
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/F25A6266796A11EB82E0EE24C4F9AE02.roa
File: F25A6266796A11EB82E0EE24C4F9AE02.roa (raw, json)
Hash identifier: gg5YRxm/OG8ParGdDVWKapchKMYooC3n6Om94oqfGGI=
Subject key identifier: 81:C7:A3:F5:29:89:AE:51:21:8C:F0:75:19:B7:74:41:71:BF:85:D6
Certificate issuer: /CN=A918C158/serialNumber=3A4F482E125C08DB830516D51A4A2DF1E0AA8ACA
Certificate serial: 0AE3
Authority key identifier: 3A:4F:48:2E:12:5C:08:DB:83:05:16:D5:1A:4A:2D:F1:E0:AA:8A:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/F25A6266796A11EB82E0EE24C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:46:23 +0000
ROA not before: Wed 22 Oct 2025 04:09:38 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 136746
IP address blocks: 103.142.204.0/24 maxlen: 24
103.142.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.crl
rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:37:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2787 (0xae3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C158, serialNumber=3A4F482E125C08DB830516D51A4A2DF1E0AA8ACA
Validity
Not Before: Oct 22 04:09:38 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a4513f-c866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4d:42:a2:30:80:c0:39:53:b2:73:4b:db:24:
2e:df:9f:cc:f2:b4:a2:13:ec:37:a1:1b:ab:dd:6e:
af:6c:99:f9:72:90:79:1a:8a:b7:d4:75:39:c8:b2:
4f:9f:d1:17:ce:75:34:86:2b:89:fd:d2:ad:ae:e5:
19:81:cf:cb:84:9b:60:da:9f:0d:fd:9f:fa:f0:07:
f1:b9:2e:9c:fb:04:5d:bf:58:b5:79:46:73:2a:f7:
d9:8c:1c:f0:26:ce:33:3d:1e:ca:16:b7:94:72:c1:
e6:99:8e:8a:60:4e:e6:18:41:f5:e8:bb:3d:f2:43:
b8:f5:00:6c:ef:02:d3:a0:8e:94:84:8b:dd:75:8b:
a1:50:f6:6b:0a:30:ab:f2:2f:5d:8b:3d:32:d0:89:
87:b2:2e:25:46:cc:2b:16:cc:2e:f3:f4:09:f1:28:
84:09:a5:17:5a:fd:15:9c:20:c6:89:05:f2:3c:76:
f5:0e:01:46:2b:7c:05:03:08:5e:8b:94:40:a3:90:
e9:c1:0d:47:dc:21:de:85:4f:6a:37:d9:51:da:86:
1b:41:77:44:51:6f:bb:b2:ea:28:91:00:4a:72:e3:
de:a9:92:a8:71:74:7b:cb:2e:18:3c:77:33:be:7f:
80:0f:30:9a:df:6f:52:91:e5:00:b1:80:a8:e5:76:
05:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C7:A3:F5:29:89:AE:51:21:8C:F0:75:19:B7:74:41:71:BF:85:D6
X509v3 Authority Key Identifier:
keyid:3A:4F:48:2E:12:5C:08:DB:83:05:16:D5:1A:4A:2D:F1:E0:AA:8A:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/F25A6266796A11EB82E0EE24C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.142.204.0/23
Signature Algorithm: sha256WithRSAEncryption
