
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/80EFFF14D89311EAAF16BC46C4F9AE02.roa
File: 80EFFF14D89311EAAF16BC46C4F9AE02.roa (raw, json)
Hash identifier: uLwjzpa9eTSthwHKnMZPqHrwEd9dWP0tMpLlboDlG1Q=
Subject key identifier: E8:B4:C9:98:9F:D7:23:76:7D:90:51:91:B8:42:7B:33:6B:C0:E3:72
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D2AD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/80EFFF14D89311EAAF16BC46C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:21:28 +0000
ROA not before: Thu 08 May 2025 16:02:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134905
IP address blocks: 103.211.76.0/22 maxlen: 24
2407:4cc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53933 (0xd2ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:02:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bbe8-b621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c8:3a:49:0e:92:77:d5:ae:f8:0f:0b:62:cf:
33:1f:72:3d:9e:e1:4d:91:5b:f6:a3:66:f5:db:13:
17:2c:19:6f:b2:4b:f5:d8:01:c0:b1:1c:c5:5d:6e:
6d:7a:11:ea:15:8d:34:16:c6:1b:22:20:e6:eb:4e:
7b:70:a6:3f:f9:d5:da:bf:b9:02:21:9b:07:f2:82:
48:09:1c:86:0b:a0:37:94:0a:1e:85:13:06:50:06:
c0:1d:83:de:67:ff:6d:9b:cb:f7:7c:14:48:db:0c:
97:06:e6:11:6c:a9:2b:13:2d:1e:8b:d9:ca:b0:00:
7e:03:5d:30:f6:c5:d1:92:3d:e6:90:73:56:98:de:
c3:9e:4e:64:ff:7c:61:b7:00:02:b8:16:74:96:e8:
72:32:35:42:25:4f:ac:c3:17:d3:27:28:38:fe:05:
74:0a:63:d3:77:6b:a2:d5:12:f5:1d:13:93:e1:0e:
cd:a1:25:db:3d:49:99:6d:9e:d9:30:0e:f7:df:3b:
09:f7:5b:b2:c3:a1:49:65:ae:71:a6:17:b2:04:c1:
29:bf:b8:66:f0:98:fa:82:fc:2a:ed:10:01:56:6a:
67:19:69:64:9d:33:b8:a3:a1:76:f3:fd:4b:d9:39:
6f:ca:3b:d3:09:ed:18:6f:92:8f:e4:0a:44:59:96:
46:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B4:C9:98:9F:D7:23:76:7D:90:51:91:B8:42:7B:33:6B:C0:E3:72
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/80EFFF14D89311EAAF16BC46C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.211.76.0/22
IPv6:
2407:4cc0::/32
Signature Algorithm: sha256WithRSAEncryption
00:db:46:78:9a:45:04:00:5f:2f:24:d3:ec:43:db:53:da:c0:
2f:c8:67:68:2d:16:af:21:93:43:78:ce:f9:f9:52:61:1e:f1:
6a:fd:8f:b7:e8:49:65:74:ce:e6:5e:85:29:7f:1c:f1:96:48:
b2:ea:85:e9:0d:34:e3:91:3b:63:f7:a2:d5:d8:2e:cc:d4:70:
52:6f:2a:fd:4a:6b:ea:bf:a5:e6:e4:04:24:ce:b0:7b:27:fd:
82:09:88:52:b8:a7:b7:ed:4f:b7:a5:06:8c:ed:40:a8:a6:55:
1f:bb:d4:79:5a:11:d5:43:b6:3a:1d:50:37:b8:ea:b7:07:c1:
06:09:e4:5b:45:6a:db:29:0e:7c:8d:b6:47:46:fe:74:ef:4a:
b8:a5:80:36:89:a4:64:49:89:c2:04:d0:15:75:42:75:c0:67:
7f:f7:f2:8d:84:4a:05:57:2f:b8:56:47:88:98:03:fd:ee:d2:
d3:cc:0c:52:f7:13:a3:4c:f5:8a:89:d2:5a:2f:b9:60:cc:d4:
c3:c0:97:60:41:9c:c5:76:cb:a2:f9:37:6f:5d:7f:af:f3:04:
d0:73:76:07:8f:9b:5f:4b:f1:54:cb:64:81:02:7e:d4:83:9a:
79:a0:1d:d9:1e:55:a9:45:68:51:2c:d0:26:a1:d5:22:e8:0b:
93:57:8e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:35 2026 by rpki-client