
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/7C616486A6EF11EF9EB0B473C4F9AE02.roa
File: 7C616486A6EF11EF9EB0B473C4F9AE02.roa (raw, json)
Hash identifier: SbiDykr/pWZIcmbH7i6N4pOfkuK1J/v0mHF6btkD3SA=
Subject key identifier: EA:2B:DF:4D:58:B0:B3:4E:E8:A4:47:8D:25:44:C5:F5:5F:F5:1F:DC
Certificate issuer: /CN=A918C31C/serialNumber=40FAA70F8A23A03D16A11086DBE502E862164967
Certificate serial: F5
Authority key identifier: 40:FA:A7:0F:8A:23:A0:3D:16:A1:10:86:DB:E5:02:E8:62:16:49:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/7C616486A6EF11EF9EB0B473C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:55:34 +0000
ROA not before: Thu 13 Mar 2025 06:02:31 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 45476
IP address blocks: 203.208.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl
rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C31C, serialNumber=40FAA70F8A23A03D16A11086DBE502E862164967
Validity
Not Before: Mar 13 06:02:31 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3e2e6-5f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5b:12:59:04:1f:87:8b:5c:bb:19:35:11:17:
2b:42:7e:e5:b7:05:5d:71:74:92:67:71:a1:81:6d:
12:d4:e3:77:90:43:13:48:d1:7e:5c:35:e6:59:b2:
11:a7:76:2d:77:e9:7e:47:b2:d1:ba:ad:c8:44:fc:
51:a9:fa:29:bb:bf:ce:55:a6:fd:24:c9:ed:e7:ef:
43:83:c7:cb:45:cf:2b:06:e1:75:cf:7a:f3:5d:dd:
a6:6f:1f:6f:ed:e1:0c:85:c3:aa:31:58:bf:60:9a:
ab:5c:2e:7d:39:5d:69:93:e0:10:e0:65:4b:e1:62:
a6:bc:10:1a:64:f4:fe:b0:60:e4:a0:de:7c:09:a9:
ff:6d:5a:24:2e:d8:d9:b7:08:5a:d0:31:97:6c:6d:
88:3d:1f:c2:19:f7:b1:aa:77:05:b2:9d:c2:f0:03:
a4:ab:35:26:fa:df:05:46:df:47:c6:6b:ed:b2:02:
37:4f:7e:bb:9a:6a:dd:10:d1:be:14:b4:01:7f:89:
0a:a2:70:67:e2:51:72:31:d1:b9:2b:d5:1a:8a:f6:
75:92:01:52:34:2e:1d:aa:4f:6c:ed:40:6c:86:14:
11:46:97:99:4b:f7:b5:ba:42:8f:a9:06:ba:0f:36:
81:40:cb:fd:b8:51:83:8c:fb:e6:51:81:d0:d2:70:
76:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2B:DF:4D:58:B0:B3:4E:E8:A4:47:8D:25:44:C5:F5:5F:F5:1F:DC
X509v3 Authority Key Identifier:
keyid:40:FA:A7:0F:8A:23:A0:3D:16:A1:10:86:DB:E5:02:E8:62:16:49:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/7C616486A6EF11EF9EB0B473C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.208.21.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:61:fc:15:b6:04:ee:82:31:b9:ed:66:92:05:af:60:d7:c1:
86:19:ac:20:56:d6:61:2c:ee:4a:3b:59:5e:98:79:38:16:ec:
8e:df:5a:c3:cb:0e:2f:97:4d:de:16:64:7d:eb:93:2e:0c:f6:
bf:f1:ec:7f:63:cd:af:e0:d5:87:82:ae:12:37:94:1b:db:f2:
b2:a6:5d:12:ab:95:5d:72:d0:6e:90:61:0f:7c:9b:a2:6e:77:
ea:51:3e:51:74:ed:61:53:51:23:2d:f3:24:ea:b7:fc:50:aa:
f1:1c:a5:bc:2d:2a:5b:29:78:1b:67:e0:f8:fc:6f:dd:bb:5b:
a6:30:f1:c6:65:e0:ba:16:c0:32:61:99:ae:63:a2:85:4c:95:
00:3e:51:88:41:21:b6:67:f7:39:21:4c:0f:8d:09:01:44:8b:
92:04:7b:6f:36:46:ff:58:5c:fc:9f:57:d6:5f:7d:44:b5:06:
d6:f4:4b:f5:1a:85:ec:48:92:b9:90:4f:7c:8a:e9:4b:da:e0:
ba:c9:5c:37:0e:e8:c5:0a:4d:0a:b3:3b:88:9b:70:97:67:d2:
80:33:89:6d:14:8e:11:fd:b5:52:3a:c9:ae:96:26:2b:cc:f8:
c0:b4:a0:e6:58:3d:03:c3:85:b1:3f:6b:9f:95:04:d1:ac:66:
93:bb:f1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:11:35 2026 by rpki-client