
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/98D5AE30C88C11ED907C1C0EC4F9AE02.roa
File: 98D5AE30C88C11ED907C1C0EC4F9AE02.roa (raw, json)
Hash identifier: ZjWTn7RPw7EchMonKVaN+HGBpWShBdJZb78EKus3MRo=
Subject key identifier: 43:90:89:1E:DA:D8:41:08:11:DD:A8:17:20:8D:F9:C0:C5:65:B7:2C
Certificate issuer: /CN=A918D701/serialNumber=DACCDB80F875F5528931A8825D1AAFA180A9B179
Certificate serial: 0232
Authority key identifier: DA:CC:DB:80:F8:75:F5:52:89:31:A8:82:5D:1A:AF:A1:80:A9:B1:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/98D5AE30C88C11ED907C1C0EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:11:49 +0000
ROA not before: Sun 09 Nov 2025 01:17:59 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 150374
IP address blocks: 103.18.206.0/23 maxlen: 23
2001:df1:5fc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.crl
rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:24:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 562 (0x232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D701, serialNumber=DACCDB80F875F5528931A8825D1AAFA180A9B179
Validity
Not Before: Nov 9 01:17:59 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a410e5-0e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:03:39:80:08:48:f2:12:c3:c9:ce:b5:71:f0:
9c:ad:6e:f6:7f:97:db:bf:1f:ce:4a:6d:71:b3:38:
0e:13:61:54:4e:5d:b0:dc:fd:c5:26:e1:15:ac:03:
d0:9f:db:cf:ce:8c:66:33:fb:c3:29:b1:68:81:88:
5e:43:9c:81:1b:05:cb:ca:15:62:35:1a:f1:d6:c0:
77:c9:60:97:0f:24:32:9c:43:b8:84:a5:b1:b8:e2:
7e:2c:aa:cb:1a:8e:d5:0a:40:02:a4:44:1a:b7:b6:
9f:f1:cc:7d:a1:b7:d3:9d:51:39:34:ae:e1:30:23:
80:16:76:9e:87:eb:f4:21:d3:a4:b4:a7:d6:30:c5:
20:b2:ff:58:76:6a:03:1c:77:9d:f9:f6:b9:18:db:
5c:b9:eb:b3:55:28:08:a3:97:e4:d7:bf:f7:5c:81:
5d:df:db:5e:ce:c5:2d:68:81:59:65:3d:2a:39:70:
d2:5d:9b:49:b8:af:fb:71:3f:4c:94:cc:69:66:4b:
fc:eb:d7:66:cf:4b:de:70:55:75:18:15:4c:2b:68:
f5:af:4f:3c:04:25:76:3f:95:8c:e7:fa:ac:9d:1b:
cd:2b:62:c7:a9:ca:36:0b:a7:9a:e7:51:06:c5:f5:
da:20:5c:36:59:fd:c6:7b:ae:8b:31:c1:f8:a1:7b:
38:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:90:89:1E:DA:D8:41:08:11:DD:A8:17:20:8D:F9:C0:C5:65:B7:2C
X509v3 Authority Key Identifier:
keyid:DA:CC:DB:80:F8:75:F5:52:89:31:A8:82:5D:1A:AF:A1:80:A9:B1:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/98D5AE30C88C11ED907C1C0EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.18.206.0/23
IPv6:
2001:df1:5fc0::/48
Signature Algorithm: sha256WithRSAEncryption
74:fd:58:5b:ad:4e:51:60:c2:88:68:f8:7c:cb:70:10:2f:0e:
8e:ae:e6:98:1c:54:c0:82:59:d3:24:f0:47:88:b5:f4:62:27:
59:e3:d2:40:87:ef:cf:aa:a3:b7:2b:7c:e9:57:9e:37:e8:89:
63:6e:55:9d:8c:4c:db:7c:e5:23:4b:9c:e8:06:ba:04:f8:6a:
64:89:5c:e2:ee:b6:07:80:46:05:7a:1c:e1:5c:f8:08:72:3d:
94:47:08:b4:49:b2:a4:a2:ac:1d:bd:e4:87:7f:29:ea:32:8d:
09:65:17:02:1e:d8:f3:32:7c:bf:fb:de:15:b5:b9:fe:38:d2:
31:85:34:bd:45:71:dc:47:9b:f1:61:f0:41:ac:df:fa:22:20:
cd:8c:c2:d7:9c:7d:0f:32:79:1e:eb:0d:0c:6c:2c:77:73:71:
92:6a:63:b4:1e:0f:40:c7:85:d6:92:22:62:fc:4b:ef:53:76:
c8:bf:93:51:39:fd:e9:25:77:a6:87:53:84:da:75:1e:ae:17:
18:6e:71:35:0e:32:52:2a:c3:fb:8e:cd:c8:11:4e:5b:e3:03:
09:d5:93:3b:ca:48:98:20:55:d4:49:83:71:79:cc:b2:84:20:
70:87:28:39:d8:ce:5f:93:2f:8b:1e:ef:aa:b9:b8:22:4b:ef:
dc:f0:2f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:05:37 2026 by rpki-client