
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FDD48D6109411EC84840956C4F9AE02.roa
File: 2FDD48D6109411EC84840956C4F9AE02.roa (raw, json)
Hash identifier: LKxyBetjLzeZuGBrKJ+STMPTKpSlQDCWIGK/xC8CxCA=
Subject key identifier: E6:8F:53:1B:64:30:3B:8A:69:DC:FF:85:34:3B:30:57:32:F5:86:AC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D606
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FDD48D6109411EC84840956C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:41:27 +0000
ROA not before: Thu 08 May 2025 16:18:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142498
IP address blocks: 103.169.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54790 (0xd606)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:18:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c097-2818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:1b:e6:c3:fe:60:ec:bb:f6:63:26:98:d6:
63:bd:f1:99:d1:d3:aa:d2:6d:36:9b:12:05:35:0f:
a0:20:a7:e7:31:2d:49:a3:ce:84:9e:bf:87:d3:12:
cf:55:e0:6d:a1:94:6c:41:cc:da:d3:6b:75:8c:99:
e9:19:6a:24:76:e6:06:6a:34:9b:86:d3:bc:d2:1f:
2f:4b:a8:09:55:7e:45:2f:ce:76:c5:d9:5a:20:3c:
f9:a6:d5:21:df:a3:03:e4:13:74:c6:5f:fa:9c:93:
91:3f:79:c9:52:dd:42:9d:90:ea:51:ee:78:76:26:
8c:7b:87:70:37:59:cb:69:fd:fe:8a:aa:34:69:64:
88:a8:69:63:a0:b7:c9:34:db:e3:95:9d:a4:3c:e1:
cd:6a:5d:91:7b:8e:6c:20:8d:9c:5c:c9:ec:c1:74:
6e:7d:ac:b2:25:14:d6:db:5d:fa:f5:40:15:be:a2:
21:62:b2:2a:12:68:b0:12:33:3b:fa:99:af:27:8d:
43:de:51:9a:d0:a7:b3:00:0f:f0:11:04:60:d3:35:
d5:66:03:6d:95:68:62:89:14:62:b4:cc:e4:d4:bf:
0a:e4:c5:f7:d1:b1:02:20:46:19:0b:40:5f:ac:04:
72:3e:28:e2:8a:a6:80:7b:f5:7c:30:a8:12:e9:d3:
9c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8F:53:1B:64:30:3B:8A:69:DC:FF:85:34:3B:30:57:32:F5:86:AC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FDD48D6109411EC84840956C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.169.164.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:66:b1:c2:dd:bf:a8:23:20:7b:de:65:11:51:e2:82:e6:76:
16:99:e6:e6:b7:e6:da:cd:8b:11:bf:7f:ea:e2:0d:ec:fe:e1:
9f:e9:4e:2e:a5:77:2e:2d:fa:7a:cd:86:d4:d0:ca:a1:23:7f:
0c:80:58:ed:ff:e3:60:cf:b1:90:0d:22:e6:cc:d2:4e:53:99:
d8:f5:dc:c6:c8:12:fb:36:ec:9d:ca:3a:d7:ce:40:81:29:9a:
88:fb:4f:32:6a:08:02:e3:68:6c:91:0b:da:d8:64:ca:a2:3d:
3b:13:83:4b:0d:ba:eb:19:25:83:c2:36:c5:37:3e:0f:f3:17:
11:02:97:b2:96:bf:83:9e:04:46:58:b3:ab:34:a6:35:55:b9:
b2:b4:1e:35:a7:ce:a8:38:c4:5e:c6:fa:2b:c9:68:b6:f7:dc:
54:7e:29:97:25:9a:01:76:7f:6b:d8:48:02:03:99:9b:f3:9f:
35:eb:e3:85:26:46:b8:d8:72:65:f7:f0:81:2e:5a:20:1b:c1:
ef:cb:d7:32:15:8a:39:62:90:a9:04:ed:ad:af:2b:80:7d:84:
30:60:60:b3:df:b0:03:38:8f:25:08:7c:79:29:d4:66:41:a6:
8b:d3:8e:fd:67:c7:34:ba:d6:04:c0:50:c7:e4:0c:45:28:03:
9e:94:15:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:52 2026 by rpki-client