
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/E324E2F6F40611EAA5B2244FC4F9AE02.roa
File: E324E2F6F40611EAA5B2244FC4F9AE02.roa (raw, json)
Hash identifier: avhdzluktcTaPNlKm0CJ2cLBjs4VkOW1cKeJBnenY/0=
Subject key identifier: 1C:1E:01:6A:95:D0:98:CC:23:D9:D7:50:1C:27:71:9F:7E:8B:4B:ED
Certificate issuer: /CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8
Certificate serial: 0BD2
Authority key identifier: 32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/E324E2F6F40611EAA5B2244FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:37:31 +0000
ROA not before: Thu 16 Oct 2025 20:28:43 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 45650
IP address blocks: 103.75.49.0/24 maxlen: 24
103.121.172.0/23 maxlen: 24
2405:c540:10::/44 maxlen: 44
2405:c540:10::/48 maxlen: 48
2405:c540:20::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl
rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3026 (0xbd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C88D, serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8
Validity
Not Before: Oct 16 20:28:43 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a45d3b-59f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:07:fa:6a:64:3a:a1:fd:89:d3:fc:3d:8f:40:
f2:bd:c9:33:7a:21:f2:ca:a0:54:09:09:b4:e8:8d:
72:0e:ad:fb:a6:54:36:ea:0f:3a:a5:d8:cd:86:a1:
89:d4:1f:91:f4:52:d5:b2:2b:e1:1b:ce:b9:ae:b4:
98:3e:0a:1f:eb:ce:57:2c:b5:d0:97:60:6a:cd:d6:
6c:b3:16:6b:f8:58:85:20:55:5a:42:83:6f:f6:36:
49:b7:90:d1:27:18:53:83:6b:a8:82:6c:2b:1f:73:
ee:e6:cf:62:7e:e5:94:4c:fd:c0:e4:cd:59:c2:76:
a0:b7:ac:dc:e5:dc:d9:64:ea:b2:a3:a0:25:17:ef:
24:c0:58:e6:36:8f:ae:07:c5:8e:25:1e:ba:5b:ca:
86:ed:a6:36:39:da:ca:30:c0:19:cf:62:87:dc:3e:
95:0c:a1:74:8c:00:e5:44:3c:df:70:ad:ca:11:f9:
ff:c4:5d:2c:d0:61:d5:7e:9f:e1:23:80:a4:e5:92:
42:b6:7b:50:b3:a0:14:d5:87:d3:ee:96:51:d2:ea:
20:2e:22:bf:26:8b:9c:3a:8b:2b:9c:53:7b:58:c4:
07:e1:ae:99:e3:94:2c:8d:e8:c9:ce:da:17:85:d3:
6f:fb:d2:10:f5:77:cf:0d:f3:9b:55:19:4b:2d:3f:
e4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1E:01:6A:95:D0:98:CC:23:D9:D7:50:1C:27:71:9F:7E:8B:4B:ED
X509v3 Authority Key Identifier:
keyid:32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/E324E2F6F40611EAA5B2244FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.75.49.0/24
103.121.172.0/23
IPv6:
2405:c540:10::-2405:c540:2f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
48:f4:09:0a:54:72:88:13:39:82:91:28:af:7d:65:c6:bf:c3:
fd:ca:49:06:73:f4:2c:c4:6b:bd:4e:b2:c3:e4:04:dc:44:a2:
39:d8:90:1e:14:4a:81:23:5d:08:b3:38:74:d3:89:52:91:b4:
68:33:14:a5:e6:3f:0b:0a:37:55:d8:72:a1:92:2b:eb:69:25:
a0:08:52:66:29:8e:b4:91:1a:7f:8a:85:76:08:5e:95:ec:8b:
ef:2c:e1:cf:1a:94:9f:61:62:08:91:98:64:e6:bb:ac:66:70:
d0:cf:d7:5c:96:59:7b:3b:d2:7c:f3:4a:e1:10:b4:65:da:ea:
ea:f4:76:63:bf:2e:b0:5d:d8:e3:3a:1d:50:55:cc:93:6b:2d:
79:a8:56:28:78:88:75:f3:54:9e:2a:a4:a3:4c:22:0b:d9:d9:
85:e4:c2:e9:9d:4f:37:aa:a6:3e:82:31:85:fc:c5:28:27:fe:
65:a9:dc:f0:27:6d:5f:56:5b:ff:1b:fc:74:c2:04:5b:c7:5d:
70:5b:53:9d:60:4a:10:22:74:ee:e4:06:cb:a2:4c:b6:19:13:
66:66:98:07:4d:ca:15:af:a7:db:40:7a:84:9e:76:c7:56:9b:
98:bb:7a:b8:6e:9a:06:e0:da:ba:a3:01:9d:f4:a2:35:ef:ba:
ef:21:ed:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:47 2026 by rpki-client