
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8458667093FF11EEA5AE3882C4F9AE02.roa
File: 8458667093FF11EEA5AE3882C4F9AE02.roa (raw, json)
Hash identifier: 1rGT6G7Qfx/bNnHaBWqRjoFKQHkSrAxhVSaWewMVY9E=
Subject key identifier: 40:1B:3C:09:76:96:53:34:CB:21:63:3D:6E:46:CA:E4:DC:76:A2:5D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D7DF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8458667093FF11EEA5AE3882C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:52:31 +0000
ROA not before: Thu 08 May 2025 16:27:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151699
IP address blocks: 103.179.2.0/23 maxlen: 24
2001:df3:5b40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55263 (0xd7df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:27:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c32f-ede3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:17:49:b7:0f:91:3c:6b:aa:bc:b2:4c:b3:
91:df:90:5e:41:64:1c:21:9f:95:d8:b3:ec:52:58:
6c:53:a7:cf:d2:7f:9e:6c:6a:e9:d7:04:66:21:9c:
c1:3a:a4:b4:3a:1e:fa:4d:9a:9d:d7:86:5c:20:55:
0b:c8:f1:de:dc:d4:27:00:5d:17:24:72:67:78:c0:
c3:c1:be:4f:b6:14:be:2d:3d:4b:da:70:47:01:b9:
28:a7:18:ce:dd:f5:71:65:45:9f:9f:cc:8b:32:92:
7b:74:42:e4:2e:13:a0:38:95:ca:aa:2f:7c:15:b3:
2d:b7:a8:99:3f:91:4b:4f:0f:46:7d:eb:db:a7:84:
81:5a:ca:14:aa:de:c5:12:b0:f4:fb:59:8f:ab:9b:
23:63:06:33:e4:3f:3a:17:49:49:9f:7f:8f:cc:2f:
41:8d:53:6b:b0:78:79:f0:b9:b8:3c:74:a1:77:79:
b7:5a:8c:5b:10:74:7b:2d:6d:30:f5:58:56:8a:ad:
ca:65:71:bb:bb:16:d7:4e:93:c0:47:81:96:18:62:
58:07:43:5b:b2:09:e3:91:c1:57:e2:a9:80:f7:8d:
72:ae:d1:a7:cd:ab:db:85:9f:85:d5:43:e9:4d:14:
c0:e9:6f:30:f9:ed:aa:9f:66:47:07:df:af:06:8a:
66:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1B:3C:09:76:96:53:34:CB:21:63:3D:6E:46:CA:E4:DC:76:A2:5D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8458667093FF11EEA5AE3882C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.179.2.0/23
IPv6:
2001:df3:5b40::/48
Signature Algorithm: sha256WithRSAEncryption
a4:22:21:d4:d2:46:76:b3:e3:53:76:61:47:46:05:84:6b:04:
82:b6:75:02:31:01:0e:2a:b1:87:4e:a1:11:2c:22:56:61:82:
88:71:29:80:6f:64:67:b9:58:96:a7:3a:3e:95:5f:0b:f3:7c:
aa:f4:2d:bd:09:93:e5:08:0a:98:55:7e:00:be:f5:a9:d2:f4:
5b:d7:8c:46:91:0d:e4:e1:b4:9c:d6:88:7e:3d:93:32:cb:95:
97:28:99:dc:6a:9c:bf:31:c9:55:b9:06:9b:a9:72:14:86:32:
f1:67:4e:f6:16:68:24:51:4c:3e:82:2b:54:1f:6d:4a:b3:97:
0d:d8:b4:c6:c8:1d:56:80:3b:4b:e8:48:20:61:79:5a:75:cf:
35:c0:4f:06:0b:89:c2:7b:dc:1f:45:05:a6:8c:1a:3f:d9:12:
e7:cf:03:c6:f4:15:c9:47:76:fe:dd:38:ad:35:c5:0d:98:ab:
08:1a:9f:51:ef:05:25:63:cc:8d:2e:8d:4b:28:c4:f5:f8:08:
8b:7d:c1:18:07:e2:68:0f:3c:0c:2b:1e:0e:d3:49:c0:a5:21:
30:70:c5:70:ed:b1:4a:f7:0e:0a:49:65:02:2c:20:9c:68:6e:
8b:1b:a1:0f:69:83:40:da:48:a8:5d:21:aa:e0:dd:f5:22:fe:
fd:70:e6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:12:23 2026 by rpki-client