
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/26A7AD3CBCEA11EF8B15B963C4F9AE02.roa
File: 26A7AD3CBCEA11EF8B15B963C4F9AE02.roa (raw, json)
Hash identifier: X4fSKOfHsY4mqO4VN4qGrDVoh4QFqCUA8CPC8sPbcZE=
Subject key identifier: E8:33:97:13:E2:A3:0A:A4:D1:0A:D7:68:30:DB:D7:FC:E2:D9:16:80
Certificate issuer: /CN=A918E157/serialNumber=BAE5630D2A61330FACBA37F8CCFDCF892807F045
Certificate serial: 074D
Authority key identifier: BA:E5:63:0D:2A:61:33:0F:AC:BA:37:F8:CC:FD:CF:89:28:07:F0:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uuVjDSphMw-sujf4zP3PiSgH8EU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/26A7AD3CBCEA11EF8B15B963C4F9AE02.roa
Signing time: Fri 31 Oct 2025 22:12:56 +0000
ROA not before: Fri 31 Oct 2025 22:12:56 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 15830
IP address blocks: 103.20.246.0/23 maxlen: 23
103.20.246.0/24 maxlen: 24
103.101.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/uuVjDSphMw-sujf4zP3PiSgH8EU.crl
rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/uuVjDSphMw-sujf4zP3PiSgH8EU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uuVjDSphMw-sujf4zP3PiSgH8EU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1869 (0x74d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E157, serialNumber=BAE5630D2A61330FACBA37F8CCFDCF892807F045
Validity
Not Before: Oct 31 22:12:56 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69053468-e076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:11:dc:8c:2e:a7:6d:b2:df:60:53:b0:1a:e9:
a8:15:4b:03:2a:18:9c:50:1b:37:28:cc:fe:d3:aa:
35:42:ce:e3:bc:ff:94:34:e9:83:da:8b:1b:4e:1e:
c1:63:00:b5:2e:eb:17:72:de:c5:64:4c:08:7d:d4:
de:c6:91:59:85:6f:15:95:15:8f:97:9f:34:56:39:
93:67:50:b4:3d:fb:b1:e1:35:a0:3e:ef:06:be:c1:
88:ff:dd:6f:76:05:6e:d9:45:ff:df:75:53:f3:10:
d7:9c:3c:1c:85:67:e3:f1:5c:3d:f6:ee:25:d5:d9:
8c:14:61:3c:16:02:33:6b:b7:db:16:0d:04:98:25:
6b:27:7b:48:d8:b3:8e:7f:1b:94:d6:47:7f:be:2a:
81:9f:04:ac:5b:d3:74:ed:11:81:50:b5:ab:26:25:
4e:ce:5e:d9:26:d6:37:b1:85:64:2a:32:44:e1:f3:
e6:a1:0f:e4:fa:3a:b7:88:29:77:bf:0c:4e:2b:a2:
f7:1f:52:48:d6:af:86:55:98:2d:e1:f9:7a:e9:7a:
94:e6:21:0a:cb:d0:61:fa:f5:5d:1e:11:ca:90:4e:
f0:89:a5:c1:ea:be:d8:7b:b5:fb:2c:38:9a:67:a9:
4d:4e:08:8d:43:ea:3e:99:0c:37:ec:d2:36:cf:a6:
06:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:33:97:13:E2:A3:0A:A4:D1:0A:D7:68:30:DB:D7:FC:E2:D9:16:80
X509v3 Authority Key Identifier:
keyid:BA:E5:63:0D:2A:61:33:0F:AC:BA:37:F8:CC:FD:CF:89:28:07:F0:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/uuVjDSphMw-sujf4zP3PiSgH8EU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uuVjDSphMw-sujf4zP3PiSgH8EU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/26A7AD3CBCEA11EF8B15B963C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.20.246.0/23
103.101.166.0/23
Signature Algorithm: sha256WithRSAEncryption
78:c1:19:85:e6:4b:0f:60:8d:15:51:e1:7a:c7:7b:79:df:b3:
1d:15:4b:94:1a:88:9b:29:6f:56:44:26:b7:44:67:bb:65:c4:
da:66:c2:fa:31:c7:ab:6f:1b:1f:fa:59:ee:f0:69:f0:45:75:
7f:dd:ae:47:75:15:aa:ec:d6:0d:ca:03:3b:c5:51:47:41:49:
2d:73:5b:25:1f:29:7d:d4:3f:70:6e:5b:a3:c2:13:d8:bf:fd:
d7:01:7c:0f:1a:f9:ac:dd:58:96:87:00:a5:c6:40:37:08:38:
4d:df:6a:31:73:6f:a1:bd:1c:a5:5f:b9:f6:7b:b9:8b:3c:10:
8a:82:f1:fa:3f:28:13:25:ef:e2:8a:f2:a9:c5:41:09:e4:15:
19:b7:d8:ec:3f:1d:4c:33:66:26:f5:bd:f7:10:6f:fc:66:0b:
1c:99:01:50:64:d5:c5:0c:7c:0a:19:13:c3:75:14:dc:69:99:
df:a4:d8:6a:cf:1c:39:ea:3a:bc:75:e7:ee:14:87:bb:c8:c1:
a2:51:40:f6:95:90:99:35:c0:0b:e6:59:d1:a7:46:65:7b:b9:
93:c3:87:44:a2:9f:27:05:77:2e:93:28:2b:83:e4:55:44:b3:
3f:80:94:9f:16:21:16:fb:28:29:5e:ec:d9:70:58:ab:4b:64:
57:60:d7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:21:29 2025 by rpki-client