
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/502937120EFE11ED9CC07D4AC4F9AE02.roa
File: 502937120EFE11ED9CC07D4AC4F9AE02.roa (raw, json)
Hash identifier: A1AeukV0Us+Oq+u4Fh5UOnWZ0L/zw8EaLGsmNvnftII=
Subject key identifier: 77:E1:C0:AE:73:9E:DB:34:EB:8D:97:49:2F:20:E6:84:95:46:86:9F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D60E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/502937120EFE11ED9CC07D4AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:41:38 +0000
ROA not before: Thu 08 May 2025 16:19:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142510
IP address blocks: 103.12.85.0/24 maxlen: 24
103.169.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54798 (0xd60e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:19:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c0a2-4691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d0:79:5a:d3:69:8d:58:fe:62:d0:16:f5:c7:
b5:39:73:36:d9:7e:dd:7b:30:13:f2:96:26:9c:6a:
cf:ff:9c:66:72:a3:73:4d:a1:f0:89:15:99:49:fc:
86:ed:f1:25:2b:3b:43:c6:a6:c8:8a:ee:a5:fe:14:
5b:1a:e6:d7:83:4e:9f:67:b4:b9:b0:48:5b:1c:e7:
c2:ed:31:53:a4:fd:c5:d1:df:4b:ba:a1:77:42:c3:
44:36:09:ba:68:71:c5:12:7e:51:fe:3f:a8:30:e5:
6d:dd:26:39:69:c1:e3:0c:3d:db:2f:44:d8:41:5d:
d9:03:be:ff:f7:a1:39:00:a6:c3:f4:fe:31:9c:07:
d8:a8:d7:9f:e8:9f:d9:91:1f:13:4e:a8:5a:80:1c:
88:68:4c:e9:b5:db:38:49:87:1e:3f:99:ab:d7:29:
8a:5b:b2:32:de:a4:1d:18:bb:26:20:9b:0f:e6:60:
1a:ce:22:64:bb:35:da:0b:f5:ac:1a:1b:e2:bf:80:
ac:0f:4b:76:57:27:f3:77:80:a8:53:1c:e2:75:1e:
a2:21:d0:a3:6f:23:4b:de:59:5d:79:d2:c1:fe:26:
ee:fb:2f:83:7a:1a:a9:37:af:f3:a3:f1:15:f7:19:
87:e9:3f:31:93:c2:9f:f3:22:6e:d7:85:2a:1f:de:
67:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E1:C0:AE:73:9E:DB:34:EB:8D:97:49:2F:20:E6:84:95:46:86:9F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/502937120EFE11ED9CC07D4AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.12.85.0/24
103.169.166.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:98:e9:8d:ce:75:ae:fc:a4:9b:12:57:59:cc:c7:2e:79:63:
ad:4b:d3:0c:ff:15:29:00:27:06:f8:a9:b1:e9:8a:06:e7:3b:
4b:0e:1c:10:95:92:70:df:bc:44:b7:d3:24:58:6d:c9:b1:da:
37:63:18:ba:34:33:24:25:20:f5:0b:09:48:4b:36:7c:cb:3a:
d1:84:0f:5c:fa:75:0f:01:1e:0e:95:f8:da:e7:c6:b9:5c:f5:
28:75:28:6e:44:2e:76:ce:6e:58:46:6a:77:6f:33:85:4a:74:
91:01:bf:36:90:e5:f3:55:78:df:e7:13:8f:33:94:9e:61:56:
90:a2:d5:f2:92:f6:d7:77:25:7c:45:3f:9b:ee:3f:60:40:0c:
cd:56:10:e3:9c:6a:79:2b:74:73:fc:80:f0:52:d9:b5:2a:f8:
73:dd:1e:1a:65:87:3d:c0:1e:23:05:20:de:2a:76:f6:40:22:
fb:a9:18:75:7b:19:f8:f6:bd:e9:14:9f:65:f3:5a:af:be:ff:
78:8c:a5:25:fe:f5:3c:a8:81:2f:16:28:ec:ed:4c:1e:bf:e3:
55:e0:12:08:7f:22:3f:74:d2:52:ea:8e:bb:6f:b2:55:84:f0:
32:49:ca:dd:92:5f:24:a8:62:b8:e0:88:85:2c:71:2b:6c:a9:
84:db:2b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:30 2026 by rpki-client