
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05C1F768228D11EBA4371485C4F9AE02.roa
File: 05C1F768228D11EBA4371485C4F9AE02.roa (raw, json)
Hash identifier: /oe9hmHyrbgs8EFJTUWqY99SlqhbNa0+/TyQYmanLVE=
Subject key identifier: 7B:0E:87:63:20:C2:B8:B5:B2:F8:5F:8B:1B:4C:48:9B:91:88:ED:CB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D457
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05C1F768228D11EBA4371485C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:31:26 +0000
ROA not before: Thu 08 May 2025 16:10:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137671
IP address blocks: 103.129.72.0/22 maxlen: 24
2001:df6:9500::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54359 (0xd457)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:10:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4be3e-48f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0c:b2:2b:ae:15:d0:26:ec:23:30:12:6e:f7:
06:c1:b8:cd:8e:5d:7e:d3:39:af:1e:6a:8d:8c:e8:
e6:a8:93:d7:53:22:32:c7:13:36:f0:3f:30:94:e3:
9d:42:88:73:a6:1f:91:dc:47:72:ab:f8:49:9f:89:
a8:1f:e8:18:a2:df:eb:ce:55:ca:4d:76:ed:8b:bd:
04:29:df:b2:67:f4:1d:35:3f:98:f8:94:f1:df:42:
ca:d7:8a:f9:13:f2:b0:c4:2c:20:06:74:43:93:e4:
85:74:03:71:6d:76:e1:67:fa:8b:fd:47:1e:cf:bf:
83:95:ac:9b:43:27:d0:41:bb:b3:81:90:35:e9:02:
93:3e:73:ac:71:a9:a4:80:78:fa:bb:42:b6:90:3a:
ee:b4:79:79:c0:7c:03:33:0f:68:0d:00:56:3f:af:
4b:c2:93:8f:99:43:15:27:02:79:0b:e3:11:ad:bf:
39:a0:58:6d:16:46:04:17:d8:f7:7d:75:31:d6:39:
2e:91:f5:45:f9:dd:c2:35:24:79:42:d3:9b:6b:69:
56:9c:64:74:e6:2c:25:ce:49:20:d4:82:75:df:11:
66:0f:fc:35:2f:76:df:57:0e:a3:79:27:5c:bf:53:
95:81:5c:24:15:1c:8d:63:2c:7e:b2:92:e8:87:2c:
f8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0E:87:63:20:C2:B8:B5:B2:F8:5F:8B:1B:4C:48:9B:91:88:ED:CB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05C1F768228D11EBA4371485C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.129.72.0/22
IPv6:
2001:df6:9500::/48
Signature Algorithm: sha256WithRSAEncryption
2d:3d:17:77:bb:80:f2:d0:5a:16:00:d1:f3:af:34:5c:a5:b4:
2c:7a:ac:0f:df:8f:8d:22:6f:8d:06:3f:64:04:4d:57:16:cc:
83:e9:47:17:05:f2:49:d1:96:50:a3:6a:27:8a:c8:01:e9:f7:
72:d1:25:a8:ef:16:e8:28:76:17:78:33:da:c4:a0:dc:c8:de:
e7:60:fa:8d:21:02:da:9e:7f:fb:12:a8:38:dd:c0:91:3f:a1:
8a:1a:c7:76:8e:7b:84:4d:25:77:c7:1d:70:81:40:6e:ea:15:
56:37:61:52:6f:86:e6:e4:a6:3d:e8:33:e4:b1:20:9b:ef:66:
4f:4a:95:d7:76:13:a4:5e:f3:40:4f:b8:ce:96:0f:74:00:76:
14:b3:78:ad:84:e1:26:48:5e:1f:1d:8d:38:40:87:b7:35:78:
05:45:13:df:03:32:d2:dd:d8:91:c6:95:ee:3e:b3:ed:a4:7a:
33:3b:90:70:27:ee:42:79:ab:4e:13:0b:bb:ee:55:46:5e:8e:
60:4f:45:ec:ee:49:6a:8c:23:ce:63:4e:40:dd:f1:c4:18:d8:
ec:dd:ea:7e:e5:96:1c:b6:54:fd:23:57:d7:30:f9:fa:94:7b:
4d:3d:4b:f1:6d:6a:d0:03:fd:23:62:62:38:80:fc:e9:6a:49:
ad:81:01:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:27:48 2026 by rpki-client