
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5D49F494889611F094A24B54C4F9AE02.roa
File: 5D49F494889611F094A24B54C4F9AE02.roa (raw, json)
Hash identifier: EuNO3024HzHFs74ZwBhPCP/keUE7wGRux+dwcQcznBQ=
Subject key identifier: C0:AA:71:CF:87:A0:16:6D:A1:FF:D1:16:F4:04:2F:B4:1F:BE:4C:D0
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D9F2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5D49F494889611F094A24B54C4F9AE02.roa
Signing time: Sun 01 Mar 2026 23:01:49 +0000
ROA not before: Wed 03 Sep 2025 07:24:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149020
IP address blocks: 103.170.216.0/23 maxlen: 24
103.179.44.0/23 maxlen: 24
202.1.31.0/24 maxlen: 24
2401:4520::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55794 (0xd9f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 3 07:24:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c55d-aed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:71:6f:b5:9e:01:63:0a:49:f5:e4:5a:f0:
03:2e:de:e4:8a:3d:50:f5:4b:09:ca:4c:2d:cc:6d:
c6:41:cf:da:6a:b4:a8:8b:8c:38:75:d4:a0:b8:89:
b3:17:6a:ff:49:e9:46:be:8d:27:9b:be:fa:a7:5c:
d2:49:65:20:6c:6c:80:ff:18:df:82:6e:3b:24:bc:
9b:33:cf:c6:20:c6:2c:21:9e:50:fa:f0:23:6a:86:
d8:d9:9b:b2:d8:04:23:a4:3c:ca:4a:90:fe:f8:f9:
52:e0:3e:b1:54:3b:bd:49:07:69:21:19:30:ef:d8:
01:75:ca:71:ff:6e:11:cf:c8:22:6f:b3:84:13:cf:
a4:a7:e3:8f:a8:ee:bd:88:d0:10:54:cc:79:c3:74:
41:bc:f9:95:d2:b0:e3:a5:82:3e:f4:a4:06:9c:f3:
1e:99:06:b2:9b:1a:42:24:d2:7e:08:9d:6d:9b:7c:
56:65:24:02:50:ab:66:75:66:d8:54:c0:27:9f:13:
60:7c:13:b9:7d:b3:5c:21:3f:3a:93:bc:a1:78:87:
52:74:04:dc:80:ce:44:b2:c5:b2:99:af:50:23:6c:
e0:be:d2:b2:7b:1e:64:f5:d4:55:8e:06:39:af:83:
98:bd:a1:d7:50:50:8d:ac:38:e2:e2:c2:35:3b:84:
28:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AA:71:CF:87:A0:16:6D:A1:FF:D1:16:F4:04:2F:B4:1F:BE:4C:D0
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5D49F494889611F094A24B54C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.170.216.0/23
103.179.44.0/23
202.1.31.0/24
IPv6:
2401:4520::/32
Signature Algorithm: sha256WithRSAEncryption
11:25:3b:75:b6:5b:10:85:54:57:dc:a3:f2:10:b3:96:9f:d4:
16:42:af:e7:2f:b9:fa:79:0f:30:2c:a0:36:b6:5a:93:a2:af:
64:16:fc:36:3c:84:e5:be:87:34:3d:c5:6d:e1:54:f7:4e:32:
c7:c4:7e:91:37:e4:cb:88:d0:ed:e9:b2:4b:e1:90:e5:c8:cf:
1c:ea:20:ca:95:a0:5f:dc:db:7c:4b:ec:5e:17:ca:eb:90:f3:
56:3b:a0:0c:9f:0e:9c:ba:59:ee:85:2c:5e:b3:99:c5:b7:40:
91:c1:40:e2:82:b7:aa:39:b8:62:c9:07:d9:11:46:5a:83:5b:
fd:a8:84:f2:fd:df:34:9a:08:45:50:25:3d:5e:61:4a:93:4e:
b1:58:bd:04:00:43:81:e3:dc:a1:e7:bc:73:da:b6:7a:24:9f:
d1:6a:f3:1a:5d:be:12:3f:9e:43:a2:b5:c4:83:08:9d:10:96:
d3:ce:a8:6c:e4:af:76:99:d4:11:bf:55:ef:cd:c7:9b:3b:bb:
52:0c:70:55:00:3a:d5:30:f3:8f:34:00:20:da:80:7f:2d:bd:
85:1d:9f:4e:50:0f:ff:c8:81:e3:8a:cd:6e:f9:dd:60:05:69:
df:34:f3:eb:50:a1:18:15:8d:cf:ec:d4:88:bb:2c:42:db:70:
83:51:26:57
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIDANnyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDkwMzA3MjQ0MFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGM1NWQtYWVkODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALvOcW+1ngFjCkn15FrwAy7e5Io9UPVLCcpMLcxtxkHP2mq0qIuMOHXUoLiJ
sxdq/0npRr6NJ5u++qdc0kllIGxsgP8Y34JuOyS8mzPPxiDGLCGeUPrwI2qG2Nmb
stgEI6Q8ykqQ/vj5UuA+sVQ7vUkHaSEZMO/YAXXKcf9uEc/IIm+zhBPPpKfjj6ju
vYjQEFTMecN0Qbz5ldKw46WCPvSkBpzzHpkGspsaQiTSfgidbZt8VmUkAlCrZnVm
2FTAJ58TYHwTuX2zXCE/OpO8oXiHUnQE3IDORLLFspmvUCNs4L7SsnseZPXUVY4G
Oa+DmL2h11BQjaw44uLCNTuEKOsCAwEAAaOCAnswggJ3MB0GA1UdDgQWBBTAqnHP
h6AWbaH/0Rb0BC+0H75M0DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVENDlGNDk0
ODg5NjExRjA5NEEyNEI1NEM0RjlBRTAyLnJvYTA6BggrBgEFBQcBBwEB/wQrMCkw
GAQCAAEwEgMEAWeq2AMEAWezLAMEAMoBHzANBAIAAjAHAwUAJAFFIDANBgkqhkiG
9w0BAQsFAAOCAQEAESU7dbZbEIVUV9yj8hCzlp/UFkKv5y+5+nkPMCygNrZak6Kv
ZBb8NjyE5b6HND3FbeFU904yx8R+kTfky4jQ7emyS+GQ5cjPHOogypWgX9zbfEvs
XhfK65DzVjugDJ8OnLpZ7oUsXrOZxbdAkcFA4oK3qjm4YskH2RFGWoNb/aiE8v3f
NJoIRVAlPV5hSpNOsVi9BABDgePcoee8c9q2eiSf0WrzGl2+Ej+eQ6K1xIMInRCW
086obOSvdpnUEb9V783Hmzu7UgxwVQA61TDzjzQAINqAfy29hR2fTlAP/8iB44rN
bvndYAVp3zTz61ChGBWNz+zUiLssQttwg1EmVw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:22 2026 by rpki-client