
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53BB7ACEA73C11EFB295D44EC4F9AE02.roa
File: 53BB7ACEA73C11EFB295D44EC4F9AE02.roa (raw, json)
Hash identifier: Kexyli1o5gqfogY3HUngKLhDUwIAhq1WOD1LoIJAJkA=
Subject key identifier: EF:B4:64:24:16:1C:F0:DB:FE:D8:53:78:F8:EB:2C:09:6E:6B:75:73
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D633
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53BB7ACEA73C11EFB295D44EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:42:29 +0000
ROA not before: Thu 08 May 2025 16:19:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 146882
IP address blocks: 103.172.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54835 (0xd633)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:19:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c0d5-1cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:25:a6:73:7a:74:d7:ad:46:b6:0c:39:4b:1c:
b9:df:52:b6:22:17:aa:21:4d:f2:24:19:17:8b:f2:
ea:cf:18:1a:28:bb:57:60:c3:1d:e6:5e:5d:27:50:
28:af:3f:fd:72:34:cc:ad:60:e5:6d:08:82:74:7b:
bb:ed:8e:a5:15:ef:f6:10:a6:a9:21:a7:94:21:81:
1e:b2:a2:58:36:9b:64:c6:e3:73:d9:fb:67:66:40:
f8:4a:b1:6b:52:95:da:99:e2:10:a0:6d:e3:e1:34:
cc:b8:9a:e3:85:f8:eb:2e:c2:2d:db:b8:1f:6c:ce:
d4:e0:a2:69:3e:bf:14:07:24:56:3c:d8:6d:6b:fa:
59:47:34:11:f1:3f:cf:c2:b8:6a:3d:1d:47:72:ba:
be:2c:b8:d9:45:54:8b:78:1a:8d:ad:05:77:56:37:
9b:49:8d:3b:4c:9e:a1:fb:f4:dc:5d:9a:4f:f8:6c:
21:cf:b9:d0:82:17:3c:9f:2d:49:90:c6:54:fd:44:
f3:1f:eb:f8:81:e9:8b:c8:d2:61:df:56:25:bc:a4:
e6:c3:f6:9f:18:f3:8e:55:ad:f7:29:f6:c4:74:f6:
b9:fc:e9:19:a8:71:a5:41:43:ed:28:00:0d:8e:80:
08:0d:a4:1b:51:db:cd:5c:e9:09:7e:54:3a:31:00:
5b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B4:64:24:16:1C:F0:DB:FE:D8:53:78:F8:EB:2C:09:6E:6B:75:73
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53BB7ACEA73C11EFB295D44EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.172.230.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:3b:53:51:02:6b:55:38:91:59:3d:b0:4d:26:aa:33:20:bb:
6f:c8:77:86:0b:b1:94:63:62:41:b8:67:2c:32:45:a6:3b:61:
e5:b4:1a:a2:c5:15:b6:c6:e6:e4:cd:5a:52:87:89:7d:01:c4:
21:e5:74:89:d0:55:60:63:1f:a6:ec:87:a0:02:94:8a:7f:c0:
d5:db:8e:0e:92:95:a4:61:22:28:0a:eb:a7:b8:a6:b8:a5:b8:
ea:e6:6a:f7:17:a8:90:61:23:82:9d:5a:30:3e:f6:8c:77:dc:
1a:ab:f3:92:7f:58:d9:ea:84:b2:73:09:cf:52:0d:81:5e:17:
c0:d9:5e:bf:e3:55:61:e7:6d:3a:a5:d9:e2:53:13:b4:5a:52:
d7:81:9c:fe:d3:15:9a:8e:21:cd:76:da:61:09:b8:7a:95:ba:
83:87:10:33:66:cd:51:db:4e:c9:be:f2:86:c4:c8:6a:66:11:
38:79:b1:e0:a1:e7:14:01:d8:05:d7:bf:64:c9:0b:bf:5a:b7:
20:49:79:81:b2:cc:3d:37:4b:9d:03:cd:45:15:a7:45:e8:14:
2f:80:fe:f0:39:37:a5:23:13:73:18:16:93:e1:6e:93:97:d6:
99:84:16:6e:f0:52:25:33:a4:28:13:12:a8:32:77:6d:4b:25:
0a:ab:97:94
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDANYzMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MTk0OVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGMwZDUtMWNhYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN4lpnN6dNetRrYMOUscud9StiIXqiFN8iQZF4vy6s8YGii7V2DDHeZeXSdQ
KK8//XI0zK1g5W0IgnR7u+2OpRXv9hCmqSGnlCGBHrKiWDabZMbjc9n7Z2ZA+Eqx
a1KV2pniEKBt4+E0zLia44X46y7CLdu4H2zO1OCiaT6/FAckVjzYbWv6WUc0EfE/
z8K4aj0dR3K6viy42UVUi3gaja0Fd1Y3m0mNO0yeofv03F2aT/hsIc+50IIXPJ8t
SZDGVP1E8x/r+IHpi8jSYd9WJbyk5sP2nxjzjlWt9yn2xHT2ufzpGahxpUFD7SgA
DY6ACA2kG1HbzVzpCX5UOjEAW1UCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTvtGQk
Fhzw2/7YU3j46ywJbmt1czAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzUzQkI3QUNF
QTczQzExRUZCMjk1RDQ0RUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWes5jANBgkqhkiG9w0BAQsFAAOCAQEAoTtTUQJrVTiRWT2wTSaq
MyC7b8h3hguxlGNiQbhnLDJFpjth5bQaosUVtsbm5M1aUoeJfQHEIeV0idBVYGMf
puyHoAKUin/A1duODpKVpGEiKArrp7imuKW46uZq9xeokGEjgp1aMD72jHfcGqvz
kn9Y2eqEsnMJz1INgV4XwNlev+NVYedtOqXZ4lMTtFpS14Gc/tMVmo4hzXbaYQm4
epW6g4cQM2bNUdtOyb7yhsTIamYROHmx4KHnFAHYBde/ZMkLv1q3IEl5gbLMPTdL
nQPNRRWnRegUL4D+8Dk3pSMTcxgWk+Fuk5fWmYQWbvBSJTOkKBMSqDJ3bUslCquX
lA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:06 2026 by rpki-client