
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/FB170730324211EFA9B5F949C4F9AE02.roa
File: FB170730324211EFA9B5F949C4F9AE02.roa (raw, json)
Hash identifier: HVckhDYyXfabBBTw5QKnMftqCm/CyMEWw6vhsSVFD98=
Subject key identifier: CD:40:53:6B:F5:92:52:9B:96:F5:66:7F:00:98:A7:D1:DB:1A:5E:11
Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
Certificate serial: 0CFE
Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/FB170730324211EFA9B5F949C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:35:49 +0000
ROA not before: Thu 02 Oct 2025 18:48:49 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 136482
IP address blocks: 202.53.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl
rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:40:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3326 (0xcfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E308, serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
Validity
Not Before: Oct 2 18:48:49 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a45cd5-27f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c9:da:9c:c0:7a:fb:e4:dc:33:0b:c6:c1:a5:
07:6d:59:cc:a7:1c:e2:88:9f:c3:7f:23:e1:6a:f1:
3f:68:90:59:25:b2:5b:9a:14:c6:49:11:3a:1f:7f:
87:a3:60:0e:b9:09:2f:85:08:a0:02:67:fe:2f:1b:
4c:ec:1d:32:ba:48:4c:07:5f:aa:40:a7:5c:e7:ea:
b9:1a:10:fa:1f:74:95:8c:df:67:97:ff:61:62:da:
ed:21:01:63:69:d9:12:ee:d5:04:8e:ed:81:c3:71:
cc:11:84:bf:e3:b7:5c:b0:e5:25:cc:e5:ff:90:a7:
7d:7f:84:e5:0a:00:2f:6c:9d:83:24:13:5d:ef:13:
08:50:fd:7d:6a:f9:dc:c9:03:e6:3b:6b:cb:94:49:
5e:58:20:d4:29:16:a8:a9:4e:90:74:eb:ce:e1:63:
4f:e7:1c:b9:24:83:c2:1b:92:59:a5:c5:09:dd:a5:
37:01:e9:b8:67:7f:1a:f3:e7:ae:bb:bb:14:11:38:
ea:98:9c:6a:4d:7f:fa:37:55:e7:3a:ba:0e:d6:52:
49:0c:23:eb:f6:4f:18:a9:6f:c3:8e:9f:68:88:ef:
4c:07:d5:35:41:0b:aa:86:ca:95:0b:77:de:92:51:
cb:4b:f8:19:80:d8:2c:ff:89:e7:38:55:0c:70:37:
72:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:40:53:6B:F5:92:52:9B:96:F5:66:7F:00:98:A7:D1:DB:1A:5E:11
X509v3 Authority Key Identifier:
keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/FB170730324211EFA9B5F949C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.53.141.0/24
Signature Algorithm: sha256WithRSAEncryption
02:73:b3:27:42:01:6e:ef:7d:38:da:20:d4:1c:c5:af:9c:e7:
d4:2c:10:b2:27:13:66:fa:8b:d9:0c:8f:dd:2e:78:00:ee:bf:
72:70:dd:c6:06:95:0d:41:48:81:17:49:96:91:22:31:8e:bd:
bb:9d:4b:81:5a:f8:39:e2:dd:2d:00:eb:0f:46:73:e8:25:44:
7f:ef:ee:37:68:13:66:b6:a1:f6:a9:33:d1:45:31:1b:7c:9a:
04:c5:55:b2:7a:60:5d:5a:1d:66:9d:37:09:c9:b9:6c:e7:14:
03:ce:2d:51:8b:76:48:4f:d6:ac:f2:eb:88:b1:84:03:10:2f:
18:b1:96:ba:87:5d:78:fe:d5:bb:93:d1:d0:08:1e:2d:c3:5e:
1d:2b:22:0d:af:35:75:3a:1f:32:be:bb:6c:71:b3:92:73:e1:
80:75:d5:54:73:86:74:0a:75:a5:42:37:8e:ee:e3:4e:e3:f2:
bb:b6:c0:05:4a:3f:09:19:d8:0a:75:ed:ec:a0:30:84:48:f9:
53:5a:db:81:e2:e3:c0:51:57:72:f5:c4:d1:3f:e8:1c:35:67:
3a:4a:fc:15:d9:45:87:e4:2c:c1:be:b7:e1:1e:98:63:bd:f2:
2a:0b:d9:00:d4:86:01:7e:e8:58:8d:c4:21:0f:2b:62:c7:69:
e9:f1:72:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:14 2026 by rpki-client