
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/16745A82B1CD11EA9A31DA7DC4F9AE02.roa
File: 16745A82B1CD11EA9A31DA7DC4F9AE02.roa (raw, json)
Hash identifier: 1rIHOb1BJq6BWs6+Vvfg37liR9JqZPHGf/sxMDb/MJM=
Subject key identifier: 4C:AE:06:79:CD:33:44:FA:25:D6:B1:5E:8C:F5:CE:13:A7:41:DB:51
Certificate issuer: /CN=A918E80E/serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A
Certificate serial: 0971
Authority key identifier: 5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/16745A82B1CD11EA9A31DA7DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:20:45 +0000
ROA not before: Fri 04 Apr 2025 21:02:49 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 56081
IP address blocks: 103.5.89.0/24 maxlen: 24
103.5.90.0/23 maxlen: 24
202.90.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl
rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:43:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2417 (0x971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E80E, serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A
Validity
Not Before: Apr 4 21:02:49 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a42f1d-00b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4f:86:0c:a1:e4:c0:aa:2a:75:4a:26:f9:09:
ea:93:a1:bf:6a:53:17:e4:34:6b:d7:48:d8:15:c9:
4b:0b:2f:f7:8a:54:60:89:b6:e9:de:1e:fa:56:3b:
c2:7b:4c:46:20:11:cd:87:fc:73:42:87:90:f6:c4:
48:66:30:a6:26:27:be:cd:62:f1:99:95:14:63:5b:
46:10:c6:27:aa:fa:df:45:c2:e8:7c:ab:00:77:f4:
bd:e6:ee:60:18:48:0c:b4:22:d7:22:b4:f9:22:44:
bb:a8:eb:06:08:8b:62:22:a5:6c:c5:ad:03:7a:e1:
a5:18:f7:5a:e4:7c:ce:49:1d:d5:94:a2:a4:b2:70:
f7:f6:ef:a3:b4:c9:08:53:57:e7:fb:77:ee:07:69:
e5:40:07:11:81:c2:c3:43:01:a8:07:56:82:88:50:
ba:05:ac:90:88:e4:3c:b3:08:d1:a5:18:5b:36:a0:
94:4a:2a:94:f6:05:52:e1:d1:06:42:c0:6d:00:2f:
09:1f:ad:0b:2d:74:22:44:31:0e:ab:8e:6c:42:96:
4e:b1:0e:cb:49:15:59:81:e0:4c:3a:a5:3e:41:3a:
84:ba:52:eb:fd:ea:7a:74:de:ca:14:89:b0:bb:72:
96:21:83:79:5e:28:4c:47:31:4f:04:66:85:93:3b:
74:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AE:06:79:CD:33:44:FA:25:D6:B1:5E:8C:F5:CE:13:A7:41:DB:51
X509v3 Authority Key Identifier:
keyid:5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/16745A82B1CD11EA9A31DA7DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.5.89.0-103.5.91.255
202.90.41.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:0f:b3:8b:9f:6e:55:7b:05:98:1a:7f:fd:d3:2d:ee:e7:76:
c4:ef:a3:6c:50:64:64:f8:e3:cb:ec:e6:67:be:28:0c:76:6d:
d6:39:3c:5a:33:aa:28:bc:a6:e4:a2:90:26:8a:2a:5a:84:3d:
26:b3:52:52:8a:c6:e1:61:a3:fa:a9:15:f1:c7:4e:95:3e:95:
42:3a:71:85:de:df:50:8d:2b:98:9c:60:8b:33:e6:50:2a:ba:
67:7f:12:b4:a7:3f:56:08:fe:e2:ec:c1:42:01:96:c5:35:9d:
68:48:97:bf:cc:35:86:a0:62:22:14:ca:fd:32:1a:64:44:c0:
47:6f:68:06:38:16:e5:11:10:0f:a3:f9:f1:ff:4e:aa:14:05:
f6:ff:1a:73:f1:ef:21:c2:cb:3e:0e:67:63:ff:2d:41:d5:32:
97:ab:58:e1:bc:e7:1c:b3:39:db:c9:0f:a5:ec:37:2a:f5:b5:
c0:62:ed:8b:4b:82:50:42:9f:37:8a:7d:29:24:4c:dc:ca:a3:
d9:cf:5c:b0:a4:af:4f:15:de:fa:9d:74:f2:81:05:f0:ca:23:
ff:db:06:c0:4e:18:11:3b:cd:31:0c:2e:b7:87:a5:ef:07:4b:
95:44:40:85:48:e4:a5:84:1e:75:6b:4a:12:dc:68:db:6e:58:
6d:45:1d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:45 2026 by rpki-client