
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A44A836119411EDA5BF6877C4F9AE02.roa
File: 7A44A836119411EDA5BF6877C4F9AE02.roa (raw, json)
Hash identifier: wInRSg6dqj/3P/aUkDcg1kELO4nZKT4UpduCjK0XTp4=
Subject key identifier: B3:08:62:1E:17:BE:CA:1B:B2:EA:C4:AB:C8:63:6A:16:2A:E2:99:7D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D1A4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A44A836119411EDA5BF6877C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:16:12 +0000
ROA not before: Thu 08 May 2025 15:56:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132784
IP address blocks: 103.49.254.0/24 maxlen: 24
103.49.255.0/24 maxlen: 24
103.174.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53668 (0xd1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 15:56:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4baab-c67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:3e:53:04:6a:09:86:4e:03:04:d3:cb:78:
cd:da:59:80:b0:5a:70:79:7f:a3:70:de:26:ad:b4:
dd:87:30:b9:b1:43:af:16:22:37:40:bb:b1:e2:a9:
ba:10:49:3d:05:a5:c9:7d:96:67:00:a8:7a:c1:a5:
7e:2e:93:a4:0f:ae:11:88:7c:ce:f0:1a:57:51:56:
d8:38:26:30:b4:a7:64:bd:52:26:5a:90:fd:51:dc:
e8:d6:3f:e4:6a:ef:9d:32:bd:53:4d:3c:54:d9:05:
1b:e8:3a:03:16:c5:b2:a1:1f:dd:1f:6a:a4:56:c3:
6f:28:2c:7a:f2:c0:01:04:bf:d5:04:b3:7f:40:be:
f9:85:14:ff:2c:9c:20:65:89:56:cf:69:7c:4f:da:
6e:b9:69:9b:8a:24:e6:b8:ff:7c:dd:1a:86:dd:47:
f3:18:84:17:98:c5:7a:4d:e3:64:e5:c9:d5:50:f0:
44:3d:74:28:4c:41:56:8d:71:47:ad:b8:6b:0e:60:
c5:01:a3:9f:c8:01:4a:fd:0e:18:57:8a:11:6f:3a:
f9:9b:74:d4:a6:2f:f0:3d:23:dd:c2:7f:c6:3f:9a:
6f:e0:03:40:9e:c3:9a:d6:c8:41:f4:41:40:7e:a2:
8f:8c:99:56:05:30:3d:33:db:e3:16:b0:66:cd:5c:
3b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:08:62:1E:17:BE:CA:1B:B2:EA:C4:AB:C8:63:6A:16:2A:E2:99:7D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A44A836119411EDA5BF6877C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.49.254.0/23
103.174.199.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:ea:39:13:3f:2d:29:89:c3:e5:5c:3b:dc:06:48:31:4c:9d:
8c:0d:73:4c:ee:57:eb:29:e2:25:c2:83:61:ce:60:48:02:ca:
c0:2e:a8:0e:04:97:1e:99:95:cd:52:de:34:26:68:9b:e4:51:
55:45:c9:41:b3:c2:7d:f0:3c:c6:c0:6c:71:ab:9f:ca:76:8d:
62:52:e5:9c:48:48:9e:77:9c:e3:0d:ec:73:b1:8d:88:fe:b3:
b4:ef:ed:ed:5c:f9:9a:91:49:c5:72:2e:51:02:6e:f7:a9:35:
10:3d:c1:ee:a6:7b:9d:8e:98:d8:0c:5a:f5:82:39:fe:e3:4f:
d0:63:1e:9f:bb:2a:f0:97:ca:dd:75:30:b3:e6:1b:74:ed:eb:
24:67:80:5c:9b:4c:f2:7d:9f:47:7d:0c:0e:bc:8f:0e:97:fe:
b9:1e:90:55:88:a0:6b:3f:97:79:1c:d8:8d:dc:55:f9:aa:25:
5e:b4:65:2f:15:c6:1b:2a:1f:4d:77:e0:71:96:cc:5a:0d:89:
df:23:78:2c:8f:83:ac:9f:58:ce:c7:09:cb:98:38:f4:6a:aa:
b4:e5:eb:14:55:77:83:9e:47:34:f9:83:d6:a8:e8:fe:d5:23:
34:28:ca:16:bf:e4:2b:2a:e1:31:df:19:b7:3e:8d:9d:47:52:
55:4f:2e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:20:37 2026 by rpki-client