
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/13DE5FFA2F7111EE8565E42DC4F9AE02.roa
File: 13DE5FFA2F7111EE8565E42DC4F9AE02.roa (raw, json)
Hash identifier: U2VBZsJB0RYjK+6f5UjqgpMm5g0g4E2aA4v0heVJBoE=
Subject key identifier: 81:06:9F:3F:C9:B5:FA:FE:94:33:CA:07:44:D6:78:E1:2F:21:2F:36
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D959
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/13DE5FFA2F7111EE8565E42DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:58:54 +0000
ROA not before: Thu 03 Jul 2025 10:30:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151127
IP address blocks: 103.215.182.0/23 maxlen: 24
2001:df2:90c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55641 (0xd959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 3 10:30:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c4ad-2885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e5:97:d5:97:83:7b:f5:db:52:8b:c9:e5:ad:
18:ab:6a:53:71:6c:2f:95:5b:60:f7:56:7b:67:48:
ab:cb:cd:66:d7:71:2e:54:29:9a:84:20:da:12:f4:
b9:bc:17:4d:29:1b:07:1d:d2:68:fc:39:d6:b6:fd:
f3:a8:18:4d:55:a4:5d:dc:69:0c:dd:bd:3e:83:ae:
f0:42:8b:20:ab:8a:64:39:15:5a:2d:92:69:fd:44:
46:84:7b:da:85:97:7f:21:a3:f9:27:1d:99:67:00:
8a:90:f9:a2:4f:44:be:b0:fd:7d:20:cc:f8:04:42:
1a:db:08:63:64:5b:fa:b7:09:a3:94:52:c3:03:b0:
fb:b1:25:56:f3:f1:7a:9b:65:b0:fb:bc:d2:38:b4:
a5:a5:a2:cb:ac:78:85:f2:1c:e6:d0:a4:db:c2:36:
20:a3:28:2e:06:ce:4b:64:1a:d0:3b:9a:3f:f7:73:
fe:29:41:89:0f:1d:8d:57:35:a0:04:73:f6:6c:c2:
57:23:fc:10:b0:52:c4:56:3f:71:9a:7f:4a:59:7b:
37:85:ef:5c:b4:44:8e:85:d5:2b:e8:89:04:88:b7:
76:0f:16:86:5f:44:9c:a2:69:4f:28:40:de:f7:39:
ba:d5:42:1b:4a:46:da:40:f6:d6:dd:c8:6b:a6:86:
b3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:06:9F:3F:C9:B5:FA:FE:94:33:CA:07:44:D6:78:E1:2F:21:2F:36
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/13DE5FFA2F7111EE8565E42DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.215.182.0/23
IPv6:
2001:df2:90c0::/48
Signature Algorithm: sha256WithRSAEncryption
61:ea:78:75:4c:70:5e:6f:dc:b4:56:4a:21:7a:0e:e2:c3:3f:
02:a2:e0:ed:1d:e8:0e:1d:6f:5c:c8:8a:3e:f1:aa:29:d0:d8:
b9:77:23:6c:19:f2:43:fc:1a:bb:62:2c:87:a5:6d:a3:3b:9d:
57:5b:df:53:4c:ea:f2:c8:02:6d:6d:b2:34:23:a2:ef:5a:41:
03:98:e1:25:fc:17:aa:0b:88:1a:47:a4:bf:06:d2:82:80:0d:
d3:d6:29:d2:e2:8e:70:6e:7f:34:b2:19:d2:d4:05:0f:41:b0:
2d:20:43:2c:7b:1d:4d:84:2e:fd:43:59:8a:5b:af:a6:51:71:
15:4e:95:64:61:d3:63:69:ef:9d:2b:38:e7:74:12:35:06:d1:
6d:e0:bd:14:33:2e:e0:99:37:91:92:8b:b9:44:94:c9:98:76:
61:45:e6:f4:cc:37:59:79:87:a0:ba:e5:3a:cb:a4:8d:8c:04:
9c:2c:e9:f4:30:8e:16:46:d0:f5:10:33:55:aa:60:a7:65:85:
d0:10:af:06:20:5d:92:fa:40:4e:5e:cc:8a:3d:ac:a0:dd:4b:
31:2d:c4:47:70:15:d8:50:0c:39:53:07:e5:e5:9b:d0:be:2c:
98:51:a6:ff:25:0f:cc:03:41:b9:e3:2f:d7:80:d1:1f:3a:05:
f5:69:4d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:09 2026 by rpki-client