
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/22639692E6FC11EEB3BCD10EC4F9AE02.roa
File: 22639692E6FC11EEB3BCD10EC4F9AE02.roa (raw, json)
Hash identifier: jTINudEF1PytBKZidbXRaxHONjKZ1aZaJMZAVtgeI8c=
Subject key identifier: 5F:43:E7:B0:81:B9:C0:F0:84:7F:31:F9:32:D9:A1:8B:AD:9D:30:30
Certificate issuer: /CN=A918E2AC/serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
Certificate serial: 0E29
Authority key identifier: F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/22639692E6FC11EEB3BCD10EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:09:20 +0000
ROA not before: Wed 04 Feb 2026 18:14:53 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 138581
IP address blocks: 103.133.204.0/22 maxlen: 23
103.133.205.0/24 maxlen: 24
2404:5340::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl
rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:11:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3625 (0xe29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E2AC, serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
Validity
Not Before: Feb 4 18:14:53 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a472c0-7d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:50:fb:47:6a:dc:87:e2:48:4e:ca:51:3b:
be:38:54:c3:b3:94:9e:65:e7:59:29:c6:28:42:15:
a6:08:57:cc:11:f4:8b:34:02:42:ef:06:49:a3:39:
cf:23:b6:e6:10:ae:90:e3:08:58:13:b2:90:75:e2:
c1:9e:17:e9:8f:ea:01:14:07:bc:6e:2c:32:d4:4b:
3d:27:cc:dc:d2:c3:13:05:fe:bd:f3:fc:8c:90:1d:
72:a6:a0:5d:9a:b5:05:c0:40:ab:1b:24:bb:6e:31:
d6:b8:95:69:5d:15:0a:45:a9:03:e3:94:e3:5d:cd:
b1:5c:5e:63:2c:85:fd:30:ca:71:61:f9:34:2f:33:
e6:17:22:e5:e6:93:de:63:53:df:b9:3c:d9:c9:94:
0c:6c:2f:fe:c7:ab:0c:b6:32:eb:d1:ce:57:b7:93:
15:86:1c:32:56:49:b5:88:6d:17:36:e4:6a:f7:85:
59:45:cd:0e:73:9a:e1:9a:05:08:7a:f0:a5:28:d8:
1a:55:55:3a:26:22:a0:1b:f1:fd:91:52:a1:94:46:
73:02:32:e3:51:56:cb:8e:e7:7d:a2:28:bc:63:0c:
b3:31:1e:17:2e:3c:e2:65:47:a8:44:12:3b:ef:88:
ff:cd:85:73:26:ad:eb:20:7b:98:f3:7c:35:e9:e8:
87:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:43:E7:B0:81:B9:C0:F0:84:7F:31:F9:32:D9:A1:8B:AD:9D:30:30
X509v3 Authority Key Identifier:
keyid:F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/22639692E6FC11EEB3BCD10EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.133.204.0/22
IPv6:
2404:5340::/32
Signature Algorithm: sha256WithRSAEncryption
07:1b:ec:f7:f0:6b:3b:68:4d:ac:68:fb:a7:c0:8c:f7:25:c0:
a0:63:bd:2e:7f:3c:61:3c:d2:cc:93:11:86:fb:02:47:20:9c:
02:10:98:5e:1a:a2:bd:70:3b:96:6a:06:e1:ed:0a:f3:1c:c3:
63:8c:b0:83:0d:78:38:f4:e2:1b:0b:95:fb:0b:c3:01:8b:97:
43:6f:2b:d6:a7:fc:af:83:6c:dc:c6:85:d8:fe:ee:7e:ef:be:
67:62:8e:30:40:65:a7:b2:1b:25:74:c5:c5:8c:ba:7b:3f:c0:
3e:35:c7:97:54:1d:09:d1:e6:ab:d9:bf:d4:52:6b:3c:17:9f:
91:ac:40:53:db:db:fc:0c:4a:90:96:75:c3:87:d3:89:4e:d0:
a7:f6:bb:05:55:21:d0:69:d5:bc:ea:f0:ba:f6:2e:90:d2:77:
21:ed:71:46:af:e3:03:dc:01:97:70:15:a1:fc:05:89:4b:d6:
8c:26:fe:ad:8c:75:a6:66:6b:bf:55:18:3b:da:e5:b1:d2:a6:
8a:69:09:77:a7:65:8c:4f:f2:a4:02:e8:bc:d7:e4:a7:7d:c1:
9a:ea:91:7b:11:98:30:dc:ba:0b:df:e0:9c:36:2d:39:03:7f:
9d:4f:eb:93:1a:1d:65:49:de:8c:fc:28:90:1a:e8:10:06:cc:
02:8e:d1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:31 2026 by rpki-client