
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0FCDE4EC2FDF11EBBBFD7979C4F9AE02.roa
File: 0FCDE4EC2FDF11EBBBFD7979C4F9AE02.roa (raw, json)
Hash identifier: q4rGGeI2beiiD0yXHplO140QkcjaQzugcmzspKcRmqU=
Subject key identifier: A6:4C:BA:3A:FA:11:75:C6:BE:18:DF:F5:1F:C6:82:CB:3D:6E:00:2D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D1A6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0FCDE4EC2FDF11EBBBFD7979C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:16:13 +0000
ROA not before: Thu 08 May 2025 15:56:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132926
IP address blocks: 103.157.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53670 (0xd1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 15:56:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4baad-2c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9f:03:8f:8a:b0:99:48:26:b7:29:30:bc:38:
cd:47:84:ab:c3:c1:c7:90:78:7c:cd:b4:f5:9e:ce:
db:94:36:06:75:3c:03:b1:ac:e5:b1:d3:55:90:4d:
49:96:86:45:6c:a8:7d:2c:52:f2:f8:9e:8e:17:b0:
e1:26:50:84:37:f3:3d:a7:cd:41:6f:f4:97:1a:ab:
86:77:56:99:7c:a3:df:f7:88:21:e9:9a:c2:ca:c2:
8d:a4:ec:4a:55:5e:8e:c7:b2:42:8d:6a:7a:c2:79:
6c:3e:e1:e7:1d:5e:86:bb:fd:d3:64:28:3a:16:6c:
39:1e:0b:61:f0:fe:dd:b7:17:b5:34:f8:81:6a:02:
fb:be:5f:e0:be:d2:82:7c:31:d5:79:95:08:bd:40:
41:fe:2b:e5:b4:a0:81:28:f2:6e:6e:ac:c1:c6:8a:
12:52:f3:45:0c:08:ed:73:cb:68:e4:63:38:bf:20:
a6:fa:51:67:35:08:a8:d4:81:1e:b0:9a:b0:f8:c1:
d4:f7:f7:55:4c:68:05:6d:27:af:7b:40:64:b2:42:
c3:3c:50:7c:fb:68:c5:67:6a:58:4a:ed:72:ca:a0:
10:6f:a9:3c:0d:05:e3:01:61:1f:b2:55:93:db:5f:
ca:52:91:ee:bd:a0:a8:56:c9:a2:6b:38:57:4d:10:
ad:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4C:BA:3A:FA:11:75:C6:BE:18:DF:F5:1F:C6:82:CB:3D:6E:00:2D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0FCDE4EC2FDF11EBBBFD7979C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.157.124.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:4a:e2:2e:74:a6:c4:43:d7:75:24:db:e6:fd:43:8a:cc:e3:
e9:7e:c7:6f:dd:f6:c3:9e:e0:ec:ad:23:f3:eb:2f:b2:96:c9:
97:aa:16:43:56:5d:87:6e:18:c6:bf:4c:c5:fd:da:7a:23:1c:
91:e6:8e:47:cb:ac:ce:1a:b6:da:fe:ee:6f:b2:7a:a2:98:05:
19:a8:db:45:b8:89:60:e0:d2:2d:b2:ce:e4:d2:f7:5c:f6:9f:
89:ff:da:21:c9:c2:a2:48:54:74:65:42:92:3b:ed:ee:f8:76:
d1:0c:a5:3e:75:c8:62:53:61:bd:86:4a:69:16:53:b2:67:8c:
45:bb:5f:71:e3:87:8e:51:a1:c1:ba:f6:de:6a:ce:6d:ca:8e:
e1:13:8a:67:2a:26:e2:ce:bc:97:fc:9e:e5:3a:54:b5:ac:81:
02:30:c9:30:57:14:bc:37:e1:3b:4e:be:d1:77:e6:47:19:b5:
91:c2:b4:ff:91:7e:65:60:71:e7:75:c6:71:98:5c:2a:e0:79:
45:f0:3f:8d:5d:9e:5d:c0:2e:b1:9e:7d:84:3a:f2:fa:0b:7c:
8a:53:68:8b:d7:99:cc:26:d3:0a:1b:96:be:d7:3c:1d:37:c4:
67:af:50:ec:8b:4e:3a:7a:7f:22:f7:a1:ab:d5:9f:32:89:b4:
a5:70:ac:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:18 2026 by rpki-client