
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3135702E855111EB8DEDD812C4F9AE02.roa
File: 3135702E855111EB8DEDD812C4F9AE02.roa (raw, json)
Hash identifier: vtPI81C/Vuaya8UesCB4N+3toPNh1YJFZqseudRgBzE=
Subject key identifier: 2E:43:2F:CB:52:E9:BD:BE:FB:78:74:1C:48:2B:3B:DF:14:A6:DF:A6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D1E1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3135702E855111EB8DEDD812C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:17:14 +0000
ROA not before: Thu 08 May 2025 15:58:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133244
IP address blocks: 103.117.216.0/24 maxlen: 24
103.117.217.0/24 maxlen: 24
103.117.218.0/24 maxlen: 24
103.117.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53729 (0xd1e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 15:58:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4baea-1652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:66:ad:a4:9b:b2:ab:ac:ba:ab:96:7c:1a:cc:
4c:2a:c9:bb:1b:d2:f5:d8:57:59:31:74:8e:8f:22:
1d:0a:13:d9:65:3b:8f:9b:69:5c:2d:06:51:4f:75:
7d:a7:af:aa:88:f5:f0:8d:33:94:a2:21:79:e5:39:
6b:07:5b:6a:2b:4a:47:c7:0e:2c:61:e7:88:14:6b:
eb:48:6c:04:25:83:28:18:9f:0b:32:73:8b:bc:16:
b7:e4:3e:dc:7f:34:8a:72:e7:f1:fe:b7:5f:1e:c2:
19:b7:01:2b:bd:16:46:c1:34:cf:42:b4:f2:b1:fa:
f1:45:0f:10:f8:84:9e:1d:e4:0e:29:b4:7a:60:ab:
2d:96:e5:22:55:3d:af:fe:0b:f6:a1:d1:39:65:97:
bd:27:7a:08:d6:d5:9f:6f:57:d5:b0:59:45:25:4b:
c4:60:c1:fd:82:98:ad:ec:cb:f6:9a:9f:e2:a8:7c:
7f:f0:c2:95:2e:73:34:34:18:96:25:1b:aa:8e:cc:
93:5d:4e:51:e6:3b:2c:51:e1:02:6a:0b:65:71:89:
9e:44:91:b2:bb:37:58:42:4a:19:9d:0c:52:c5:08:
1c:73:39:9f:db:19:16:de:20:0d:1f:31:eb:9e:92:
32:9d:b6:2c:39:67:1e:db:91:38:cb:07:ef:62:8e:
0d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:43:2F:CB:52:E9:BD:BE:FB:78:74:1C:48:2B:3B:DF:14:A6:DF:A6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3135702E855111EB8DEDD812C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.117.216.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:9d:2e:72:65:c4:b0:46:12:0c:81:4e:c7:f9:b8:63:1c:c0:
b1:d5:be:0c:60:e0:32:ad:70:04:92:7c:e2:bb:ac:2f:f5:c7:
0a:09:e1:2f:bb:6d:da:31:53:fe:37:71:86:8a:90:07:f5:65:
f1:eb:56:78:b9:b0:8d:bb:ab:c3:29:1b:9d:c9:a2:11:3f:ad:
5e:5f:90:35:22:e9:85:8a:44:d3:8e:77:3d:7b:3b:50:f9:8c:
a0:d3:67:07:8b:a9:6f:67:51:f7:c4:13:79:61:8b:ed:02:3e:
24:18:96:24:62:8a:9c:bc:21:54:94:5d:47:a9:bc:6e:63:ad:
24:5a:e0:0d:b3:a4:45:bc:19:5b:1d:1c:f1:29:cf:22:d8:a2:
e3:64:79:38:b4:ad:f0:ca:7f:28:b1:24:59:c2:56:a7:35:48:
95:f5:db:24:43:85:0d:ca:6c:48:56:8e:28:e4:8e:67:12:e3:
b3:28:60:71:77:6c:0d:17:3c:34:a9:8b:e1:47:55:fd:9c:87:
2d:7d:62:5f:6f:20:f5:32:b3:c5:ad:a9:eb:4d:42:4a:cd:0c:
bd:14:d9:b6:18:d1:c8:b5:65:ec:13:22:e0:3f:03:dd:14:2e:
d4:b7:38:7e:99:2e:f3:46:2b:54:43:aa:6c:28:60:2e:45:0d:
67:25:12:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:17 2026 by rpki-client