
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D60654AD0BC11EA950DF04CC4F9AE02.roa
File: 0D60654AD0BC11EA950DF04CC4F9AE02.roa (raw, json)
Hash identifier: wFl5g1l80J21+jk73lGUE3Q97pB5bb4jFbTI9zKTECw=
Subject key identifier: 60:B7:2C:75:67:92:D7:6F:68:DA:59:39:D0:AA:BA:4B:96:B3:E7:54
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D4E7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D60654AD0BC11EA950DF04CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:34:48 +0000
ROA not before: Thu 08 May 2025 16:13:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139527
IP address blocks: 103.146.4.0/24 maxlen: 24
103.255.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54503 (0xd4e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:13:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bf08-4b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b4:70:71:7d:36:47:93:c6:1d:90:6b:72:ff:
dc:f8:b9:30:b0:7d:df:04:23:b8:80:3c:a5:3d:1c:
5f:76:19:dc:68:cc:a5:6d:12:b0:de:80:9a:93:88:
2c:94:e2:a6:b4:01:a8:3f:5e:c5:9e:ab:ae:d0:b7:
e2:5b:8c:99:21:d7:32:fd:a7:08:19:ca:0d:9c:fc:
c3:17:18:f0:95:3a:e0:40:9e:12:1f:5c:90:51:00:
83:a7:9b:e7:72:be:71:e9:c2:bb:8a:ac:c0:12:44:
ca:60:aa:2f:9e:0c:32:d7:4a:09:6b:34:06:4b:e7:
6d:1f:72:c3:70:af:99:75:81:6a:6c:4c:30:b4:2d:
5e:19:62:5b:08:7a:06:ce:01:3e:5a:27:c6:67:40:
6a:bd:73:20:56:30:57:9f:e8:bc:3b:ba:39:cd:56:
86:78:18:8d:2e:87:dc:58:93:fa:5d:3c:7e:d2:1f:
6b:2b:f3:81:dc:ff:c4:85:25:d3:a1:cb:b1:d5:3a:
b4:ef:3d:cb:16:88:74:37:cd:ba:c6:2e:34:1e:c2:
94:91:b2:4a:91:2e:88:be:db:d7:0b:ab:6a:b3:4a:
05:ce:ef:f7:4d:71:1e:5e:e5:1e:6e:46:a4:1f:fb:
1b:77:b7:9a:c2:c6:18:b5:27:d6:b0:a7:02:e7:7b:
43:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B7:2C:75:67:92:D7:6F:68:DA:59:39:D0:AA:BA:4B:96:B3:E7:54
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D60654AD0BC11EA950DF04CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.146.4.0/24
103.255.199.0/24
Signature Algorithm: sha256WithRSAEncryption
30:d0:58:11:af:a7:c3:9c:df:0c:62:6e:61:72:51:e9:50:64:
d3:94:cf:72:f0:ca:f2:ea:c2:e8:83:c1:a1:02:dc:ec:6a:ac:
a5:f5:d9:73:3b:15:80:85:ed:7e:71:9b:be:4b:8b:d7:c6:c6:
3f:33:11:26:e4:0d:dc:1c:77:e5:d6:34:1d:a0:ee:51:84:6f:
f0:71:e6:a3:26:4f:ae:e0:6a:c7:70:c1:c2:d6:ed:32:99:43:
7a:42:d3:eb:bd:25:6b:65:29:19:b6:5e:42:40:d9:02:2e:a8:
d5:e0:87:00:3c:cb:22:52:8f:4c:ac:da:4a:e8:25:53:c8:b1:
40:44:58:a3:d5:b2:c2:05:bc:d1:60:c5:45:6b:36:85:24:a0:
bd:b0:b7:a1:2e:ee:9e:72:01:7d:e3:de:8a:0d:e5:e9:ee:84:
99:9a:bf:a6:fc:1a:0f:d5:88:e4:57:ea:0f:96:5e:5f:f0:79:
bf:0c:6c:e6:d7:38:5a:20:ef:d8:9c:98:be:85:fb:88:25:70:
20:f5:fc:96:6e:45:60:0a:b7:b6:12:3d:4d:e6:bc:35:0f:f5:
d2:a3:5d:62:88:89:df:93:52:5d:6b:19:df:84:dc:d8:0a:f8:
97:a3:92:3e:e3:f9:32:0b:a6:98:f7:5a:a8:b3:c4:4e:35:af:
c0:84:ef:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:00 2026 by rpki-client