
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DE89E7E1B8511F082F5350BC4F9AE02.roa
File: 0DE89E7E1B8511F082F5350BC4F9AE02.roa (raw, json)
Hash identifier: WnbQc0ALYvTb0LVsi8z94YUT4A4R8Mcln7SIDSZj/u8=
Subject key identifier: C4:55:3E:3D:1E:08:EF:26:31:D6:62:81:D8:7F:AC:C4:F1:91:2A:8C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D79D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DE89E7E1B8511F082F5350BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:51:13 +0000
ROA not before: Thu 08 May 2025 16:26:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150794
IP address blocks: 103.98.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55197 (0xd79d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:26:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c2e0-1557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:7a:0a:ec:29:d5:7a:69:2b:06:42:12:c0:
65:f9:f5:23:fd:eb:e2:46:f9:b8:e5:e8:02:aa:f2:
c2:50:ec:b0:19:0a:1c:f6:12:07:f0:7d:4a:df:0c:
01:7f:0b:48:92:59:11:88:83:40:0c:67:8b:95:7a:
b8:19:5c:35:a0:a0:dc:05:0e:a9:c7:71:db:da:3c:
92:3f:e9:04:8b:d0:7d:88:95:f2:97:18:42:05:5f:
27:d4:2f:05:1e:fb:f0:14:c5:71:99:54:a4:a5:28:
d8:5f:b0:b9:12:ca:fa:39:5a:eb:04:97:ce:de:7f:
c5:e4:ff:ce:a7:3f:9d:89:22:ac:7f:8d:91:a3:20:
e8:32:dd:6c:e7:58:4a:16:6e:e7:dd:08:04:a4:4c:
57:ed:32:81:ce:82:9d:aa:a2:3b:4c:94:0f:8b:58:
96:83:c6:b0:fc:0e:77:cf:00:e0:96:01:05:e0:85:
01:e3:2e:04:20:0e:e4:20:7b:ea:09:61:6a:b7:ad:
23:75:43:f6:82:e8:14:d0:67:a8:4a:aa:cd:c2:77:
c7:fc:d4:d4:c2:74:3a:51:2c:40:5d:c6:48:b9:4e:
ea:37:db:03:b7:4f:c4:6f:37:ee:cd:11:d4:89:cb:
db:57:f8:2b:47:92:33:b6:1f:76:0c:ba:4a:00:bf:
5f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:55:3E:3D:1E:08:EF:26:31:D6:62:81:D8:7F:AC:C4:F1:91:2A:8C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DE89E7E1B8511F082F5350BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.98.193.0/24
Signature Algorithm: sha256WithRSAEncryption
43:2d:86:b7:df:0c:cd:5a:e9:71:9c:88:c1:18:25:5b:c0:10:
36:b9:c7:f4:80:ee:89:7c:4f:77:b8:26:7f:a1:42:b9:4b:31:
25:94:ab:84:c3:4d:0e:cd:0a:62:17:f6:19:df:30:5b:4a:54:
ad:b7:45:85:48:88:69:d6:ae:c1:60:ab:5c:e2:21:77:39:9a:
4e:4d:23:56:80:08:a8:e5:ec:56:b5:d8:d0:f1:a6:9a:71:d0:
85:27:50:96:6d:2e:da:af:d6:45:d3:53:f7:cb:2c:fb:f0:7c:
4f:3e:74:bb:40:ec:1e:9e:b6:92:8f:44:f2:be:97:2e:12:b4:
7d:7f:dc:3a:9b:80:c9:33:2e:e7:66:4e:1b:fd:94:f7:01:e3:
c4:1b:42:17:ed:5b:d8:1e:ae:60:05:96:76:2a:7a:21:41:13:
25:5e:38:e4:82:98:1d:91:cc:fa:88:b0:08:9c:8b:62:5b:2e:
4e:10:80:2e:26:2c:71:fa:5d:20:f7:6c:ba:53:95:e6:bd:91:
70:53:b4:5f:43:9c:20:ed:40:47:99:a2:bb:de:a0:7b:05:39:
9c:b2:92:00:f9:24:19:a3:4d:e0:dd:7a:c7:5a:e9:bd:67:47:
f3:24:40:0d:59:63:51:56:36:a8:6f:f6:31:bf:04:64:e7:5f:
6c:03:b6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:24:44 2026 by rpki-client