
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/22025E3A0A2E11EB9F9E9B0BC4F9AE02.roa
File: 22025E3A0A2E11EB9F9E9B0BC4F9AE02.roa (raw, json)
Hash identifier: mSLnKkXUZCxU8AvozSSek7X3Z5wozquq7L22mAbt1tc=
Subject key identifier: C7:AF:B5:04:19:2C:FC:15:E6:A5:39:A9:5F:99:97:01:35:C5:38:82
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D44E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/22025E3A0A2E11EB9F9E9B0BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:31:09 +0000
ROA not before: Thu 08 May 2025 16:10:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137652
IP address blocks: 103.120.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54350 (0xd44e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:10:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4be2d-1e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7e:c2:52:47:f4:78:a9:cb:59:db:42:0e:8c:
b2:34:68:fd:e7:2a:9d:50:78:2b:5c:c8:73:6f:8b:
93:0a:0e:ba:84:e5:40:48:49:a4:ea:f9:31:03:4f:
5d:a9:89:bd:b5:b6:4b:05:c2:86:b3:d7:af:ee:f0:
35:33:36:b4:a8:d1:67:0f:27:ef:4d:9f:65:0e:7d:
f9:3c:25:45:8f:87:0a:6e:3a:de:91:e1:51:97:1c:
2a:9a:83:7c:00:b4:f3:71:1c:c5:26:91:4a:6f:42:
da:e0:74:df:32:38:ca:59:1a:38:3c:b2:3c:41:b1:
7f:0c:a7:24:df:5c:1a:f7:78:f5:2b:5c:4b:f3:4b:
99:da:f8:f4:07:5d:73:d8:5f:20:3a:58:b4:6f:34:
f3:36:8e:ed:e4:9d:c0:ea:c6:f7:13:9a:0e:e1:a5:
2a:f1:8a:58:8e:b7:65:65:0e:65:f0:16:a3:4a:63:
a4:00:02:d5:8c:64:f2:53:31:9a:36:12:7a:9d:7f:
0f:08:2f:7f:35:56:ce:4d:25:77:ef:6f:1a:f0:f5:
43:1f:6d:27:7a:d1:a8:19:1a:e0:9e:49:aa:a7:bd:
43:03:2a:42:2e:22:7e:21:3b:df:c6:fd:b2:08:54:
73:a5:59:c9:35:3c:80:70:28:de:d0:39:09:d7:74:
b3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AF:B5:04:19:2C:FC:15:E6:A5:39:A9:5F:99:97:01:35:C5:38:82
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/22025E3A0A2E11EB9F9E9B0BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.120.126.0/23
Signature Algorithm: sha256WithRSAEncryption
10:27:b7:e4:f6:0c:42:72:e1:61:c9:4f:e9:3c:6a:5f:fc:ad:
b9:1e:0d:b2:d5:95:c7:4d:dc:02:fb:00:5e:91:3b:f7:e6:17:
4f:a3:33:dd:fc:81:e0:e1:8d:f7:d0:23:80:60:78:71:80:3f:
af:7c:d4:d6:2c:ef:3b:0e:2d:4e:6d:25:4d:f9:cc:29:70:71:
48:5d:d1:00:a1:9f:9c:81:db:50:1e:ae:42:8c:77:a2:21:58:
ad:ee:58:a9:67:54:f6:4f:43:10:e6:21:df:81:85:a9:bd:03:
dd:15:7c:48:a2:33:8b:b6:87:c8:c2:56:8c:df:34:60:82:b8:
79:63:d2:b5:7d:cc:00:c4:73:27:5e:4d:e3:ae:fd:10:e5:ae:
4c:f4:5d:20:5c:5c:2d:46:e8:3b:12:e4:ff:62:be:c7:1d:61:
c3:0b:35:9a:d3:32:ea:e8:b5:8a:8a:cb:7c:50:60:9e:4f:2a:
ab:89:e8:e5:54:ff:44:9d:b8:1f:36:35:5f:3f:85:7a:1e:d5:
5f:3e:8f:3f:7b:ec:67:b3:ba:a4:fa:a7:a7:29:c7:73:85:10:
c9:40:ca:c1:38:73:21:5c:94:0c:71:df:9d:7c:77:06:98:42:
dd:6d:a4:4b:c1:41:65:52:3a:cd:5d:62:e9:b4:09:4f:71:36:
0e:95:b5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:42 2026 by rpki-client