
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8152D222387B11EB85E94170C4F9AE02.roa
File: 8152D222387B11EB85E94170C4F9AE02.roa (raw, json)
Hash identifier: pKLXptg2oboRcjDtQtOK1LyJ/64lFV+VaefrYvpwtOU=
Subject key identifier: 20:5E:73:66:A3:E9:09:8D:6D:22:4F:55:88:FD:36:28:D6:96:43:EA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D401
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8152D222387B11EB85E94170C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:29:10 +0000
ROA not before: Thu 08 May 2025 16:09:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137128
IP address blocks: 103.112.106.0/24 maxlen: 24
2001:df1:cec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54273 (0xd401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:09:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bdb5-508e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:33:63:cb:24:99:6f:50:da:34:5a:6b:81:48:
25:da:50:c5:ff:da:c4:98:85:6d:82:fb:40:58:04:
4e:98:5e:b1:d7:41:a7:f9:88:cd:0b:b7:61:bb:db:
e6:12:f6:f8:d3:85:64:d7:7e:06:78:f7:5c:87:e2:
db:56:61:6b:5c:5c:de:7d:1b:cc:e8:46:47:47:75:
9a:1a:1c:e2:93:78:b3:aa:43:37:17:b2:00:5d:ee:
34:80:8d:51:6c:8f:ad:a4:4a:06:02:eb:0a:51:95:
c1:cf:74:a6:cb:5c:c4:86:2f:53:83:b6:8d:fd:76:
6c:f1:e9:c7:1f:3e:35:a4:fb:59:fc:5b:64:2e:20:
a1:e5:30:85:9d:32:cd:50:e5:3a:7b:54:89:dc:e3:
32:2a:be:68:d7:11:31:d5:23:05:41:d8:85:6b:a5:
05:65:0d:da:e4:14:64:a0:bb:60:2f:17:e1:bb:00:
76:c8:4b:4a:f5:38:43:0b:90:05:61:27:50:87:fb:
50:5c:65:63:f4:8d:c4:5e:85:d0:3e:16:cc:1b:4b:
11:9a:40:13:b4:3b:2a:71:13:d9:1e:06:8c:40:2b:
cc:ac:fe:3f:51:a8:4f:53:dd:fb:1d:57:fe:99:1d:
88:1e:4f:8c:d9:91:00:72:30:b5:95:fb:f0:42:d9:
db:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5E:73:66:A3:E9:09:8D:6D:22:4F:55:88:FD:36:28:D6:96:43:EA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8152D222387B11EB85E94170C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.112.106.0/24
IPv6:
2001:df1:cec0::/48
Signature Algorithm: sha256WithRSAEncryption
1e:92:98:d3:33:41:00:ff:ef:bc:d3:db:c2:df:79:99:a2:6c:
e3:26:f0:0b:e9:d9:97:bc:31:36:4e:7f:cd:1f:1d:2b:be:72:
a5:f3:62:5f:63:36:d0:e0:4d:a3:9b:5b:05:72:95:18:a9:02:
dd:e6:f5:75:35:46:2c:e0:38:7f:f4:1e:58:ee:7c:e8:c9:d5:
ed:a0:a4:41:ce:32:00:a3:d4:87:b5:ef:76:72:0a:a4:fb:24:
b9:69:e5:1e:41:3a:75:7f:dc:c5:87:aa:23:d3:05:ea:a4:f7:
c6:33:e8:5d:77:80:29:7b:28:4c:51:08:12:85:35:1a:87:11:
ad:0b:7a:d6:33:23:00:29:e3:11:70:2d:07:25:50:52:19:a5:
43:6e:d7:55:d1:9e:df:ba:37:af:cc:f2:f9:80:ae:1f:ff:be:
7f:71:b5:93:4e:79:94:28:ab:12:33:bd:bc:7d:eb:b9:62:08:
1b:7a:f5:a5:1b:f0:7e:ec:74:ae:b6:2a:86:b7:24:01:de:b1:
86:58:e8:de:ce:4a:76:00:e0:40:2c:05:35:d6:24:27:1b:e1:
f4:b8:d0:15:13:4c:c8:0e:1d:be:3e:37:58:0c:4f:09:4c:d1:
68:b4:b6:e6:73:0f:59:7c:75:1e:eb:f0:2b:14:9f:fb:68:dc:
52:32:63:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:27 2026 by rpki-client