
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/4BECBAFCB99811E98000600AC4F9AE02.roa
File: 4BECBAFCB99811E98000600AC4F9AE02.roa (raw, json)
Hash identifier: e2hj/VgpX5o9xzRU7qTEPDMxfSaulRInvkdOWz8lhh0=
Subject key identifier: DB:94:74:A1:68:4B:C2:D5:F8:D4:6F:69:94:62:96:B7:99:6B:9A:EC
Certificate issuer: /CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495
Certificate serial: 0E5F
Authority key identifier: BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/4BECBAFCB99811E98000600AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:50:09 +0000
ROA not before: Thu 02 Oct 2025 18:17:31 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 134722
IP address blocks: 103.198.52.0/23 maxlen: 23
103.198.52.0/24 maxlen: 24
103.198.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl
rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3679 (0xe5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B2F8, serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495
Validity
Not Before: Oct 2 18:17:31 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a44411-0e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0a:c7:ee:57:b1:50:2e:db:51:5e:f2:57:d3:
7e:34:08:cf:22:66:cc:18:37:3d:86:a9:74:86:e6:
62:08:2c:03:7e:c0:74:d7:00:1e:41:00:aa:87:5b:
a3:a5:73:6b:e9:6f:26:55:d4:6f:63:55:05:77:f1:
07:f7:da:c6:86:ab:24:43:56:f8:5c:b1:5b:13:8c:
43:da:5c:dd:56:f7:d3:d1:bf:86:cd:60:dc:88:f3:
f7:84:1c:47:99:79:ad:5c:06:6a:15:1a:dd:f7:59:
e4:42:3d:12:13:23:18:b1:31:62:92:47:b3:ed:7f:
2f:4f:d9:60:a4:e3:f1:be:e9:87:2a:4d:81:c3:24:
28:86:92:fb:38:7e:38:92:88:61:c8:6f:f7:66:8d:
32:50:65:4b:3b:c4:21:d7:c6:a5:ac:03:17:05:9f:
90:2a:8d:6e:bd:72:76:b1:4f:09:98:dd:33:f2:c1:
a0:2e:84:54:42:49:a9:55:44:14:9b:58:cf:0c:96:
c0:e3:81:2e:28:b3:eb:e3:f4:34:04:44:76:2a:4e:
3f:46:ee:f3:44:9d:94:e1:69:af:a0:88:f5:89:94:
2f:dd:3a:29:61:4b:a8:6a:10:a1:10:9f:67:84:b1:
0b:03:90:85:67:01:18:d3:65:45:48:09:75:83:15:
6c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:94:74:A1:68:4B:C2:D5:F8:D4:6F:69:94:62:96:B7:99:6B:9A:EC
X509v3 Authority Key Identifier:
keyid:BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/4BECBAFCB99811E98000600AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.198.52.0/23
Signature Algorithm: sha256WithRSAEncryption
76:ed:bc:9b:98:d3:59:fd:11:9a:4b:4b:98:d2:dc:de:18:7e:
0d:f9:14:d5:4d:64:b8:0b:05:d2:52:b8:9a:2f:bc:45:bc:7b:
88:66:5b:d9:5b:11:66:48:cf:5a:b0:f0:08:d3:5a:3b:9f:4f:
78:27:3d:ad:f4:34:83:06:b9:f2:08:68:9a:a3:4f:ad:f0:13:
fb:49:51:95:c9:8a:35:97:bc:a1:27:41:06:44:8c:ef:e8:70:
71:24:df:ea:24:69:72:37:8d:22:10:34:ea:ae:31:b7:e5:ff:
14:59:42:55:41:c1:56:36:38:56:54:27:a9:a1:17:86:8b:cc:
99:49:42:71:01:9e:82:8c:36:6d:14:44:fa:cd:89:76:c3:69:
6e:d1:5e:0b:84:0b:09:fa:14:4a:ca:56:d5:8c:24:df:78:d0:
08:39:3d:d0:e4:39:0e:43:d6:cd:b4:66:bc:32:fe:07:99:45:
f7:f2:5b:c8:c1:3f:f5:74:19:bc:be:18:22:c9:c9:a1:65:f2:
d4:2f:88:1c:b3:82:61:b9:50:83:51:13:8c:b0:9f:a2:6a:00:
e4:96:85:0b:f9:66:9e:da:80:e5:ff:8e:70:7f:26:7b:16:27:
dd:db:b2:33:c3:db:57:25:f9:0f:fb:b3:4f:eb:f3:9f:85:cc:
5b:31:33:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:01:58 2026 by rpki-client