
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3B453790B0C311EC87CC1D3AC4F9AE02.roa
File: 3B453790B0C311EC87CC1D3AC4F9AE02.roa (raw, json)
Hash identifier: wr95x8hyhE6KPmsPmMlnBd2Wn8BL9wVKYR6OGwXdcso=
Subject key identifier: FD:60:DD:BA:C1:F8:4A:4E:DA:3C:F6:D0:BB:20:44:35:23:84:EF:2A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D710
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3B453790B0C311EC87CC1D3AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:47:54 +0000
ROA not before: Thu 08 May 2025 16:23:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149608
IP address blocks: 103.184.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55056 (0xd710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:23:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c21a-99ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d1:3c:0d:92:64:f6:bd:e4:1d:15:9f:ed:1a:
3e:d3:94:1b:58:c9:36:e4:66:4f:c6:d9:25:48:dc:
52:50:2c:26:ae:a2:d7:36:d1:d8:70:8c:b1:18:c1:
71:4c:64:78:4d:c3:cc:e2:a0:10:af:e8:6a:c4:34:
4b:27:4d:6f:3f:cf:3e:79:9e:d5:79:5d:fa:30:05:
0b:55:03:b8:8b:9a:ae:bf:12:59:14:55:1e:70:a0:
48:7e:b2:a8:8f:0c:59:e2:69:5f:2f:ea:b2:1e:16:
b2:3e:7d:af:08:2f:89:ee:2d:d1:9f:35:f4:9f:af:
23:c0:98:78:47:b4:92:fd:17:52:c3:bb:b0:fc:4a:
58:eb:6c:7e:bd:11:82:98:e6:bb:86:57:6e:54:eb:
bb:7b:df:57:5d:40:07:37:d2:5a:58:97:4a:09:cf:
85:01:d4:de:3f:af:f3:68:9e:2e:d1:7a:fb:c0:bf:
45:3a:e0:06:39:19:fa:72:c8:d5:23:a6:d5:d2:d8:
7a:63:95:51:01:bd:6a:71:45:38:c2:cc:58:5c:a6:
12:a0:8f:c3:ba:96:83:6e:58:0a:43:11:af:66:be:
77:7e:05:fb:af:be:01:cd:8c:78:70:04:9e:70:65:
6a:af:8d:95:07:8d:84:90:fe:43:5f:b2:90:fe:de:
b5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:60:DD:BA:C1:F8:4A:4E:DA:3C:F6:D0:BB:20:44:35:23:84:EF:2A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3B453790B0C311EC87CC1D3AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.184.103.0/24
Signature Algorithm: sha256WithRSAEncryption
43:47:8e:9c:80:ce:23:08:3a:5c:66:b9:c2:aa:fe:b6:0c:b1:
5b:55:38:4f:43:37:7b:49:9d:34:46:34:77:10:1b:a9:49:e1:
50:5c:68:0b:94:bd:67:2a:fb:41:5b:70:bc:0d:ee:12:6e:b3:
70:52:2b:01:8e:5e:48:8a:04:da:57:33:9b:f5:e6:98:38:ee:
c1:07:e5:72:06:db:c8:ff:3e:3d:3a:df:75:54:07:a1:28:b9:
7c:98:48:25:4c:60:a6:43:47:93:e1:ab:ea:ba:5f:e8:f9:eb:
b7:ef:85:6a:c1:6b:1d:23:5b:18:46:75:e7:c9:eb:2b:d6:26:
95:d5:b1:b0:44:b6:fe:67:45:47:0f:45:79:a8:fd:23:be:cf:
bd:9b:91:a5:83:bf:3c:44:23:f5:67:59:28:7e:28:71:4c:df:
1e:34:72:b8:d6:b9:78:6c:3d:fd:7d:2f:4f:31:a4:58:ee:32:
c3:62:94:a5:1d:60:ff:f3:e3:64:a7:42:da:b0:40:41:10:c7:
02:9b:1f:1a:bd:7c:8b:90:b0:a6:be:30:5b:6a:1c:e0:f0:79:
d3:c1:7e:28:73:82:d5:64:d3:be:53:7f:e9:5f:08:af:9a:e7:
84:af:6a:b8:d8:0c:3f:ba:51:2e:4e:c2:5c:4f:cb:55:43:ae:
86:36:26:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:12 2026 by rpki-client