
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E026214BCB311EDB63ABA82C4F9AE02.roa
File: 1E026214BCB311EDB63ABA82C4F9AE02.roa (raw, json)
Hash identifier: qrVsQhdWTqUDjL/ZTLjISP7SSd2O5r+Xp2A6ofXEa6U=
Subject key identifier: 03:F2:BB:82:BE:C9:07:41:43:6F:57:A9:39:F9:75:D9:FA:3A:58:1B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D6EF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E026214BCB311EDB63ABA82C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:47:07 +0000
ROA not before: Thu 08 May 2025 16:23:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149561
IP address blocks: 103.189.182.0/23 maxlen: 24
2001:df2:28c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 11:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55023 (0xd6ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:23:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c1eb-c076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d0:2b:1d:53:45:3c:fc:04:a7:12:43:d1:3d:
d9:d1:1d:8c:1b:e3:0e:bd:bb:02:a7:35:32:19:2e:
99:8d:90:19:26:dc:60:4d:9c:3b:e2:53:1c:8a:45:
e5:9d:07:dd:c1:7a:e2:c8:58:b9:7c:c4:5f:b6:bc:
ac:9c:79:48:20:c9:b9:00:3e:6a:40:e2:e8:65:32:
98:b8:b4:04:94:28:5e:43:60:0a:c2:d8:47:92:fe:
d7:be:90:1b:c0:6e:6c:69:95:98:3a:9c:a3:6c:6e:
25:30:2c:16:27:04:1a:5f:51:02:6e:94:ea:1e:ef:
e6:03:5c:11:64:3c:e0:19:a4:a9:3b:48:f1:ab:8c:
f7:02:11:78:03:9f:f0:01:e4:b2:76:6f:98:9c:a9:
17:e8:b0:51:a4:d8:e5:db:40:4c:9a:7e:78:6e:fe:
0c:5e:c5:fd:3d:a1:3b:0c:8e:50:5f:38:65:db:c0:
26:fe:00:31:85:72:80:c3:3c:ed:57:27:80:b7:2a:
fb:27:15:7d:21:7f:c1:64:cf:3c:d5:8c:ce:2c:fd:
ab:50:b6:b7:e9:e4:ec:57:4a:9d:15:57:44:f6:a3:
af:79:26:59:63:d1:af:4b:ab:f9:4f:bc:c5:80:21:
79:9d:62:d8:b1:a7:5c:23:40:6f:5c:01:9b:6f:71:
e2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F2:BB:82:BE:C9:07:41:43:6F:57:A9:39:F9:75:D9:FA:3A:58:1B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E026214BCB311EDB63ABA82C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.189.182.0/23
IPv6:
2001:df2:28c0::/48
Signature Algorithm: sha256WithRSAEncryption
2c:f2:6c:ef:46:39:ed:42:26:61:55:4c:f3:2c:46:2b:b3:54:
99:b6:6e:5a:a5:82:2f:c8:6c:c1:7a:de:e9:5d:ca:a1:bc:01:
e1:08:e4:14:fd:fb:1c:3a:97:2f:0c:e6:16:85:22:a8:7c:4f:
16:d9:fb:82:31:db:88:01:b7:2c:cb:d3:e8:35:4b:87:09:95:
8d:62:8f:1a:ef:e8:43:db:68:35:06:59:b9:f1:5f:0b:c4:c0:
32:03:f8:f2:6e:a6:7e:00:51:0c:62:21:75:f3:47:fe:fd:d4:
9d:e3:5c:a3:86:66:fa:60:97:7a:fd:3d:df:07:cf:7f:f7:e9:
a0:d1:b9:9e:93:03:57:3f:32:75:00:5e:b2:00:11:15:72:d0:
6d:3e:0a:f0:e5:b2:69:c3:42:6c:74:fa:3e:6c:c8:70:11:65:
1b:f5:14:96:ca:ec:1c:d9:5d:86:e5:5c:70:10:e5:c6:3e:06:
a5:be:ae:9e:0a:98:31:ba:bc:97:ef:98:75:cf:3b:70:20:35:
30:65:7f:08:ee:2f:00:88:35:68:f5:39:f0:97:d9:c1:60:90:
de:c3:f2:61:3b:09:03:f5:69:20:51:27:28:37:de:90:10:ed:
6b:96:5b:b2:53:35:41:72:4c:f1:7b:7b:f9:1d:5e:fd:14:ea:
3b:10:7e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:31:13 2026 by rpki-client