
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4C5FD3C8E3C811EBB0DCE370C4F9AE02.roa
File: 4C5FD3C8E3C811EBB0DCE370C4F9AE02.roa (raw, json)
Hash identifier: SwVTHuK1KZRbDdESI3kq+HpMy/7e6djSyMIB25aWTek=
Subject key identifier: 16:7B:59:39:EE:9B:D3:29:F7:B1:0C:F6:96:1C:BF:B8:34:30:0A:E8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D5E6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4C5FD3C8E3C811EBB0DCE370C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:40:42 +0000
ROA not before: Thu 08 May 2025 16:18:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141881
IP address blocks: 103.163.40.0/24 maxlen: 24
2001:df7:180::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54758 (0xd5e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:18:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c06a-7681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:14:3e:98:47:3c:dd:28:7b:63:a1:2f:6d:53:
04:2f:b5:27:29:fa:37:2d:3d:2b:a5:9b:44:f3:bf:
1b:81:8e:e7:32:7e:ac:4e:5d:7c:d5:c2:7d:97:81:
61:39:20:45:1b:32:76:c8:db:49:22:e9:78:3a:5c:
2b:38:d1:07:2a:a8:71:15:33:96:70:d3:11:8c:5a:
39:f5:bc:5c:c4:c3:84:9e:0d:94:c7:a8:0c:6d:f2:
bd:d0:73:c3:1c:a1:d4:dd:69:42:02:27:e0:05:d1:
7e:ce:5b:08:85:cf:a3:2b:b3:8a:aa:1a:4d:a3:72:
5b:4e:a2:31:8b:d0:4a:b1:05:0a:22:28:eb:be:89:
a8:95:7c:7c:21:b4:a4:67:71:c3:42:b3:1b:46:ec:
47:bc:d8:1f:3b:8f:23:98:a2:26:56:8a:bf:49:cf:
07:96:db:28:07:82:7c:4a:35:27:ca:1c:04:ae:6f:
a0:59:ab:a0:34:24:e8:bc:27:1f:e8:e7:aa:7c:c3:
fb:5a:24:52:3a:e0:03:78:af:87:6e:7c:ea:f5:6c:
ba:e6:31:7d:c4:8f:aa:1a:40:cf:ec:ad:bc:3c:6c:
51:43:e0:a0:e5:74:3d:99:4b:8b:ab:a8:35:30:7c:
8e:df:77:c6:0f:82:7a:bf:ff:43:1a:31:35:f1:8f:
e0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7B:59:39:EE:9B:D3:29:F7:B1:0C:F6:96:1C:BF:B8:34:30:0A:E8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4C5FD3C8E3C811EBB0DCE370C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.163.40.0/24
IPv6:
2001:df7:180::/48
Signature Algorithm: sha256WithRSAEncryption
2d:13:38:99:d5:e9:22:df:fd:eb:d1:8a:ab:93:c1:b7:e5:e3:
b7:44:0a:da:13:c4:6a:ff:f9:50:88:63:a9:f5:98:8d:aa:30:
b9:66:ed:af:e0:6f:06:72:df:bb:33:35:a3:d3:3a:be:af:a9:
1b:44:31:ed:10:fc:1e:4c:ed:0a:d7:cd:01:ca:b3:13:5c:d9:
7d:cf:0f:4b:7f:89:8d:32:5e:48:80:61:38:ab:b2:c5:10:14:
ad:c7:09:5d:a5:15:6c:d0:ac:f3:00:d6:7b:ae:df:f4:26:68:
61:f3:fd:c9:6e:98:60:2d:c8:c6:37:dd:c7:24:df:8a:e7:e4:
32:f2:42:6b:c8:e7:8a:9e:f1:ab:51:d8:25:68:66:bd:51:ff:
df:31:03:ca:87:db:48:dd:13:12:21:5b:23:18:d6:0c:cb:99:
7f:e6:ac:d3:3a:b5:ff:26:1d:02:09:17:a9:df:14:24:4e:91:
16:0c:ef:7a:50:f2:58:b7:7f:79:26:89:23:dc:9a:6c:ef:cc:
c4:b4:5c:c7:0e:a9:28:e6:59:bf:ba:09:f0:5c:e2:68:b6:fd:
f8:4d:7e:98:1d:56:67:e1:62:8f:ac:cd:b2:ec:4e:a6:a9:39:
28:f2:d8:86:0a:ff:cf:db:35:be:5c:b7:65:fc:31:d6:49:dd:
5e:71:a1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:14 2026 by rpki-client