
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/71389AA6BDCF11EA8755D90DC4F9AE02.roa
File: 71389AA6BDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier: 74onbK9QqmMXLxyoAMj+xVa0Yi6Qp750fUeKbi1n8mM=
Subject key identifier: C4:6A:31:C5:F8:CF:6C:FB:D9:A5:79:E6:9B:12:FC:A4:3F:6A:80:01
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D8D4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/71389AA6BDCF11EA8755D90DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:56:34 +0000
ROA not before: Thu 08 May 2025 16:32:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59195
IP address blocks: 103.142.166.0/24 maxlen: 24
2001:df5:1180::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 11:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55508 (0xd8d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:32:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c422-1194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:14:f1:d0:4e:13:78:9b:60:2a:05:38:61:
23:6e:20:ec:93:1b:0e:3c:fc:26:b0:e4:84:69:55:
11:fc:51:a6:c2:40:1d:81:c4:c8:b7:dd:b0:2e:0b:
b0:32:27:2f:1f:2d:4b:e7:13:cc:ee:96:84:20:2e:
1c:45:b8:27:24:4e:b7:39:0b:cb:b3:b4:78:9e:53:
6f:b2:84:82:3c:0f:8d:e6:af:0f:64:a4:99:1c:c3:
48:62:0c:8f:2b:db:79:c1:a5:fe:d5:2f:5d:0f:e0:
ca:f9:4c:ce:e4:ac:5c:0c:e3:55:03:b5:74:80:07:
42:cf:61:db:c3:d8:1d:31:25:2f:bf:67:7f:4b:76:
89:75:2c:35:ed:d8:f8:4e:6c:ab:65:f9:17:49:09:
a5:ce:81:7f:2b:17:59:72:f0:97:58:73:a8:95:96:
d7:50:64:63:f3:06:f2:2a:06:20:28:82:50:80:ab:
27:90:7f:bb:c2:40:b0:11:0c:42:b3:f3:09:9e:95:
61:92:6a:61:2c:e0:51:ca:42:3e:5c:4a:be:30:49:
8b:7e:ae:dc:85:a5:4a:87:e7:71:1a:88:9d:c3:c9:
a2:7e:c4:8a:66:46:3a:59:5c:ea:8f:e3:91:0a:a0:
8e:c9:f7:5f:cd:5e:86:8b:32:2d:2a:4c:02:d6:1a:
ad:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6A:31:C5:F8:CF:6C:FB:D9:A5:79:E6:9B:12:FC:A4:3F:6A:80:01
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/71389AA6BDCF11EA8755D90DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.142.166.0/24
IPv6:
2001:df5:1180::/48
Signature Algorithm: sha256WithRSAEncryption
80:20:5d:df:3f:46:25:96:1a:e0:13:35:74:b1:55:44:de:c3:
cd:e5:d0:38:d4:cb:14:07:3d:ff:ec:4f:c4:4f:3e:6a:93:29:
7b:ce:c4:9f:89:c3:69:93:0d:dd:fa:e4:d6:09:01:c8:84:2d:
8c:27:db:46:1f:cc:6a:42:7d:e1:db:37:47:63:07:0c:2c:3b:
2f:54:9f:6c:36:83:f1:8b:35:13:5f:7b:4b:f0:b8:6e:63:9f:
76:2f:ac:a6:3a:d9:bc:0f:47:56:1c:e4:b6:18:20:70:60:04:
a5:ba:2b:10:15:5f:34:a7:90:3e:8a:cf:a3:cb:45:c9:bb:9e:
99:8c:42:c5:a1:ac:ce:79:46:d2:ac:4f:8b:a1:a5:96:69:28:
51:6a:85:ed:ea:79:25:55:b8:b5:2c:d0:7a:27:6c:b0:a3:d1:
ad:64:51:26:0c:c8:a7:87:d2:8c:9f:be:85:67:fd:4c:29:5f:
48:cf:cf:b1:1e:4d:81:63:39:da:88:e5:c8:d6:0a:99:66:b1:
42:44:c7:bf:d7:8c:fa:91:33:95:0e:ea:f4:bc:c5:ef:97:9d:
27:ff:7c:92:c8:ea:77:e0:58:e0:01:2f:6f:04:76:13:e7:70:
3f:1f:98:70:e6:d4:35:68:94:47:0b:c8:37:be:9d:ce:b9:d5:
64:c9:aa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:25:40 2026 by rpki-client