
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D77F7F2F26311EAACBFDA5CC4F9AE02.roa
File: 3D77F7F2F26311EAACBFDA5CC4F9AE02.roa (raw, json)
Hash identifier: 92d/v+PZGkuGjbu3jWN1ATcbllHkBv8WeWEVIMEs0mk=
Subject key identifier: 8C:34:88:2D:04:DA:F3:A4:CF:3B:3C:B4:FD:B2:72:7D:AE:E3:5D:75
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D20E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D77F7F2F26311EAACBFDA5CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:18:00 +0000
ROA not before: Thu 08 May 2025 15:59:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133690
IP address blocks: 103.154.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53774 (0xd20e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 15:59:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bb18-576d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:28:13:81:97:f8:84:22:50:5f:08:42:84:
26:26:9b:a0:f7:e9:f3:44:aa:46:6e:10:a8:af:69:
a2:a1:02:bf:61:44:f6:2f:05:73:f6:66:3a:59:fe:
92:a9:36:0c:5c:f7:ec:fd:e2:d4:9c:2c:aa:03:c1:
e3:18:c4:b8:54:2f:d0:90:8c:33:2f:e8:76:f6:71:
60:f9:23:59:c9:f0:35:b7:30:bb:d5:9c:62:55:32:
b6:0d:63:37:9d:1b:19:8d:66:e5:49:18:13:fa:cd:
b1:e9:a8:b6:cb:35:9a:90:b1:67:69:bd:6d:b2:f8:
33:bf:06:df:b8:ee:65:7a:92:a4:6a:c6:13:df:08:
13:26:23:04:80:9b:4c:ce:a3:0c:16:ba:a1:fd:28:
78:5c:46:c8:1b:33:20:6d:3e:b0:9c:df:00:68:28:
8f:ee:74:90:90:ed:19:f2:41:88:0a:31:46:6b:88:
ef:6b:f3:38:04:95:73:73:52:db:b4:0f:17:dc:4c:
76:ec:d5:d7:d9:06:d7:f7:d9:f5:a3:92:e5:86:90:
96:3c:9a:89:49:fd:19:8b:15:7c:0d:1f:b1:35:6c:
8a:b1:54:f2:f6:b8:6c:d0:ac:3a:ff:90:d1:5e:c1:
88:73:c1:35:8c:f9:60:38:a1:4b:77:b5:0c:bd:55:
aa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:34:88:2D:04:DA:F3:A4:CF:3B:3C:B4:FD:B2:72:7D:AE:E3:5D:75
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D77F7F2F26311EAACBFDA5CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.154.56.0/23
Signature Algorithm: sha256WithRSAEncryption
85:cf:84:5c:01:4a:8d:33:64:5f:af:aa:77:36:f4:45:97:d3:
63:a2:b6:ec:51:4d:72:cd:97:a7:b1:c0:6c:83:a5:59:63:a9:
51:a8:d9:b4:83:44:46:1d:3d:a0:68:8f:62:49:06:79:94:88:
21:4f:8f:63:c8:2d:d4:15:72:34:ef:98:9f:24:1f:5d:a0:6c:
ff:be:1c:32:e1:4c:6f:1c:54:15:b7:35:f9:1e:1a:23:b6:0b:
c3:63:78:0e:c0:fa:b6:1a:cc:cb:76:6f:a2:7f:07:63:dc:fd:
6d:3a:67:5d:15:0e:07:72:50:ac:4a:cc:be:10:22:f6:31:c6:
98:ee:4a:bf:5a:0e:e3:2d:70:31:82:ce:ed:c8:29:19:58:0b:
9a:63:af:62:b9:17:d8:ef:78:0b:5d:0d:fd:be:b4:a1:e8:45:
04:26:64:90:5b:22:b4:b1:82:85:f1:38:21:c9:b2:c6:6d:c7:
7d:40:4b:cb:e7:09:9c:6e:c4:d9:c2:be:4b:95:f4:d6:b0:c6:
4a:a6:df:ac:5c:61:ba:af:8d:e2:03:02:96:f0:ee:90:91:2a:
62:3b:cc:75:fa:85:71:c6:cd:1e:ca:bc:d8:09:25:47:ef:53:
66:70:1a:5e:66:d6:0e:de:b5:c8:72:99:cc:9f:0e:3f:d0:04:
2e:99:33:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:18 2026 by rpki-client