
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/471FC532E6FC11EE84213C0FC4F9AE02.roa
File: 471FC532E6FC11EE84213C0FC4F9AE02.roa (raw, json)
Hash identifier: Ec8W4gQuX0b++CAV01O5jV4Wjhz49qlbass79pnKtTU=
Subject key identifier: C1:47:95:0A:51:EB:51:FB:90:68:C2:50:9B:39:32:40:ED:2D:E1:C4
Certificate issuer: /CN=A918E2AC/serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
Certificate serial: 0E2B
Authority key identifier: F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/471FC532E6FC11EE84213C0FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:09:21 +0000
ROA not before: Wed 04 Feb 2026 18:14:54 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 152479
IP address blocks: 103.133.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl
rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:11:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3627 (0xe2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E2AC, serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
Validity
Not Before: Feb 4 18:14:54 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a472c1-eb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:6b:86:f1:13:39:d9:b6:19:eb:f8:70:9b:
66:dd:f8:70:0e:04:84:86:7e:8e:7f:72:5d:2c:7b:
42:2f:4d:f5:e0:be:75:d9:57:95:e1:61:aa:01:54:
19:8d:1c:7f:72:cc:dc:3d:34:49:9f:10:1a:3d:d2:
e2:f3:ff:e0:85:ae:33:2a:6b:d8:18:86:61:18:3f:
9e:6a:10:e2:0b:b9:c1:38:91:5e:7c:2b:12:64:4f:
aa:1a:53:2a:8a:7b:5a:45:ad:d5:f4:c4:6b:45:89:
bf:25:a3:9d:09:46:6a:b6:d6:d2:13:85:60:7d:03:
50:18:6e:5f:a6:ab:d8:71:4f:7b:14:c1:ad:6f:35:
b7:9c:8b:06:d4:d0:7c:3b:5b:b3:9f:d3:f6:ec:ca:
b9:fc:dc:98:4e:3a:60:f1:d7:69:8e:be:cc:f9:eb:
ff:77:0f:34:8e:21:95:4c:0d:a9:7b:1e:51:8e:3c:
c8:7d:92:37:18:09:e9:5b:ec:7a:06:05:84:20:5f:
62:b3:6e:74:dc:49:31:3e:e6:ee:72:ce:59:47:7a:
fc:0c:3f:ce:52:eb:7e:03:8d:50:9a:5d:c6:30:39:
3c:13:c3:d4:ff:91:64:3e:58:4a:31:36:7a:06:ac:
c2:7e:4b:6b:79:2c:0b:16:72:da:25:6a:ff:ae:d1:
f1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:47:95:0A:51:EB:51:FB:90:68:C2:50:9B:39:32:40:ED:2D:E1:C4
X509v3 Authority Key Identifier:
keyid:F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/471FC532E6FC11EE84213C0FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.133.207.0/24
Signature Algorithm: sha256WithRSAEncryption
89:d3:c0:9e:d3:68:23:55:df:5b:62:48:71:c9:33:28:5c:90:
bf:1f:31:18:3e:2d:76:8b:69:df:fe:40:7c:3c:33:5b:48:6a:
4f:da:18:90:eb:d0:b0:30:05:5c:6c:43:cf:77:4c:7f:9a:22:
da:9a:6b:ef:ba:ff:ef:1b:20:1b:74:d2:a2:e4:35:6f:c7:65:
ac:51:30:26:f7:cc:29:a5:23:44:c3:46:a6:6f:7c:55:d7:ee:
fb:ea:4f:6b:ce:db:d3:40:bd:c9:da:e9:cf:da:fb:6d:29:c4:
d5:9f:56:4c:1b:cb:68:28:b5:ca:30:ad:9a:95:ee:ad:3f:41:
02:18:7e:9d:2a:38:4e:ee:50:49:17:ef:43:b9:56:9a:8c:39:
e0:53:44:da:f9:98:81:7a:c0:ea:1f:80:24:a8:99:71:26:2f:
61:4d:ba:97:c6:0f:e4:15:98:0a:2b:72:aa:80:47:a9:14:02:
f3:ac:6d:91:f5:65:94:1b:f9:44:15:a4:1a:9f:b8:58:e5:c0:
8f:54:7e:8c:05:fb:df:19:5d:9d:cb:5f:15:d5:27:87:4b:b4:
c9:a9:b9:72:ae:99:1f:7b:0a:a8:fd:ce:98:aa:08:ea:99:9f:
0d:59:15:14:30:85:46:2b:59:80:49:9a:91:4b:cf:a2:44:30:
55:ce:28:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:47 2026 by rpki-client