
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1544ABCCDCFD11EDBA63C734C4F9AE02.roa
File: 1544ABCCDCFD11EDBA63C734C4F9AE02.roa (raw, json)
Hash identifier: LCo8lHUXMZVnyal9MIhlGU7AayA3l5ziYgUeQJ+wbvk=
Subject key identifier: B0:EB:12:7D:FF:81:0B:50:6E:CC:E8:A8:C0:97:8B:18:3D:1A:03:C5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D777
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1544ABCCDCFD11EDBA63C734C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:50:18 +0000
ROA not before: Thu 08 May 2025 16:25:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150603
IP address blocks: 103.98.2.0/24 maxlen: 24
103.98.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55159 (0xd777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:25:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c2aa-ae8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:27:a9:fd:78:a2:6b:3b:45:c8:0c:a7:ab:
be:f5:e6:a1:5f:0a:94:85:60:aa:13:a5:71:21:7b:
64:13:9e:4a:4e:cd:0c:c0:91:98:69:7d:0c:d9:ae:
1b:e4:bd:70:59:5a:da:57:55:36:33:25:66:ec:3f:
b7:33:7c:53:fb:b6:dd:ea:b5:9f:5b:4f:5e:af:68:
b6:22:c2:9d:fc:34:fe:8b:5a:a4:b8:3c:1f:14:ba:
82:dc:d9:c0:88:5f:20:a0:bc:5d:89:42:3f:c6:bc:
10:c6:82:e1:96:18:37:99:b6:95:d1:96:2c:d3:0f:
6b:02:6e:ed:5d:7d:74:33:fe:e5:ff:a9:1a:b4:18:
85:29:96:e7:7d:a7:bc:3f:6c:71:2f:75:8e:a8:ef:
35:81:45:26:18:82:e9:70:9b:3f:59:ea:bd:0f:3a:
0d:4d:7e:16:a5:0a:87:ce:c8:4c:cc:92:5a:68:62:
79:eb:b8:8f:f2:a9:d3:07:5c:66:41:23:ca:b9:05:
a6:26:fb:b2:6e:e3:24:77:8c:0c:0a:d7:5f:71:93:
17:87:48:97:9b:d0:94:e3:1f:54:18:df:73:83:f0:
1b:24:5d:12:7a:09:b5:a6:8c:d2:ae:b0:7e:d7:34:
fa:f4:71:de:5d:37:94:d5:89:9f:7b:fc:db:81:fc:
64:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EB:12:7D:FF:81:0B:50:6E:CC:E8:A8:C0:97:8B:18:3D:1A:03:C5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1544ABCCDCFD11EDBA63C734C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.98.2.0/23
Signature Algorithm: sha256WithRSAEncryption
36:d2:7f:76:9f:1c:b2:b8:d4:05:87:60:09:3f:92:c6:08:45:
89:f3:20:51:9c:7d:14:5e:3f:38:2d:56:34:c6:38:49:cb:67:
8f:4d:b2:ab:f1:35:d4:cd:40:aa:9e:be:8d:0e:1c:fd:a6:27:
dc:c4:d5:79:75:c8:1c:9a:64:ce:51:9c:eb:69:81:82:b6:9e:
a7:bc:4c:78:f2:31:49:53:3f:b9:ed:eb:c0:1d:a4:1f:de:c4:
bd:60:db:87:33:3b:cc:12:f9:7c:30:83:a3:7e:2d:ff:23:bd:
ca:8d:81:5c:97:7e:c2:cb:5e:5c:96:c5:1d:59:95:12:c2:4a:
56:93:88:4f:a7:cc:15:07:c0:80:83:b6:79:4f:8a:3c:7c:06:
07:59:c9:41:ae:e6:bf:85:3d:c2:eb:2a:f8:4d:88:9e:44:61:
61:a0:bb:57:96:54:b8:be:db:52:ef:ea:df:f9:51:13:0e:c1:
e6:6b:42:49:f1:a7:5d:0f:d1:23:e8:91:82:12:28:f5:4c:5e:
ac:97:ae:68:24:99:3d:c3:08:d9:93:5a:38:6d:0c:7d:3c:4d:
77:07:ee:d1:c5:c0:8f:94:65:f3:1b:a5:5c:6f:8c:de:66:98:
8f:aa:6d:f2:4d:8e:c9:dc:7a:e4:ec:5e:e6:c4:e7:12:d7:90:
a6:68:92:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:14 2026 by rpki-client