
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/65E8AC8C6C6511F0B904CA3AC4F9AE02.roa
File: 65E8AC8C6C6511F0B904CA3AC4F9AE02.roa (raw, json)
Hash identifier: UxgDFg5idw3VduorXNj/5Bfat5OFrp13nI9nglHifYk=
Subject key identifier: 01:AF:13:C5:DD:33:08:1F:20:EE:14:02:3F:08:C5:4B:05:13:1B:6B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D98F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/65E8AC8C6C6511F0B904CA3AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:59:48 +0000
ROA not before: Tue 29 Jul 2025 10:18:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138716
IP address blocks: 103.161.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55695 (0xd98f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 29 10:18:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c4e4-a769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1c:c9:2f:47:81:9a:88:ee:0e:ef:eb:b6:23:
fe:34:55:6e:61:16:99:b9:67:ef:ff:4b:9c:86:f9:
61:e1:3d:ce:71:9b:c2:9c:a1:0f:39:5c:66:62:c9:
f9:8f:85:d2:dd:09:e3:36:af:38:95:3f:57:25:9d:
04:9a:2a:ce:55:f1:4a:b6:84:0b:59:69:a3:e0:3d:
20:39:b9:8e:cb:b8:43:56:23:61:cd:f5:63:e5:4a:
4e:74:10:ef:71:79:46:5c:74:af:ef:0d:bf:14:04:
07:ad:57:80:7c:d4:10:32:00:eb:e1:e3:49:8e:c7:
10:d9:7b:85:2b:64:e3:0c:cc:15:d5:c3:72:a5:e5:
f1:ab:97:e2:fd:e0:87:88:5c:3f:a6:59:ac:83:33:
a9:eb:9a:0d:15:7c:bb:f5:f0:cc:c4:90:e4:8b:3a:
1c:d9:d8:11:c9:6d:71:b6:f2:48:ea:d1:76:18:ca:
a7:43:63:d2:3d:ff:99:1c:f4:4c:74:61:ec:30:37:
2f:df:4f:4e:f7:33:80:33:ea:9c:09:9a:85:6f:c8:
d5:26:3d:1f:3c:7a:e1:3b:a7:26:aa:de:b1:e4:a9:
e2:b5:45:95:9d:4b:2a:89:26:19:21:b4:bb:f0:9a:
8b:7c:c7:41:e6:10:e9:0d:ad:51:54:d6:5f:fa:63:
f5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AF:13:C5:DD:33:08:1F:20:EE:14:02:3F:08:C5:4B:05:13:1B:6B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/65E8AC8C6C6511F0B904CA3AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.161.26.0/23
Signature Algorithm: sha256WithRSAEncryption
37:38:77:59:cd:e6:84:5c:95:61:45:3d:55:56:c1:a6:b8:0d:
92:52:8e:d5:07:ba:74:9e:dd:9f:f3:5f:0a:a2:1e:ab:43:ed:
f0:1a:bf:89:e1:e9:e6:0e:ea:69:f1:84:cc:cf:bf:cb:aa:02:
d7:89:3c:09:d0:e0:f8:5e:03:27:e9:78:88:2e:80:53:3c:48:
fb:aa:6e:ac:50:ef:1d:2f:9b:8d:c8:9a:4d:65:6a:3c:73:6b:
b8:e4:e0:c0:8c:b8:ad:c1:fe:fb:23:b4:93:9c:d8:2c:22:e6:
ff:6d:ae:b0:cc:47:f9:66:80:d2:05:f4:d4:fe:f2:81:5a:19:
82:4e:89:22:a1:83:cb:62:e5:59:0c:10:42:44:98:d2:a5:b2:
64:f5:1c:ef:68:e1:80:6c:19:44:7a:fd:4a:b5:d6:e7:e3:dd:
1e:09:4e:6e:c5:e4:34:fc:91:6c:9c:aa:7d:4f:ee:c4:a1:d8:
ce:f0:c5:dd:18:08:6d:21:70:0d:27:5f:29:7c:e2:51:c6:c4:
50:d5:fb:b3:e1:48:21:92:9d:48:a5:51:e2:65:1a:05:2d:8e:
1c:b7:64:be:d3:3e:a4:7c:d2:e4:6e:d7:6f:c2:6a:89:87:09:
82:ac:bc:ed:40:6f:6c:4e:62:18:97:1a:aa:c2:46:15:cb:22:
e0:c4:5c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:59 2026 by rpki-client