
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A5DDCCA4C1511EB8C9F1D7CC4F9AE02.roa
File: 7A5DDCCA4C1511EB8C9F1D7CC4F9AE02.roa (raw, json)
Hash identifier: UqLR6p0rctquPcz6kcCFeI7Fqp0h7w9PsdmbpPpbMac=
Subject key identifier: E4:73:AF:DE:E5:52:ED:2C:A2:4C:32:CE:50:4D:BE:3F:E1:C8:E9:C4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D583
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A5DDCCA4C1511EB8C9F1D7CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:38:26 +0000
ROA not before: Thu 08 May 2025 16:16:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141512
IP address blocks: 103.161.40.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54659 (0xd583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:16:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bfe2-904b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:e7:c2:d8:72:af:72:41:02:9c:2c:83:81:
f1:23:b0:05:65:b1:fd:b1:c7:f5:56:ec:70:c2:6c:
84:22:2c:c8:37:36:a7:6e:39:ea:13:fa:1d:07:c0:
19:f2:17:da:27:aa:17:e2:01:87:e1:79:fe:7b:4e:
38:57:3e:62:d7:3c:e3:21:c1:0a:f4:0d:08:21:8f:
b5:3b:e4:2f:12:86:b8:5d:16:17:46:42:09:b9:c9:
d7:73:15:08:ea:aa:57:6a:8c:56:e9:bb:ca:1f:7e:
b4:6a:b3:58:98:3e:87:08:20:25:26:8a:0d:3a:95:
1d:82:85:6d:9e:0f:a4:54:12:38:e0:d5:3e:69:65:
50:a9:ec:05:55:3b:48:ab:15:c5:91:2c:9d:98:fa:
40:cb:e9:4b:6f:df:d2:21:a8:c5:af:ff:ad:91:f6:
31:0c:96:b5:96:30:e7:90:df:d6:88:f3:d7:87:4e:
96:25:1a:58:ef:53:c3:ed:9e:5d:b8:ac:88:85:2d:
e7:cd:6d:4b:9e:96:0c:c9:76:f3:99:9d:c7:ca:c7:
98:ab:78:c5:77:13:7d:d9:cf:35:5d:42:f4:44:8a:
b2:42:88:d1:73:13:61:d6:3f:f6:37:41:e8:50:3e:
f8:44:7c:56:eb:b6:c2:90:9a:5d:af:ee:85:42:0c:
d5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:73:AF:DE:E5:52:ED:2C:A2:4C:32:CE:50:4D:BE:3F:E1:C8:E9:C4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A5DDCCA4C1511EB8C9F1D7CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.161.40.0/23
Signature Algorithm: sha256WithRSAEncryption
19:39:26:25:26:46:22:03:ee:b7:bd:4b:24:19:d4:3c:4e:29:
de:3a:67:84:05:49:67:84:cd:74:80:7f:14:d7:4d:58:3f:f0:
45:b4:d5:c8:fa:1d:b4:8d:ad:63:cf:f2:a7:92:a6:8d:e1:43:
50:3c:d6:ec:a6:4f:14:d5:7f:d2:49:bf:e5:b5:0d:b6:aa:96:
3a:f5:fa:49:87:ba:00:80:73:f2:5d:6d:cc:e8:7e:90:87:71:
81:63:10:e1:51:96:58:98:47:74:bf:4c:7d:7c:f3:71:b0:e7:
00:a3:22:4e:a7:f3:f0:10:a3:e1:a3:2f:79:8c:37:66:42:15:
3b:ee:a1:e4:6f:ca:aa:f2:52:23:c1:0c:ca:7d:42:0b:f3:18:
15:9f:f6:da:e0:a2:fe:4c:c2:5a:49:ad:e1:ac:f4:bb:06:18:
0a:df:52:5d:b9:ff:ba:28:55:8c:db:80:58:57:c0:bd:37:4f:
09:a9:e0:ac:4d:39:a5:f2:18:31:1a:f0:26:93:57:93:6a:49:
de:c7:d3:6e:8c:13:a6:eb:6c:f2:05:68:35:2f:a9:46:72:20:
fc:72:42:d9:a5:79:67:04:83:71:6f:fc:1a:9d:20:00:f2:94:
86:e6:bd:c0:88:e8:8b:b6:7c:0a:52:cd:67:c3:1d:62:d5:5f:
a3:f8:36:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:20 2026 by rpki-client