
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3A093262575111ECBC35696FC4F9AE02.roa
File: 3A093262575111ECBC35696FC4F9AE02.roa (raw, json)
Hash identifier: s4BT0/wCXyQBCjOGGeGDr+X80+nU3iFJyDAYJVuBEks=
Subject key identifier: 6D:8D:57:4A:5F:2D:A8:2F:44:46:FD:D6:ED:0C:0D:AA:68:3F:EE:0D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D241
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3A093262575111ECBC35696FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:18:54 +0000
ROA not before: Thu 08 May 2025 16:00:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134011
IP address blocks: 103.174.21.0/24 maxlen: 24
2001:df7:b980::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53825 (0xd241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:00:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bb4e-c6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:20:e6:ac:46:64:2e:13:2e:3e:0e:73:47:5f:
73:7c:0d:72:7f:17:5a:8a:fb:ae:ca:80:7c:55:cb:
bf:55:d7:3b:85:a6:dd:9e:ca:5c:46:b8:08:31:69:
a0:ad:f8:f7:f6:91:9c:93:b0:de:c5:be:d8:ec:c7:
08:f1:02:bf:39:60:ce:76:e4:b1:43:8f:dc:70:cf:
dc:b8:6d:e5:f0:ee:8f:4d:16:d4:ab:0d:bd:36:b5:
c7:41:41:8a:91:a8:7f:82:fd:e9:ed:b5:d7:d3:3c:
39:4f:00:81:e3:76:07:fc:9f:51:d1:3b:66:11:95:
cc:ee:01:24:32:f4:57:bc:c3:4c:2e:5c:5b:9f:83:
92:5b:51:2b:9d:60:ec:9d:fe:f0:1e:7c:74:5c:80:
9c:6f:fc:42:6e:7d:ea:92:41:0b:fa:64:02:69:b9:
16:ee:1c:66:e7:a6:b7:7e:94:55:86:30:39:93:6e:
af:4a:36:47:d2:17:c9:54:b2:4e:54:f1:2b:20:35:
e4:44:bb:fb:a2:5d:a5:9b:85:68:29:90:74:99:d5:
29:74:cb:22:8b:0d:74:9e:23:e7:7c:9b:8d:03:e2:
d1:35:20:4b:86:8d:37:56:80:f6:a2:0f:50:c7:ca:
2d:97:dd:ae:b3:f8:b9:62:d2:73:e7:28:fd:c5:a9:
01:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8D:57:4A:5F:2D:A8:2F:44:46:FD:D6:ED:0C:0D:AA:68:3F:EE:0D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3A093262575111ECBC35696FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.174.21.0/24
IPv6:
2001:df7:b980::/48
Signature Algorithm: sha256WithRSAEncryption
0d:f3:58:e8:9d:4b:e1:ae:af:d3:bb:8a:5c:26:b7:0a:90:40:
76:7e:21:ed:a4:aa:d4:dd:b1:0b:c0:a2:1a:32:1d:1b:e3:e1:
22:5d:7a:53:fb:87:00:8e:ce:1b:a8:d4:52:c3:26:27:09:1a:
1f:e4:2c:22:c3:60:31:ec:8b:2d:0e:3a:c2:69:af:97:fa:f0:
16:80:c2:7a:96:b8:80:e7:ae:b4:b2:35:dc:32:8b:5a:f4:19:
62:05:bc:c1:c7:7b:fb:c1:f8:41:0b:79:43:5a:fc:bb:d7:c3:
0b:e1:95:90:da:17:0d:e3:f2:b9:be:76:56:27:15:a1:18:7d:
af:95:8f:0f:3d:6a:93:d6:fb:92:3d:bf:09:3f:e4:dd:7a:4e:
f2:4c:f1:99:7e:a4:27:8b:8f:6f:d2:33:ee:ff:e7:e7:91:0b:
eb:d5:eb:e1:27:3f:49:51:20:b3:56:b0:d4:a3:0a:43:ae:0f:
ed:fb:64:4b:f0:89:49:a5:37:de:84:10:97:ed:f8:1b:68:a1:
ee:bf:2f:96:33:ce:d5:97:68:91:a1:76:91:36:12:2d:99:7f:
6c:6e:72:d7:10:f6:c1:4e:6f:53:c7:2d:1c:51:7b:46:13:a3:
ba:a3:26:72:bd:a2:28:cd:ba:17:e9:6b:9b:1e:0e:10:0d:f5:
e7:10:d5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:13 2026 by rpki-client