
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5AF18556BEF311EC9800DF78C4F9AE02.roa
File: 5AF18556BEF311EC9800DF78C4F9AE02.roa (raw, json)
Hash identifier: O2PawoFspsz/MUugCD5Umt/8hKPDYHuYbCyH6k3Can4=
Subject key identifier: 7B:8B:A3:ED:2E:31:D3:EF:20:58:70:FB:22:A9:D9:34:81:81:AF:E4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D6E4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5AF18556BEF311EC9800DF78C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:46:52 +0000
ROA not before: Thu 08 May 2025 16:22:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149549
IP address blocks: 103.165.96.0/24 maxlen: 24
103.185.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55012 (0xd6e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:22:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c1dc-8221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e0:f5:6e:a4:84:a1:d8:3a:ab:5c:35:68:19:
80:b2:8f:37:0b:7f:01:1f:ab:09:0b:75:5d:74:18:
53:5c:9b:22:70:44:c1:2f:33:c6:5f:e6:4d:df:58:
48:09:9d:ee:a9:7a:a0:f4:e3:7b:9f:c1:a5:51:4f:
89:ca:44:b9:41:ff:0c:31:c3:61:87:4e:20:ea:a8:
3e:b7:93:ff:48:b6:bb:df:dc:4e:df:32:c0:87:ca:
63:1c:64:fd:ef:0e:69:d6:e7:e2:71:4c:96:d3:d1:
e8:cb:23:de:c7:02:24:90:35:f6:d1:e6:71:78:45:
97:97:35:17:8f:c6:e4:31:ed:50:dd:82:bb:2b:3c:
e1:94:33:2a:82:11:54:8b:ff:e7:28:e2:44:b1:8b:
19:78:8b:47:ac:c8:0e:08:a2:c1:05:18:15:63:c3:
a9:03:ac:a7:62:4f:db:d5:46:cd:ad:a1:84:00:9b:
4f:46:46:9e:a4:ca:34:ea:9b:aa:b9:5f:82:53:91:
95:51:5c:02:9a:9c:fd:46:34:cf:d7:90:15:51:e1:
cd:1f:6c:e3:59:3b:f5:17:11:c8:03:58:14:34:dd:
34:06:de:0e:06:72:08:4c:fe:e9:8c:09:09:e0:a3:
86:67:b2:47:51:9b:67:e6:d6:59:d7:93:07:2d:9c:
09:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8B:A3:ED:2E:31:D3:EF:20:58:70:FB:22:A9:D9:34:81:81:AF:E4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5AF18556BEF311EC9800DF78C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.165.96.0/24
103.185.220.0/23
Signature Algorithm: sha256WithRSAEncryption
71:45:e7:f5:48:c2:8f:63:7e:7e:74:18:ae:fb:90:3b:07:ff:
77:cb:67:d4:eb:ce:b4:83:4e:d0:42:9d:8f:86:54:80:bf:72:
45:08:bc:8a:f3:4d:aa:57:b4:47:d2:56:ba:6a:d7:44:cc:bf:
ad:94:ee:56:7b:d6:23:3c:ed:eb:77:be:ed:fb:25:ef:0c:32:
03:66:9a:12:27:0c:6a:2e:bf:b8:1d:01:27:e2:66:1f:71:25:
9b:46:d5:4a:a2:54:db:d8:95:d1:b8:08:4d:15:f6:6b:09:c9:
99:e0:f6:d8:4a:d7:9a:23:44:8a:fb:bf:da:bd:f8:23:1c:98:
ed:44:ec:c6:81:67:c9:47:ba:52:c6:f9:fa:7e:06:38:01:ca:
d4:63:9f:23:53:b5:86:fa:31:d1:db:32:9f:44:bd:8a:67:d4:
17:2c:56:64:35:34:71:17:28:28:68:cc:c7:57:a3:6a:75:9c:
d3:bb:d1:01:9d:65:a0:24:3e:8c:a6:3b:76:a6:7e:99:c3:c3:
4a:e7:6d:6a:15:df:10:49:5d:26:0f:b9:24:0e:9b:c0:8e:e7:
28:af:8f:8c:0c:a8:8f:b0:65:d8:e1:ba:00:a9:a2:33:e1:7a:
a2:80:a9:ae:50:1a:b2:f9:6e:9c:30:fa:0f:9a:5a:4c:6b:d2:
f2:8d:51:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:55 2026 by rpki-client