
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2F6DB518360911F0BD7C4161C4F9AE02.roa
File: 2F6DB518360911F0BD7C4161C4F9AE02.roa (raw, json)
Hash identifier: hY5ARNM+zuCSg9MXe+CkKy4VVBlp/LXl65Dn+kPcBIM=
Subject key identifier: B9:2E:49:0A:77:7E:0B:12:51:34:4B:05:3F:E1:85:CE:48:87:36:F2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D935
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2F6DB518360911F0BD7C4161C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:58:14 +0000
ROA not before: Mon 16 Jun 2025 12:08:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136373
IP address blocks: 103.57.66.0/23 maxlen: 24
103.69.88.0/22 maxlen: 24
103.122.200.0/23 maxlen: 24
103.143.39.0/24 maxlen: 24
103.163.68.0/23 maxlen: 24
103.164.176.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55605 (0xd935)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 16 12:08:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c486-8904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:57:38:dc:a7:3f:09:40:56:97:94:81:42:b0:
4b:4e:be:71:1a:5e:f8:60:f3:e5:da:43:80:83:b7:
17:51:81:57:24:b6:84:89:83:aa:d3:ad:be:99:a3:
7b:19:54:d7:be:79:c9:c3:86:d4:40:c0:ec:51:4e:
8d:d8:7a:22:9d:11:36:1c:50:36:74:f7:1c:68:ac:
63:88:55:70:27:2f:98:03:d7:b0:80:12:21:dc:9e:
88:63:7b:3e:54:01:68:29:f3:b6:53:e9:c3:b9:00:
bd:63:68:bc:27:ce:56:c9:e0:2d:7a:42:2f:74:ed:
ff:56:a0:2e:9f:97:29:a1:15:57:34:f4:aa:03:f4:
34:14:41:12:ef:99:7d:5b:8d:16:3e:b6:36:d6:60:
0e:a4:9a:2e:d4:b1:3f:c4:a3:b2:5c:56:3c:a0:b9:
43:8f:f8:a5:fb:89:dd:94:c5:c8:55:5b:94:6f:a2:
b8:45:50:6f:5d:39:90:f2:92:30:73:d4:75:68:04:
f0:f1:b1:19:ca:06:01:35:e9:4d:95:c6:21:fc:1d:
b5:a8:47:bc:4e:d3:b8:c6:af:56:f2:2c:d1:d4:66:
26:e9:85:e7:ee:16:4b:e1:0f:1b:3d:ec:11:00:b5:
04:f3:80:1a:7c:18:b6:1f:9e:a1:7d:a8:8f:0f:f5:
54:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2E:49:0A:77:7E:0B:12:51:34:4B:05:3F:E1:85:CE:48:87:36:F2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2F6DB518360911F0BD7C4161C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.57.66.0/23
103.69.88.0/22
103.122.200.0/23
103.143.39.0/24
103.163.68.0/23
103.164.176.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:4f:69:61:5a:d5:a4:07:14:51:f0:11:dd:53:f1:fb:30:7e:
bb:f9:49:86:b1:a0:fe:b7:0d:3e:cb:7e:1d:68:bb:50:e3:d9:
84:7b:f6:e5:1a:f4:66:45:50:bb:e8:7e:34:bf:85:dc:26:e6:
b5:86:ee:33:d9:12:88:fc:6c:75:5a:f7:ac:8a:36:cd:8d:dd:
62:a5:ad:59:7b:10:01:31:ce:43:2c:87:b4:9a:ba:9c:28:e0:
53:e0:ca:92:d4:30:02:9d:cd:8b:7e:a8:1e:4c:77:4c:f1:ae:
8e:77:66:59:7c:c3:4c:f1:bd:cc:59:3e:7e:8a:e0:0b:12:a7:
82:55:d7:d4:ef:25:be:ea:d7:f2:ce:76:67:3c:1f:3f:72:fb:
5f:cc:e1:00:3d:a4:6f:78:64:da:89:b9:af:84:93:29:66:96:
6e:80:45:a5:68:ce:51:82:24:9b:51:03:93:9f:5d:72:b8:36:
7a:0e:21:ca:86:ae:f9:6c:dc:16:7e:b2:b2:18:b5:f9:6b:97:
df:b5:d8:81:92:9d:22:77:71:90:80:f0:09:38:0e:b7:72:af:
cd:cc:f1:44:27:62:5e:d1:72:80:7e:c0:4b:6c:ae:b0:6f:43:
5b:52:06:fc:cd:7b:e1:fb:a9:be:f6:84:15:c9:66:1e:6f:aa:
4c:01:ab:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:38:47 2026 by rpki-client