a:6d:1b:17:de:fb:05:
d6:54:f6:c2:14:0b:16:a4:0c:cf:14:cd:89:42:a0:
f8:16:87:b0:0d:ca:13:81:63:85:27:e6:22:10:5b:
15:2d:db:82:30:d0:87:65:4c:4c:5e:d3:ea:79:f7:
4a:82:03:2b:01:d2:9a:0f:c5:fc:4b:c0:79:43:d6:
a2:26:33:ce:79:4a:4a:31:18:e7:e9:15:55:c3:b5:
f6:34:27:2d:cb:8b:c6:dc:ec:5a:a5:30:1f:f6:ee:
2e:d1:a0:a4:4a:ea:82:dd:c9:c8:07:eb:08:89:6e:
a7:94:3f:d0:b0:f6:78:06:94:58:2a:c7:85:4c:67:
b0:8d:03:18:ad:b1:7f:e7:07:82:2a:9f:cf:25:7e:
49:90:e6:1b:3c:f9:20:c0:03:9f:7a:d4:ea:da:06:
14:8f:b4:f3:7e:f2:0a:6b:ea:be:36:47:5a:43:ec:
0b:32:d2:8d:33:2c:c6:5b:92:2b:7f:19:68:bb:33:
7d:be:64:af:a2:5b:e5:81:b4:68:86:00:e3:95:c3:
4b:17:ed:e3:f3:83:14:26:ba:b0:39:29:b2:3b:9d:
7b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:27:22:87:37:18:73:49:67:84:CA:42:60:06:44:26:2C:9C:9A:B3
X509v3 Authority Key Identifier:
keyid:E7:1F:78:2A:53:DA:16:DB:1F:D3:0C:6C:0D:26:15:42:75:22:A6:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/95C751AAC99F11F098604B44C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.29.204.0/22
Signature Algorithm: sha256WithRSAEncryption
e3:aa:72:b7:58:97:d3:90:57:69:d0:4e:e8:00:00:22:0a:db:
4c:d5:b0:7e:db:46:0c:8d:6d:9b:b9:6c:2a:0c:ab:69:5c:72:
b5:94:8c:05:04:89:10:10:5f:a9:97:a6:19:ba:9d:63:28:1a:
39:fd:b9:0b:fe:dd:d2:9f:98:97:93:84:e3:85:9a:4f:f0:bb:
8f:4b:17:44:30:10:87:d2:13:2b:fe:43:3d:76:7b:a1:56:01:
43:94:4a:fc:20:81:c0:01:fb:03:1e:9b:ea:97:09:f2:ee:36:
89:c0:ac:21:86:11:77:0a:43:cf:84:0f:b4:b4:4c:d6:30:2f:
56:db:08:32:8d:26:18:1d:fb:fe:e9:f8:a2:f2:37:0c:b6:45:
e8:f8:f3:c4:d0:ef:4f:c7:2a:9d:ae:d3:1c:86:36:42:c8:21:
95:ce:d7:39:84:16:02:ec:b5:2f:4a:c6:a3:66:39:fe:d0:17:
78:1e:34:4e:30:6a:b4:4f:e3:f4:b0:ef:4f:59:c4:ca:c5:87:
0e:12:e4:ef:9b:75:f2:02:5d:5e:82:3b:fe:f8:a2:d1:b8:a0:
a3:94:23:a0:d5:46:5b:18:fb:5c:ea:6a:c2:54:1b:da:3c:17:
08:cc:6f:a4:2c:27:e3:14:11:2c:8f:f3:63:9c:f7:9d:35:93:
b4:60:ac:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:48:50 2026 by rpki-client