
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E4E5596258511F0AA28DF14C4F9AE02.roa
File: 2E4E5596258511F0AA28DF14C4F9AE02.roa (raw, json)
Hash identifier: pbSNF9HslBm/1Onxq3CFGWQgbBkplyQTZpYPBiXSx/4=
Subject key identifier: DE:B1:4C:9F:8D:04:E8:BB:DC:FE:58:8B:44:38:E7:34:CB:DA:7A:FA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D4B0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E4E5596258511F0AA28DF14C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:33:31 +0000
ROA not before: Thu 08 May 2025 16:12:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138759
IP address blocks: 103.98.36.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54448 (0xd4b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:12:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4beba-031b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:23:1a:cf:48:77:5c:7d:3a:80:b9:7d:55:d0:
33:25:6c:e8:7b:f3:eb:90:41:83:23:20:5f:4d:14:
0c:32:ed:0f:9d:56:49:b7:6f:80:d1:b3:0c:b1:da:
04:3f:a5:46:9d:1b:d8:7e:55:f8:f3:c4:bc:6f:12:
fb:01:b1:e8:23:f0:66:b7:79:a3:ae:f8:23:ca:c5:
08:04:c2:e2:87:bf:60:a8:79:bd:d3:e8:98:76:9c:
08:fa:ac:94:51:81:5a:86:b6:60:67:f4:0c:62:80:
83:4d:77:af:62:d2:f0:89:22:44:55:ea:2f:f5:22:
17:d1:57:1d:d2:ca:dd:3f:02:14:e3:3a:7a:79:8b:
e2:b7:af:a7:ed:19:05:fd:00:fe:5c:e9:36:ea:4d:
3d:3e:6d:dc:df:62:0a:ed:82:87:9d:93:b0:9a:20:
75:02:af:b5:82:61:cc:6a:ae:48:5b:26:57:15:b8:
40:c7:45:2c:eb:3d:cb:93:d9:94:f2:68:c8:ea:3b:
4c:3f:a0:7d:40:8e:74:a8:c2:89:3f:81:8d:c1:7d:
33:af:96:2d:4d:f3:c5:ed:4b:9d:4c:8c:b9:e8:f4:
7d:ca:40:59:21:0b:a3:04:6e:dc:26:f6:6b:a2:bf:
ee:0b:4f:0c:51:f1:e9:7f:f3:6e:60:a4:f1:c4:d8:
59:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B1:4C:9F:8D:04:E8:BB:DC:FE:58:8B:44:38:E7:34:CB:DA:7A:FA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E4E5596258511F0AA28DF14C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.98.36.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:4a:4f:08:ee:19:59:5f:5b:2a:d5:5f:66:bb:88:7a:9b:ac:
65:8d:d1:9f:7c:d2:a8:30:83:65:ca:78:a9:34:bc:f8:93:17:
8c:18:4a:b4:da:9c:5f:13:98:d2:aa:85:97:b4:fb:d8:d5:94:
bf:61:08:3f:a6:e0:75:47:76:8d:4b:a3:93:b4:9b:ca:4f:02:
2e:28:6d:7f:58:5c:a6:7f:b9:c0:07:dc:52:80:c0:37:fe:ae:
0a:d1:72:ca:fb:a5:cd:2a:0e:b7:ce:20:8d:31:82:9d:94:03:
46:01:0c:96:6e:42:41:67:12:dc:ae:77:c4:1a:d7:b8:2d:df:
54:1b:e7:cb:a1:07:89:dc:ad:7e:89:3c:8d:3c:28:1c:5a:9d:
50:93:b2:a0:ce:c6:9b:dc:97:1c:36:03:6c:7c:aa:d9:de:dc:
e7:98:87:2a:f1:1e:23:b4:09:86:65:10:64:c4:51:a6:91:85:
b2:32:b1:7c:9c:11:e4:95:f8:45:79:d4:de:4f:e3:13:59:2d:
a5:b5:87:6f:cb:af:50:ac:91:26:35:17:b9:45:90:bf:ce:f2:
96:02:3b:8a:00:eb:db:34:13:f6:8c:64:8e:f4:3d:3c:10:61:
4f:79:ef:31:ea:91:32:78:fb:8c:1e:a2:5b:6a:b0:14:5b:86:
56:1c:7b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:24 2026 by rpki-client