
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7D03B536354411F08830BA1DC4F9AE02.roa
File: 7D03B536354411F08830BA1DC4F9AE02.roa (raw, json)
Hash identifier: eaM4UFtidI7PDyB+Zg9xrt5LCthjf9dOeEgXy45iV4s=
Subject key identifier: 4F:58:E4:BE:A5:53:69:88:A3:17:19:A0:6F:49:EE:BE:4B:69:0E:F3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D8EC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7D03B536354411F08830BA1DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:56:58 +0000
ROA not before: Tue 20 May 2025 06:34:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138520
IP address blocks: 103.133.64.0/24 maxlen: 24
103.133.65.0/24 maxlen: 24
103.133.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55532 (0xd8ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 20 06:34:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c439-1a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d1:da:2e:1e:84:97:c4:5c:c5:e9:98:81:0d:
26:9d:b1:67:65:75:f6:83:9f:71:e9:17:e1:94:06:
4c:95:fd:49:18:0c:fd:c7:8d:29:08:3c:d6:c1:5a:
8b:bb:6f:52:62:03:cb:8d:43:ff:9f:e7:2a:47:59:
ec:c8:8d:ff:7d:52:8b:51:f6:fb:8e:7b:7d:bb:22:
a3:50:5f:9c:f0:94:87:6c:3b:d1:23:aa:c9:b0:82:
fc:f0:99:ce:ac:94:7f:c1:25:eb:f1:17:b8:55:0b:
cc:a3:b1:c2:cd:24:dd:fe:2d:96:c1:42:ad:2c:75:
bb:e1:b9:12:31:c0:d2:a4:63:14:7a:5e:94:75:af:
1e:12:7b:91:3c:68:df:ee:d1:69:d7:78:d5:e2:fc:
6e:12:bc:83:58:05:4a:e2:1b:18:3e:a8:f2:cf:29:
fc:a5:ae:56:fb:63:3b:2b:d2:4a:50:9f:c8:ee:3b:
e1:d9:62:bc:61:7e:fa:2b:90:21:55:b0:59:cf:4b:
22:7f:21:5f:00:37:58:73:96:2d:5a:a3:45:23:22:
66:88:47:b7:2a:80:4c:b1:2c:cd:8c:ec:40:34:ed:
5f:b2:2e:cb:f1:15:3a:30:0b:b6:75:e5:92:5f:4e:
a3:45:06:ea:4b:cc:58:5d:f2:d7:d2:40:22:3d:46:
ff:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:58:E4:BE:A5:53:69:88:A3:17:19:A0:6F:49:EE:BE:4B:69:0E:F3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7D03B536354411F08830BA1DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.133.64.0/23
103.133.67.0/24
Signature Algorithm: sha256WithRSAEncryption
25:d8:20:d1:15:2e:4a:78:ab:18:88:4b:14:24:6b:41:e2:e0:
cd:74:73:64:a4:c6:e4:5f:8b:6f:80:81:01:99:27:b9:24:df:
ea:b4:7e:e4:71:82:fb:2a:9a:0e:22:9c:2b:fb:fe:93:26:f3:
de:62:79:23:fd:26:3b:8b:71:b6:88:81:c0:98:b6:c6:ba:e3:
a6:c7:d3:e4:56:b5:f1:1b:5c:1f:b0:5d:4d:39:85:4f:ad:2e:
25:8e:8c:58:78:c1:22:0c:34:4c:69:b6:10:bf:71:df:a3:9a:
ea:7c:d6:de:68:6f:a6:ca:5a:87:b1:8d:34:53:4b:7e:49:e4:
83:c8:92:2d:44:d2:9c:29:5e:31:83:8a:25:c5:62:59:c3:f2:
9f:7f:d9:09:4c:20:53:fc:2b:11:2e:76:c2:f1:de:b8:9d:c5:
e1:3c:6b:bd:a0:20:ad:41:6a:d5:93:b7:83:5a:f7:51:9d:7d:
38:dc:00:c7:b8:82:2a:d1:0a:37:2f:bd:ca:bc:88:12:3f:87:
07:e3:90:ba:3c:49:97:a0:ba:92:0b:ea:92:b9:e4:ce:85:3e:
0a:2f:80:2b:65:47:93:8e:54:e1:b8:f0:84:b7:a8:e3:cc:73:
8c:57:bc:df:ce:e3:a9:a4:e8:c3:da:9e:a7:26:ff:30:ff:ed:
5c:f7:62:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:58 2026 by rpki-client