
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/14CC134C57E811EC8A0ADB28C4F9AE02.roa
File: 14CC134C57E811EC8A0ADB28C4F9AE02.roa (raw, json)
Hash identifier: PFCTvt5dHCRCxJ6YFKAQSaHmX71jqHrFT2tA32fUqBI=
Subject key identifier: 07:84:FF:FC:1F:8B:BB:1B:59:3D:01:7C:19:59:7E:06:56:B2:34:D2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D684
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/14CC134C57E811EC8A0ADB28C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:44:23 +0000
ROA not before: Thu 08 May 2025 16:21:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 147264
IP address blocks: 103.177.172.0/23 maxlen: 24
2001:df4:55c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54916 (0xd684)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:21:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c147-dbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:06:e2:33:15:0b:34:4a:26:43:8b:ec:2c:34:
a2:36:d6:08:10:98:8b:26:6b:a6:2f:18:36:b3:1f:
44:c9:53:d4:02:63:44:c7:52:e4:b7:22:6a:38:5a:
ee:60:66:da:48:48:b0:f6:62:a6:39:3b:36:12:12:
d4:b7:fc:bf:45:e6:62:33:7b:be:03:d1:7d:a5:14:
db:c3:fc:01:3f:fa:f8:b0:dd:f6:ab:7c:95:f1:ab:
b1:1c:4c:e5:0d:8b:10:00:db:dc:c9:e7:04:f0:30:
3d:dd:88:de:61:c8:6e:ba:d2:eb:50:a2:a4:8e:b7:
70:6d:ca:f2:17:ee:11:e1:4c:4d:b6:9c:af:5b:2c:
34:3a:a5:07:17:04:84:fc:c9:f9:6d:d5:51:4f:22:
48:e5:6b:6c:1a:15:e6:66:c1:0f:bc:2e:2f:d3:d1:
e0:d3:ad:75:59:66:c2:f7:96:aa:ea:4b:35:3a:58:
f6:90:50:b6:9e:5a:7e:27:a9:95:06:b7:46:7e:f5:
53:99:64:a7:b5:b2:63:95:ad:81:ca:83:f2:7c:20:
46:15:31:3c:24:47:72:48:75:7b:7d:d5:5b:77:56:
fc:0b:6f:23:cc:cf:44:38:9b:11:d9:0b:be:b1:9a:
ea:12:de:18:86:66:b1:0f:32:05:3e:88:a0:01:8d:
bd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:84:FF:FC:1F:8B:BB:1B:59:3D:01:7C:19:59:7E:06:56:B2:34:D2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/14CC134C57E811EC8A0ADB28C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.177.172.0/23
IPv6:
2001:df4:55c0::/48
Signature Algorithm: sha256WithRSAEncryption
8d:b7:81:f7:99:f2:81:61:02:28:e4:e6:c8:cb:ca:54:74:8e:
b4:a8:61:ff:33:73:18:15:60:ce:06:9e:cd:93:ba:04:e9:94:
4f:94:a1:69:3d:cc:39:85:0a:22:e3:c9:13:2e:44:24:f2:49:
5e:db:72:06:c6:04:74:78:0c:f9:d2:7b:3e:73:70:0d:bd:f0:
ee:d9:b3:35:e3:30:78:31:01:71:e6:5d:f9:ff:71:4e:19:a0:
b4:bf:e7:ac:d8:db:23:df:58:34:3e:2c:40:d4:46:7b:4f:7f:
62:a9:40:4d:80:11:4f:35:79:34:72:5e:a9:48:49:44:9b:61:
4d:73:32:f9:f9:35:01:47:c1:f4:52:48:be:89:75:94:94:26:
22:c5:a9:91:a6:6b:2e:5a:44:88:31:c6:c8:c9:17:b9:cc:ab:
fc:fa:6c:35:3a:32:d2:a6:78:ad:2e:31:6a:4b:9b:0f:ec:8a:
71:6d:c6:3f:1f:ab:88:a1:ef:1b:ab:16:8e:6b:bd:72:12:a1:
73:55:07:da:89:68:16:1f:86:3d:0c:6b:00:f3:cd:ca:ca:e8:
b8:c8:bb:c7:e2:cd:cf:5e:f9:7b:73:b3:ae:c2:f3:bf:67:b9:
fc:5f:e1:ba:8d:b1:80:3a:dd:01:c1:58:1b:74:04:f4:ee:31:
d3:42:f0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:48 2026 by rpki-client