
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/717A4CC8B88611F08042A282C4F9AE02.roa
File: 717A4CC8B88611F08042A282C4F9AE02.roa (raw, json)
Hash identifier: OUUdNQaTAxb2cWUqbW2AC1uu2v/DnLVlSQLB8HVWJIQ=
Subject key identifier: C8:3A:0E:A7:2C:5A:70:1C:8F:C8:98:C1:A3:8D:DA:7F:6A:09:DA:76
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DA55
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/717A4CC8B88611F08042A282C4F9AE02.roa
Signing time: Sun 01 Mar 2026 23:03:35 +0000
ROA not before: Mon 03 Nov 2025 07:26:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 147221
IP address blocks: 103.31.40.0/23 maxlen: 24
103.129.100.0/23 maxlen: 24
103.176.134.0/23 maxlen: 24
2001:df3:b1c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55893 (0xda55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 3 07:26:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c5c6-5baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1f:1c:07:93:a5:1b:db:08:3f:b2:9b:39:8c:
3f:fc:af:02:5a:0f:a3:ce:e4:d5:47:03:a5:dc:9c:
ce:d6:d2:cc:f5:3e:6c:9a:81:65:cb:93:80:be:4b:
cd:ff:d3:3d:c9:67:c6:dd:52:30:b2:87:c2:10:f3:
1d:2d:85:cd:e0:aa:2b:ff:12:37:0b:da:ec:70:89:
6a:62:cb:d7:83:43:73:c5:97:07:b7:ff:0a:89:b0:
a2:3e:e4:70:0f:d0:6c:95:e7:99:c4:b4:a0:66:4b:
f9:ea:78:1a:f5:1f:4c:b3:96:43:b3:d3:de:8d:31:
50:6a:ea:f4:cc:f7:8c:14:c2:cb:10:82:ac:16:93:
dd:89:e4:a4:b1:5d:ed:78:79:ec:62:1f:a2:f9:78:
44:ab:23:7e:ef:10:25:54:84:81:30:96:57:d3:82:
ef:57:c8:2b:f1:cd:2a:ba:1f:c1:41:98:00:1b:d2:
35:f0:74:ee:ba:46:4c:2e:56:e5:59:a4:a3:62:d1:
28:6c:28:9e:a1:1d:6f:e7:10:96:1f:15:73:50:20:
f5:d8:de:64:d3:8c:ae:9c:d4:a1:5c:e9:35:4e:c9:
e5:94:ca:07:15:2b:8e:fd:98:44:c7:02:23:4e:59:
0e:2c:26:3f:b7:40:03:c3:d3:12:00:8c:cc:e1:91:
5f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3A:0E:A7:2C:5A:70:1C:8F:C8:98:C1:A3:8D:DA:7F:6A:09:DA:76
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/717A4CC8B88611F08042A282C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.31.40.0/23
103.129.100.0/23
103.176.134.0/23
IPv6:
2001:df3:b1c0::/48
Signature Algorithm: sha256WithRSAEncryption
4c:0a:d2:aa:1a:6d:e7:85:01:65:2b:34:8e:c6:2c:9c:a3:e3:
f4:cd:36:fa:2a:24:53:27:4a:3e:36:6b:7c:dd:62:c9:1c:3e:
62:fd:0b:75:6a:a4:d6:af:8b:78:6a:83:f6:73:fa:65:cd:de:
bc:fe:01:4a:72:66:e9:bb:f9:41:0a:4d:21:1d:26:bf:6d:4b:
bd:8b:f2:8a:cf:cf:fb:aa:e0:c6:99:a5:26:8e:38:58:32:67:
89:5b:7a:a7:c4:f6:8a:ee:f6:82:d2:2e:1d:0b:c5:85:32:95:
12:ef:ad:b0:72:51:30:b4:f6:73:77:f0:23:0c:50:c2:bc:c8:
24:39:d8:03:65:85:98:b6:bc:c8:cc:d4:c3:da:6e:c0:83:2a:
de:c8:97:73:ba:51:24:ff:48:9a:d4:4c:61:1f:f5:8f:44:87:
ec:04:aa:51:eb:98:3e:a9:6c:4e:24:34:13:5b:31:e7:25:2c:
20:7e:97:d8:b5:35:2b:e7:54:df:f3:61:6a:98:92:42:25:de:
e3:a7:02:49:24:17:c8:1c:27:39:40:72:c0:08:60:37:41:b6:
05:04:62:51:e7:61:b1:19:05:28:f8:d8:89:23:55:9a:8c:0a:
23:0c:01:29:ad:26:db:ee:8d:f8:17:7f:65:91:9e:04:3c:5e:
16:66:62:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:42 2026 by rpki-client