
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/30F88C40861011EFA93BE439C4F9AE02.roa
File: 30F88C40861011EFA93BE439C4F9AE02.roa (raw, json)
Hash identifier: Nak1g5KKBuVB6GUjHVs0yn08vjj+5Q1TzLK0OpJVcBc=
Subject key identifier: 67:60:89:51:C9:79:7F:55:33:D4:6C:FA:1D:3A:46:59:F3:87:E8:A8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D59F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/30F88C40861011EFA93BE439C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:39:04 +0000
ROA not before: Thu 08 May 2025 16:17:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141559
IP address blocks: 103.163.196.0/23 maxlen: 24
2407:2cc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54687 (0xd59f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:17:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c008-a143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:8c:d6:ae:86:d1:da:c1:80:15:ad:d8:90:
9d:01:f9:f8:e8:a2:15:d1:45:d4:e0:25:5f:63:c5:
84:d0:87:12:93:90:44:d6:ae:21:3b:86:51:80:bf:
43:d8:55:38:1f:18:37:1a:7b:28:84:d9:2c:74:28:
b8:56:6c:df:20:03:b7:76:f4:38:90:14:47:2a:05:
8e:2b:9f:fb:73:fe:cb:0f:93:0c:d5:1c:80:6c:d4:
86:86:67:05:a1:d2:88:d8:88:f6:d6:c3:71:21:63:
1c:a0:98:16:5a:7d:5f:bd:b9:80:3c:02:9f:3b:74:
ed:b0:cd:b2:f1:5c:9d:bf:a1:d2:7d:5a:4c:25:ab:
d6:d3:df:00:66:e0:49:fc:65:c2:c1:07:e9:e4:17:
2a:65:30:bd:19:fa:58:f3:e5:39:03:a9:1d:85:87:
be:16:87:13:2e:42:ea:05:5d:2d:02:f6:f5:03:a5:
be:a2:13:ba:ae:da:de:b3:22:02:25:41:39:1d:ef:
24:88:c4:e1:bd:f2:a4:30:8d:8a:eb:cf:fb:da:0f:
0e:e0:2d:12:a0:6c:61:53:12:1c:72:cd:49:ac:62:
42:6b:2e:74:a9:66:ec:3a:c9:28:cf:a0:f8:55:b7:
46:ed:27:f0:74:89:fd:ac:e4:20:48:b5:2e:7d:b2:
6c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:60:89:51:C9:79:7F:55:33:D4:6C:FA:1D:3A:46:59:F3:87:E8:A8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/30F88C40861011EFA93BE439C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.163.196.0/23
IPv6:
2407:2cc0::/32
Signature Algorithm: sha256WithRSAEncryption
aa:85:5d:48:01:bc:d0:7c:59:01:72:37:26:11:ed:1f:23:6d:
fb:db:7f:55:f6:ec:2c:34:39:b4:2f:35:5a:21:0a:64:e8:20:
be:b7:a1:88:e5:42:5e:2c:97:4a:ef:7a:06:b4:a6:80:46:ce:
29:6e:65:fe:dd:21:b0:c2:d9:31:c5:32:b3:d8:b4:02:64:cb:
42:e4:e4:40:89:ef:8c:06:73:e4:7e:42:8b:b3:83:1c:88:71:
35:c4:4a:5d:15:ef:90:03:5e:24:db:19:95:82:36:e0:9b:7e:
d8:52:6b:b8:f2:fa:37:76:4a:24:c0:10:f8:1e:75:21:01:a4:
7e:15:a2:88:a8:09:c6:98:ba:c7:e2:4f:b3:1b:e3:42:9f:cd:
c1:ec:dc:6c:52:d5:58:3c:2c:26:f9:02:a1:4b:fc:b1:6a:af:
01:d7:b1:12:b6:e6:d2:17:dd:e6:a7:ea:c7:26:d8:03:05:2e:
56:0f:84:cd:63:55:ff:87:70:9b:e2:35:97:d5:6a:d2:69:81:
cc:ab:6f:df:d0:00:9d:62:ee:a8:ef:7b:db:89:78:79:a9:3c:
7c:bb:65:72:87:2c:25:d5:2e:3f:f6:a2:bc:d5:e2:1a:30:5b:
12:2b:17:44:9e:b1:df:b7:0d:18:a8:0b:52:41:03:6f:ca:7e:
8f:9a:ca:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:12:24 2026 by rpki-client