92:8a:61:24:8c:3a:70:2a:02:66:7c:ab:3b:ed:65:af:7f:37:
39:58:b7:86:f9:d8:2c:7e:71:cb:bf:8f:94:8d:94:3c:8c:5d:
d2:cc:0a:9e:ab:9f:28:0a:88:07:2d:b0:3c:cd:d5:8e:3f:9c:
17:33:b1:e0:57:7a:55:6b:90:3d:b2:ad:d1:98:69:02:eb:25:
83:1e:f6:e1:5c:00:39:ed:ba:8b:98:21:2d:36:77:cd:4b:a1:
c2:53:72:f4:1c:7c:10:27:55:61:ec:74:1a:b6:6e:ce:c0:85:
1e:83:10:76:cd:a6:7d:87:46:15:a1:f3:25:56:58:36:5c:00:
d3:e4:bf:ad:39:ee:31:8f:52:a4:ce:fa:bd:fd:05:ec:61:bb:
9f:31:1b:07:ba:7b:4d:c7:5b:23:1b:70:9b:32:fd:97:56:08:
da:b8:e1:56:ff:a9:7d:4f:fc:73:c6:39:b9:7d:0b:60:c1:64:
54:e9:42:77:65:ac:a9:84:41:dd:63:f0:bc:8d:97:45:fe:1c:
91:c8:c9:61:9c:44:6d:16:3e:98:9b:51:65:cc:81:91:de:c1:
02:8b:a3:7a:be:a1:1b:f1:d9:9b:84:27:5b:54:65:5d:d8:f3:
08:f1:08:c3:5d:87:b7:91:73:90:8d:34:3f:f2:37:ca:96:8f:
64:56:eb:f9
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEMxNTgxMTAvBgNVBAUTKDNBNEY0ODJFMTI1QzA4REI4MzA1MTZENTFBNEEyREYx
RTBBQThBQ0EwHhcNMjUxMDIyMDQwOTM4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTEzZi1jODY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz01CojCAwDlTsnNL2yQu35/M8rSiE+w3oRur3W6vbJn5cpB5Goq31HU5yLJP
n9EXznU0hiuJ/dKtruUZgc/LhJtg2p8N/Z/68AfxuS6c+wRdv1i1eUZzKvfZjBzw
Js4zPR7KFreUcsHmmY6KYE7mGEH16Ls98kO49QBs7wLToI6UhIvddYuhUPZrCjCr
8i9diz0y0ImHsi4lRswrFswu8/QJ8SiECaUXWv0VnCDGiQXyPHb1DgFGK3wFAwhe
i5RAo5DpwQ1H3CHehU9qN9lR2oYbQXdEUW+7suookQBKcuPeqZKocXR7yy4YPHcz
vn+ADzCa329SkeUAsYCo5XYFQwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIHHo/Up
ia5RIYzwdRm3dEFxv4XWMB8GA1UdIwQYMBaAFDpPSC4SXAjbgwUW1RpKLfHgqorK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzE1OC9BRTUxRDgwMjY3
M0IxMUVBOTlCMkU1NTZDNEY5QUUwMi9PazlJTGhKY0NOdURCUmJWR2tvdDhlQ3Fp
c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09rOUlMaEpjQ051REJSYlZHa290OGVDcWlzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEMxNTgvQUU1MUQ4MDI2NzNCMTFFQTk5QjJFNTU2QzRGOUFFMDIvRjI1QTYyNjY3
OTZBMTFFQjgyRTBFRTI0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ47MMA0GCSqGSIb3DQEBCwUAA4IBAQCSimEkjDpwKgJmfKs77WWv
fzc5WLeG+dgsfnHLv4+UjZQ8jF3SzAqeq58oCogHLbA8zdWOP5wXM7HgV3pVa5A9
sq3RmGkC6yWDHvbhXAA57bqLmCEtNnfNS6HCU3L0HHwQJ1Vh7HQatm7OwIUegxB2
zaZ9h0YVofMlVlg2XADT5L+tOe4xj1Kkzvq9/QXsYbufMRsHuntNx1sjG3CbMv2X
VgjauOFW/6l9T/xzxjm5fQtgwWRU6UJ3ZayphEHdY/C8jZdF/hyRyMlhnERtFj6Y
m1FlzIGR3sECi6N6vqEb8dmbhCdbVGVd2PMI8QjDXYe3kXOQjTQ/8jfKlo9kVuv5
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:22:39 2026 by rpki-client