
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/732F297C151E11ECA422CD83C4F9AE02.roa
File: 732F297C151E11ECA422CD83C4F9AE02.roa (raw, json)
Hash identifier: Sf5TEv6DrIyrkTDY0a3poX5LywOs4DysBrXXTPAKf18=
Subject key identifier: F5:9B:B8:F2:5A:1A:EF:B6:40:1D:C6:28:60:AD:0D:47:DB:D4:EB:7B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D637
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/732F297C151E11ECA422CD83C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:42:35 +0000
ROA not before: Thu 08 May 2025 16:19:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 146890
IP address blocks: 103.173.20.0/23 maxlen: 24
2001:df1:cb40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54839 (0xd637)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:19:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c0db-e301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a1:96:a8:4b:db:ba:6f:c7:8d:91:51:9e:f6:
ce:e6:38:da:15:44:e8:67:7d:94:b8:ef:ec:ac:d5:
0d:d3:f6:f5:1d:21:a7:fc:92:c6:ea:0a:5a:1b:4a:
3a:1f:98:25:1e:de:7e:bc:7e:ca:97:65:e0:1c:e4:
d5:92:85:98:84:8b:c2:4d:11:5b:45:c7:fc:37:10:
19:7a:3a:1f:d8:85:1e:6a:39:c6:7f:72:e3:ec:f4:
f6:35:69:45:35:1f:b2:e9:43:74:2a:33:e7:9b:08:
38:0f:f0:84:63:ee:40:22:88:5d:64:13:a0:e6:40:
4c:a5:3a:ac:3a:e9:1f:30:c2:0e:f8:b5:0d:18:ea:
9c:1a:f8:23:81:82:e0:00:6b:43:1b:a6:ee:2b:4f:
cd:40:12:b8:8a:a9:5c:a7:c7:d8:6e:28:35:1f:f2:
32:36:c1:1f:2b:3d:23:2a:d3:7c:bd:df:e8:98:39:
ac:8b:84:26:c4:7d:a7:c4:db:f5:d7:c7:f5:1a:67:
37:e3:38:ad:e0:83:e6:24:18:46:d1:10:7f:f1:78:
b3:f9:9f:be:b8:fc:67:66:10:3b:f0:39:7e:7c:98:
e3:47:ee:5e:93:88:48:bb:45:2f:27:ec:7a:98:66:
da:cb:8f:82:73:7f:48:b3:31:27:70:cd:05:26:66:
de:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9B:B8:F2:5A:1A:EF:B6:40:1D:C6:28:60:AD:0D:47:DB:D4:EB:7B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/732F297C151E11ECA422CD83C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.173.20.0/23
IPv6:
2001:df1:cb40::/48
Signature Algorithm: sha256WithRSAEncryption
45:5a:b7:f3:31:09:af:1e:e7:97:03:29:11:eb:fa:50:53:c5:
74:30:23:50:88:06:e8:7e:41:2b:dd:3f:56:67:b8:b7:a6:7e:
98:2c:47:dc:18:68:94:d2:c8:72:9e:16:ab:49:34:00:d4:05:
48:4e:e0:9e:80:4a:e8:c8:bd:a4:1f:62:94:f0:15:1d:87:b0:
d4:df:9b:71:bf:15:6a:2f:9b:ef:10:90:d3:d6:72:e0:3c:50:
ae:7c:ca:75:35:ca:0a:55:9c:35:60:c6:58:25:c3:0b:37:e1:
26:50:9d:d2:53:2c:f3:ef:52:5d:69:30:52:5a:2b:dd:b1:e2:
8f:cd:c2:dc:45:4c:77:3b:06:c6:53:e9:7e:1f:d7:1d:eb:41:
94:8d:f5:0d:6b:8a:e0:34:1b:95:c5:45:a2:36:20:bf:0a:d9:
d0:06:9e:fc:b9:f9:9d:43:45:5a:38:81:69:92:fb:88:55:64:
ca:39:c7:39:f6:9e:cd:fd:fb:ba:33:c3:5a:e1:68:32:98:f9:
01:b4:00:e7:38:f5:c4:4a:dc:b7:c4:d6:9b:45:e8:fe:33:19:
39:bd:19:06:a9:ed:73:67:ad:34:3a:ac:f8:2f:fa:d5:c9:14:
15:5d:3a:44:ac:9d:63:da:29:ed:bf:9a:ea:c2:cd:b6:69:53:
fe:e2:ad:59
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDANY3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MTk1MloXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGMwZGItZTMwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJqhlqhL27pvx42RUZ72zuY42hVE6Gd9lLjv7KzVDdP29R0hp/ySxuoKWhtK
Oh+YJR7efrx+ypdl4Bzk1ZKFmISLwk0RW0XH/DcQGXo6H9iFHmo5xn9y4+z09jVp
RTUfsulDdCoz55sIOA/whGPuQCKIXWQToOZATKU6rDrpHzDCDvi1DRjqnBr4I4GC
4ABrQxum7itPzUASuIqpXKfH2G4oNR/yMjbBHys9IyrTfL3f6Jg5rIuEJsR9p8Tb
9dfH9RpnN+M4reCD5iQYRtEQf/F4s/mfvrj8Z2YQO/A5fnyY40fuXpOISLtFLyfs
ephm2suPgnN/SLMxJ3DNBSZm3g8CAwEAAaOCAnEwggJtMB0GA1UdDgQWBBT1m7jy
WhrvtkAdxihgrQ1H29TrezAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzczMkYyOTdD
MTUxRTExRUNBNDIyQ0Q4M0M0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAWetFDAPBAIAAjAJAwcAIAEN8ctAMA0GCSqGSIb3DQEBCwUAA4IB
AQBFWrfzMQmvHueXAykR6/pQU8V0MCNQiAbofkEr3T9WZ7i3pn6YLEfcGGiU0shy
nharSTQA1AVITuCegEroyL2kH2KU8BUdh7DU35txvxVqL5vvEJDT1nLgPFCufMp1
NcoKVZw1YMZYJcMLN+EmUJ3SUyzz71JdaTBSWivdseKPzcLcRUx3OwbGU+l+H9cd
60GUjfUNa4rgNBuVxUWiNiC/CtnQBp78ufmdQ0VaOIFpkvuIVWTKOcc59p7N/fu6
M8Na4WgymPkBtADnOPXESty3xNabRej+Mxk5vRkGqe1zZ600Oqz4L/rVyRQVXTpE
rJ1j2intv5rqws22aVP+4q1Z
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:47 2026 by rpki-client