
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/39A2CCCC8E1911F08C97C46EC4F9AE02.roa
File: 39A2CCCC8E1911F08C97C46EC4F9AE02.roa (raw, json)
Hash identifier: 3vymoFY0GbHFy5pYGus9wL2ANuftjlUUfDVeKT3zmlw=
Subject key identifier: EB:1E:31:8C:F8:60:84:FA:84:46:F8:B9:47:F9:6A:30:48:99:76:0C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DA02
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/39A2CCCC8E1911F08C97C46EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 23:02:05 +0000
ROA not before: Wed 10 Sep 2025 07:39:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132420
IP address blocks: 103.35.164.0/23 maxlen: 24
103.48.50.0/23 maxlen: 24
103.59.180.0/23 maxlen: 24
103.65.20.0/23 maxlen: 24
103.171.44.0/24 maxlen: 24
103.171.45.0/24 maxlen: 24
103.175.22.0/24 maxlen: 24
103.175.163.0/24 maxlen: 24
103.178.248.0/24 maxlen: 24
103.185.212.0/24 maxlen: 24
202.66.172.0/23 maxlen: 24
202.66.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55810 (0xda02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 10 07:39:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c56d-0718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ab:d0:00:ce:c3:38:b0:de:99:29:c8:5c:1c:
e1:9c:4a:d5:6f:8f:48:6a:24:5e:40:2d:cd:f2:db:
b7:6f:27:c5:45:93:54:98:4a:ba:dd:29:7a:ed:10:
d4:28:b1:46:52:51:8a:ab:ac:87:8a:66:6e:ca:e6:
61:82:30:d1:96:e6:6d:a5:53:a2:47:64:38:7e:c5:
2c:86:56:fc:19:db:9c:e3:62:32:0f:bf:c5:b1:ab:
49:91:10:48:8a:6e:1e:74:c1:b9:1b:2e:85:03:35:
46:f8:5a:29:d6:c2:dc:d2:22:f7:64:c7:d0:44:d2:
8c:2e:1c:47:85:50:90:97:6d:ec:43:78:32:24:65:
1c:ea:84:de:0c:92:f1:ef:2b:2c:dc:55:0a:e7:e1:
67:c6:9f:ba:85:cc:6f:17:7b:ab:81:2d:99:0b:c9:
6d:d2:a7:47:98:74:d8:85:97:47:d9:a9:aa:b7:99:
ec:f8:bc:a0:37:7a:5b:5a:ed:25:6a:49:ec:8f:5e:
49:7f:21:6f:7f:c3:14:7f:47:61:d5:55:d6:f9:63:
7e:ad:d8:41:2a:0b:30:47:42:8c:04:49:26:1e:bc:
53:60:78:0b:ba:67:8e:ba:37:43:a0:40:dc:9d:1d:
cd:bc:11:0c:89:ee:65:8f:68:aa:95:c5:61:b9:88:
84:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1E:31:8C:F8:60:84:FA:84:46:F8:B9:47:F9:6A:30:48:99:76:0C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/39A2CCCC8E1911F08C97C46EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.35.164.0/23
103.48.50.0/23
103.59.180.0/23
103.65.20.0/23
103.171.44.0/23
103.175.22.0/24
103.175.163.0/24
103.178.248.0/24
103.185.212.0/24
202.66.172.0/22
Signature Algorithm: sha256WithRSAEncryption
77:75:10:05:3d:9d:54:95:0f:52:1b:24:90:a2:37:e1:f8:6a:
aa:0b:84:d0:26:5e:94:ad:73:65:82:bb:50:90:e6:74:bc:9d:
c8:8c:62:e1:f1:73:a9:f2:c5:db:bc:db:c2:da:04:dd:60:a6:
15:d2:f9:c2:4c:d8:48:39:98:2f:dd:83:94:f7:27:58:ff:f2:
0d:c9:6c:71:3d:d3:d0:c5:c4:ba:11:1c:bd:5e:fe:8d:43:f7:
c4:3d:eb:1e:88:a9:a2:56:f0:34:71:b5:d4:94:ce:01:d4:74:
f1:3e:30:01:bf:59:bf:da:5b:b3:4e:c6:20:6d:b0:ff:af:3a:
81:95:02:a7:0e:27:0a:e9:94:c0:f0:93:a2:66:43:2b:5b:59:
ef:1c:2b:86:53:91:ce:af:27:33:43:33:8f:d0:3e:85:43:0f:
19:cb:04:78:c3:5a:a3:aa:96:c3:a6:11:b3:1f:3e:7d:32:f7:
65:14:30:01:8d:94:a8:13:e8:68:95:c5:29:79:4d:f8:9c:85:
44:f5:b8:9b:35:e5:52:7b:7e:3e:36:11:34:e8:27:0e:86:9c:
20:5c:4d:b8:32:5f:6b:c6:66:92:4f:84:77:b1:9b:bf:64:bb:
7f:a7:99:ea:a4:8e:ab:98:31:3a:a0:bf:7f:8b:ef:85:a5:99:
06:a0:08:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:16:43 2026 by rpki-client