
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7AE60CC6B87111EB9F052D60C4F9AE02.roa
File: 7AE60CC6B87111EB9F052D60C4F9AE02.roa (raw, json)
Hash identifier: HGEux+3xfr88OC3y/Te7JULeurk7D7MaohtvGmKsk3w=
Subject key identifier: 4C:A7:3A:EB:7E:D8:3F:6E:85:04:2C:FA:3C:AC:1D:80:29:41:64:2A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D575
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7AE60CC6B87111EB9F052D60C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:38:07 +0000
ROA not before: Thu 08 May 2025 16:16:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141489
IP address blocks: 103.162.118.0/24 maxlen: 24
103.163.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54645 (0xd575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:16:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bfce-d23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7d:f6:6c:cd:1a:d2:52:9a:b6:b6:f8:ed:1a:
18:cf:de:19:ad:f3:86:0c:e7:4b:4c:be:d1:f9:8d:
bb:36:23:b4:07:fe:ff:e6:d2:0e:6a:65:9d:ca:da:
85:ab:b8:be:ba:b2:47:8b:e6:be:2e:51:37:9e:cd:
81:d2:51:b4:98:de:e8:9d:4f:60:ba:6e:3b:69:4f:
f4:52:20:8d:c2:b0:de:f5:a1:3a:44:34:0c:bc:d7:
cb:e8:9c:80:df:7e:9b:7b:5d:5c:53:96:c0:86:1e:
ad:01:43:48:1b:9f:be:48:06:1d:5e:ec:9d:a0:c0:
01:b7:68:6f:6f:6f:12:20:d1:7b:ba:6b:74:93:77:
6a:a6:4e:58:ed:65:f4:54:08:58:5e:83:3d:68:8a:
cc:73:6a:99:47:4d:9a:b9:d4:19:8e:e6:a0:49:5b:
94:9f:d2:a3:a1:4f:08:aa:41:3b:56:e0:3f:39:55:
01:f9:81:5a:9e:7c:44:ce:d7:08:90:7b:bb:5e:2d:
83:f1:eb:9f:c2:82:07:e6:1c:70:a3:41:0a:b2:98:
6b:d0:fe:04:ba:31:d1:cc:38:86:9e:30:19:c6:a8:
f9:6a:cb:e4:47:99:aa:72:2f:c5:56:e8:92:1b:09:
af:d7:02:0d:81:70:58:38:a0:6a:36:26:1f:8b:b2:
ec:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A7:3A:EB:7E:D8:3F:6E:85:04:2C:FA:3C:AC:1D:80:29:41:64:2A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7AE60CC6B87111EB9F052D60C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.162.118.0/24
103.163.157.0/24
Signature Algorithm: sha256WithRSAEncryption
53:9d:3a:0e:27:79:db:a5:e6:a5:1c:cc:f0:02:51:b9:bb:db:
8d:a9:d6:fb:45:c2:b8:f5:70:e4:93:e7:00:53:d9:1f:75:1b:
5a:48:d3:2e:32:74:5f:8a:87:94:3e:28:4a:d6:a3:1f:31:89:
5b:17:2c:61:8e:36:d6:e9:0a:d5:aa:5e:35:7f:cd:ef:55:9f:
bb:b7:5c:9d:1c:54:ed:f8:1b:b2:ee:49:24:8a:83:d1:27:61:
ee:ee:06:9b:a4:0d:61:5e:ef:66:ee:b2:2d:67:6d:6b:74:f9:
fb:a6:8b:b8:ce:96:58:16:af:fc:3e:bb:73:27:4f:a4:53:31:
5a:f5:9f:37:92:dd:a0:b6:14:1f:1e:c4:da:e8:d9:60:42:2c:
ed:97:b4:df:22:06:3c:94:b2:ef:b2:b8:ca:94:e9:5e:f2:5f:
1c:ec:cf:51:a5:bd:7e:f5:3c:9a:ea:bf:0f:37:33:98:27:cb:
50:9d:da:53:5d:b1:b1:6f:40:40:97:bd:14:c9:f0:81:87:c5:
be:df:0e:ae:dd:04:89:1f:80:6c:04:ee:b1:f3:7e:44:d0:a8:
6f:b8:7c:41:e2:a1:e9:cd:7c:7d:99:ad:fb:f1:3d:5d:4b:d0:
00:01:9c:0a:d7:46:b2:65:8f:de:f4:93:94:54:79:b7:5c:92:
e4:52:e4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:56 2026 by rpki-client