
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/744DD6B043AD11ECB9D6C054C4F9AE02.roa
File: 744DD6B043AD11ECB9D6C054C4F9AE02.roa (raw, json)
Hash identifier: ctliy/EgLqy3uokOGgvU0n36DB+nJWeLcBpFUUmvVQg=
Subject key identifier: D2:BE:A3:7C:2D:73:48:D9:67:D7:F0:65:14:F7:67:B4:8A:2E:42:05
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D644
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/744DD6B043AD11ECB9D6C054C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:42:53 +0000
ROA not before: Thu 08 May 2025 16:20:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 146914
IP address blocks: 103.171.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54852 (0xd644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:20:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c0ed-3f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:76:78:a3:df:7e:22:1d:76:7a:a6:11:8d:8c:
3d:f1:9f:c5:1f:d0:2e:8f:1d:2b:4e:42:b8:89:e8:
c2:0d:9e:9f:18:3e:dc:34:b8:d4:ef:75:01:37:60:
12:b1:de:96:7a:b1:cc:7b:fa:b6:5f:d6:1f:9c:c3:
4a:0d:33:93:e4:70:51:e2:80:1c:81:87:1b:31:82:
c3:56:40:86:5e:e5:df:1c:a2:64:d4:93:85:d6:a1:
f2:bb:85:71:7d:a0:9d:03:b0:f1:91:e2:a6:9f:a2:
3a:95:aa:63:bf:c6:39:de:66:4a:1d:25:7a:ec:85:
3a:60:ae:61:68:8d:75:66:eb:ec:52:df:79:01:a6:
07:61:05:d8:a1:e6:db:d2:4a:bd:f0:0c:2d:0f:a4:
9d:26:ea:b3:5c:dd:66:15:03:de:03:45:3f:4e:0e:
03:28:90:92:8f:8e:b9:1a:2c:37:98:23:17:00:5c:
e2:f6:48:c8:7f:e2:3e:c1:e1:a2:20:a3:15:7f:ec:
a1:75:8a:dd:95:c3:b2:bf:02:13:32:5f:82:af:d0:
bd:9c:41:12:aa:6f:ff:28:4c:d5:f7:e8:8a:43:d3:
40:71:8f:bc:03:bd:be:fe:e6:7f:0f:9b:e4:b3:94:
12:f1:02:16:17:15:e4:a9:54:a1:8f:3a:f6:bb:64:
76:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BE:A3:7C:2D:73:48:D9:67:D7:F0:65:14:F7:67:B4:8A:2E:42:05
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/744DD6B043AD11ECB9D6C054C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.171.170.0/23
Signature Algorithm: sha256WithRSAEncryption
42:2c:f8:30:bc:4c:00:e6:41:cd:f7:3b:d6:af:b7:3d:0c:19:
5a:25:ba:38:0e:14:a4:df:9f:7d:ab:00:31:08:eb:db:9a:bf:
2e:52:00:9b:96:16:27:76:ce:70:46:17:e6:33:cb:62:f4:46:
4d:5c:f2:0d:b9:43:ef:a9:a8:05:a9:98:5d:72:d3:fb:f4:37:
56:37:86:4f:c8:b0:4b:52:6e:5c:a5:e7:5e:27:55:7e:d5:cc:
b9:40:27:67:f9:3c:1b:28:db:68:ec:7e:7a:c5:8c:96:f0:24:
ff:01:a4:f8:e9:43:1b:52:d4:82:4a:9d:31:fb:9b:b5:71:69:
e0:48:e8:9a:43:d7:7a:f1:b4:db:ac:a2:2b:7b:1b:d1:bb:8e:
e9:8d:86:50:09:c4:18:99:c5:76:ce:35:d5:cb:09:c0:a2:e1:
99:95:af:5f:99:4c:ee:55:a2:b0:e6:20:10:1f:9d:53:e3:57:
f2:32:a3:6b:de:1c:00:80:a6:30:da:d0:07:8e:74:af:c0:5b:
ed:f0:35:1f:16:b5:d2:80:34:0b:4d:90:d1:d5:f0:3c:5a:80:
8d:55:a3:1b:a0:64:62:83:0e:82:af:a3:d0:d1:be:29:f9:d7:
da:7c:19:01:34:66:5f:f8:25:cb:1d:3b:ce:a6:7c:60:22:70:
5d:bf:89:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:59 2026 by rpki-client