
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/27030ADA8EB211EA9D09090FC4F9AE02.roa
File: 27030ADA8EB211EA9D09090FC4F9AE02.roa (raw, json)
Hash identifier: 6oS7uBHh39uRWMxaLN591g4ue4626lq3N/zDrAaQzFc=
Subject key identifier: 56:E4:C7:30:39:20:91:DE:B9:55:B2:4D:B2:74:75:B8:A0:0E:5A:58
Certificate issuer: /CN=A918BB7A/serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF
Certificate serial: 0A18
Authority key identifier: B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/27030ADA8EB211EA9D09090FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:02:28 +0000
ROA not before: Mon 08 Dec 2025 19:30:16 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 139919
IP address blocks: 103.147.24.0/24 maxlen: 24
103.147.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl
rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:12:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2584 (0xa18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BB7A, serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF
Validity
Not Before: Dec 8 19:30:16 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a446f4-4fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:ba:e8:99:d9:54:d8:d0:80:6a:70:01:04:
32:b7:0f:c4:ad:38:ee:10:c9:dd:fc:e7:15:91:42:
5b:e7:07:e9:f1:d1:5d:3a:c0:ff:28:f8:da:e0:63:
f1:1b:9e:48:3d:b6:da:43:0e:cb:5c:6e:6f:50:32:
77:5e:8d:16:bf:c7:6c:62:03:c0:de:53:08:af:7c:
3f:ea:a1:e0:24:80:23:53:60:56:a5:60:f5:8e:8d:
94:1f:e8:30:db:35:f3:c6:43:07:d6:b6:17:14:f8:
6b:a8:22:2d:70:07:1f:76:8a:e3:39:6b:de:a0:f7:
12:5b:5b:3d:57:1a:5c:c5:bc:d3:3c:82:e2:04:51:
2a:cc:3c:b1:c6:8b:e8:c3:4b:30:96:d2:be:fc:e3:
a8:b7:38:c0:38:a9:d2:78:26:1e:0d:23:b2:f6:19:
f9:c6:bb:ac:0d:22:2f:fb:bb:ca:60:a0:6d:43:92:
35:32:35:8a:0b:b7:29:fc:01:90:4e:28:2c:d7:61:
2c:82:29:d5:fd:09:d2:60:d2:7a:31:00:02:f9:34:
e5:7f:2f:f0:f2:45:e6:f1:7a:a2:b6:41:05:db:73:
4a:0b:c6:74:0a:c6:a0:88:e3:3e:1d:b0:bd:77:5a:
84:c3:19:1a:74:ce:07:36:d9:28:a0:80:1d:d3:39:
31:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E4:C7:30:39:20:91:DE:B9:55:B2:4D:B2:74:75:B8:A0:0E:5A:58
X509v3 Authority Key Identifier:
keyid:B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/27030ADA8EB211EA9D09090FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.147.24.0/23
Signature Algorithm: sha256WithRSAEncryption
88:bb:fd:08:b1:43:61:b6:4e:cb:a7:72:0c:d4:0c:6f:21:86:
7c:1e:53:78:12:5d:50:14:50:69:34:3d:67:4c:51:66:7f:b6:
74:cf:66:c7:c1:1c:a5:c2:a7:7f:cf:51:8e:47:42:5c:09:7b:
64:b2:11:d7:31:49:8e:a6:7a:fd:29:63:2a:20:4f:e4:bd:ff:
96:39:57:9e:0f:56:80:2d:3e:b1:de:34:ef:7e:08:8b:e7:98:
6c:72:c4:78:1b:cb:93:37:46:22:67:32:af:d4:48:e8:04:53:
52:f1:2b:fe:98:89:d5:1d:b3:aa:75:36:3d:26:40:90:87:47:
02:c3:3d:32:09:d2:75:96:82:12:fc:ec:3d:4f:51:d0:b8:e0:
db:a6:ed:7d:77:59:e9:5d:b2:65:b8:6b:a2:a3:e5:e0:6d:3e:
12:a0:83:8d:73:2a:5b:db:5b:4c:2e:3a:98:ce:b4:01:c1:5e:
da:b6:ff:6b:cf:72:17:e2:7c:5a:28:e2:53:91:b7:8b:fe:0c:
0e:54:46:0d:63:9b:6a:53:93:d7:c1:4f:f2:16:db:c5:19:d8:
3d:56:62:e6:18:8d:e0:72:76:31:09:dd:70:39:5c:de:90:0d:
46:2b:0c:17:84:97:c6:ff:47:9a:9e:59:d5:df:17:3e:6f:be:
fa:08:63:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:48 2026 by rpki-client