
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82BB15E2F04C11EF978F9C54C4F9AE02.roa
File: 82BB15E2F04C11EF978F9C54C4F9AE02.roa (raw, json)
Hash identifier: PZ4RJmKGyRktoPfXWfGZMfUUKuzs0BaMZjePibhi3wY=
Subject key identifier: 2E:2D:77:C4:83:30:03:71:5A:0F:DE:3B:19:B9:A0:6B:AB:7E:E7:CA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D3E5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82BB15E2F04C11EF978F9C54C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:28:38 +0000
ROA not before: Thu 08 May 2025 16:08:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136724
IP address blocks: 103.83.128.0/22 maxlen: 22
103.83.128.0/24 maxlen: 24
103.83.129.0/24 maxlen: 24
103.83.130.0/24 maxlen: 24
103.83.131.0/24 maxlen: 24
103.102.89.0/24 maxlen: 24
103.102.90.0/24 maxlen: 24
103.102.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54245 (0xd3e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:08:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bd95-30db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:81:d9:44:04:52:d1:de:71:f9:df:0a:19:
08:32:70:d4:89:80:b8:18:38:d4:54:67:48:cf:2b:
83:9f:6a:12:5d:83:2a:1a:96:77:11:8c:fc:95:3a:
65:09:21:81:0e:52:86:e6:67:a4:97:a7:83:2c:84:
8d:8f:f5:1e:de:b5:4f:fb:ac:a9:d9:b1:12:62:f3:
1f:25:2a:63:18:5b:86:c1:1f:8e:df:9c:bf:5a:f5:
8f:db:72:3c:ab:72:35:9e:4f:51:aa:95:04:4a:46:
8b:d6:dd:68:78:9e:f5:fd:c3:81:6d:0f:42:cf:cb:
a8:e5:de:3e:da:2c:74:7c:b9:56:07:f7:24:1d:d1:
b2:a3:37:0a:a8:2e:cc:1b:47:4b:72:18:72:36:19:
5d:e4:8e:c5:3f:30:21:7e:2c:3b:57:a6:72:13:01:
b7:ea:9a:28:77:41:b4:c7:c4:5a:82:4a:8d:c6:d3:
f9:e5:ce:d1:49:29:02:5d:2f:2c:32:d8:67:7a:67:
39:78:cf:f8:ef:f8:81:a6:7a:66:c0:6e:85:f0:52:
1f:97:72:19:52:15:85:17:0d:6c:08:bb:94:bc:9a:
07:68:e5:38:e9:79:d8:59:41:28:98:16:60:06:db:
78:35:19:85:27:6b:0a:83:f2:89:4c:f1:a0:20:9d:
c1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2D:77:C4:83:30:03:71:5A:0F:DE:3B:19:B9:A0:6B:AB:7E:E7:CA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82BB15E2F04C11EF978F9C54C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.83.128.0/22
103.102.89.0-103.102.91.255
Signature Algorithm: sha256WithRSAEncryption
69:ae:35:5f:d8:2c:ca:b1:c9:1b:3a:68:65:4b:bb:bf:de:14:
db:0b:c1:52:89:5d:85:16:0d:90:49:f8:a9:b1:b5:5b:6e:d5:
03:e0:e1:de:0d:c6:f8:ac:11:00:9a:12:85:04:7a:7d:a4:73:
98:9a:32:5f:7d:2e:83:e1:fc:41:06:e9:7a:3e:48:f5:6e:a4:
b7:b3:f4:91:d6:fe:e4:58:07:9b:fb:38:f7:4a:8e:da:d3:55:
ce:af:e5:89:7f:1c:27:d7:43:3b:d8:55:fa:5d:1d:5f:6f:0c:
b8:fe:67:38:f9:07:02:47:1b:7f:a2:cd:8e:b1:5a:bb:2f:02:
56:dd:f1:af:1c:70:7e:81:e3:77:a6:4c:0f:70:a1:b4:27:d5:
1f:24:0e:56:37:16:22:82:23:2a:17:45:bb:45:29:9d:ec:d6:
5b:d8:50:68:4a:b7:5f:36:20:85:f0:ec:9c:97:5d:80:8f:39:
f0:a7:55:6c:21:c3:07:1f:c2:2d:65:8c:79:5b:d4:fd:19:39:
71:5b:6a:6d:07:41:39:03:e5:7a:e9:02:32:15:c9:72:6e:10:
95:37:90:ea:31:1a:16:15:2f:44:52:a4:2a:ce:6b:33:70:58:
67:6c:c4:6e:ff:1c:24:bc:ec:cf:de:ad:9a:59:2e:0a:d2:bc:
b4:33:da:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:36 2026 by rpki-client