
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8664290642D311ECB45AF16EC4F9AE02.roa
File: 8664290642D311ECB45AF16EC4F9AE02.roa (raw, json)
Hash identifier: /hK9cTOnYxR+pZdHRlMva4xBZ1e3iMDImD1erHOqa08=
Subject key identifier: FA:01:7F:C6:B3:90:68:9A:24:C8:28:CB:3A:1C:1B:31:01:59:D7:65
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D662
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8664290642D311ECB45AF16EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:43:36 +0000
ROA not before: Thu 08 May 2025 16:20:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 147207
IP address blocks: 103.175.94.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54882 (0xd662)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:20:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c117-60f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:74:92:17:51:9f:03:e9:72:37:c1:8d:21:
be:ad:41:2e:01:ac:d0:f3:e5:04:c9:86:3e:16:81:
ea:86:c2:05:f4:a6:66:df:26:02:23:29:70:b9:fa:
3c:a6:8f:ff:a2:91:78:7c:a1:b3:5f:ed:27:3f:83:
75:29:99:b5:9e:ad:c9:44:2d:9c:47:29:d5:54:0d:
c7:1a:85:63:30:86:e7:48:88:4a:b6:12:a4:cc:f7:
56:b9:07:ca:d4:bf:3b:26:5a:91:6e:19:c7:10:bb:
a9:a8:47:d4:84:78:34:ea:29:b3:23:68:2a:6a:55:
85:e4:63:6d:71:43:17:d6:0c:0c:de:ae:cf:49:e7:
f9:77:7d:ae:3e:4f:00:0a:92:85:90:ab:2f:d5:61:
f6:7e:84:b4:d4:6b:50:87:2d:ae:8a:90:8d:29:90:
5a:c3:41:21:91:55:77:81:19:ac:21:c2:33:1c:fc:
90:82:f5:bb:4a:9e:79:0f:b6:42:8c:bc:31:0d:03:
08:62:86:fb:5c:b6:5f:99:c1:c4:e8:04:f2:e6:53:
b9:08:a5:54:af:93:db:7d:ca:55:97:10:0f:84:27:
e8:10:3c:e4:6e:a1:79:cc:53:63:06:73:a1:66:00:
e1:3d:ba:9c:a5:20:84:a3:c9:f7:c5:c6:2b:66:a9:
a6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:01:7F:C6:B3:90:68:9A:24:C8:28:CB:3A:1C:1B:31:01:59:D7:65
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8664290642D311ECB45AF16EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.175.94.0/23
Signature Algorithm: sha256WithRSAEncryption
64:c4:f5:ca:5e:90:9b:cd:44:90:1b:25:57:d2:66:ee:11:ee:
6e:78:6f:24:1e:13:3a:3a:bf:90:04:5d:86:0b:7c:74:a0:ed:
39:cd:d3:11:c1:e5:be:33:b1:89:9a:0b:db:39:6c:5a:b4:a9:
3c:36:69:ce:3d:97:c0:03:a7:5d:25:7d:26:5b:45:d4:94:a9:
1d:65:13:09:d8:e4:9a:06:b2:87:b3:0d:c2:e5:36:76:ab:3a:
c6:e8:47:f9:a7:f9:ea:7c:95:2d:ec:4e:d4:f0:f3:b0:c7:7f:
bf:b7:f6:d0:61:ff:d1:a8:d9:a7:9c:7c:01:f0:62:f4:ca:ae:
1b:65:86:f0:73:27:f4:b9:7d:c0:d7:ab:d5:1d:4a:4e:fe:e1:
f1:b1:41:63:c3:03:45:b6:5a:b9:78:3a:a6:cc:67:e9:51:69:
8b:03:48:b2:48:96:7b:9d:e7:f0:06:8f:0e:bf:4b:88:b1:f4:
5a:94:a1:b2:ed:84:50:fc:f7:94:5e:c2:56:30:85:a6:3e:bb:
1f:d9:cc:d7:fc:41:96:32:5d:4a:e4:5d:08:40:1b:88:a0:03:
ed:86:4b:3a:44:b5:f3:06:eb:1f:c1:a1:ea:79:11:b1:3c:0d:
ef:9d:e0:3f:c9:56:2a:bd:51:63:26:ec:2c:20:57:23:28:20:
61:df:90:61
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDANZiMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MjAzNloXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGMxMTctNjBmNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALq9dJIXUZ8D6XI3wY0hvq1BLgGs0PPlBMmGPhaB6obCBfSmZt8mAiMpcLn6
PKaP/6KReHyhs1/tJz+DdSmZtZ6tyUQtnEcp1VQNxxqFYzCG50iISrYSpMz3VrkH
ytS/OyZakW4ZxxC7qahH1IR4NOopsyNoKmpVheRjbXFDF9YMDN6uz0nn+Xd9rj5P
AAqShZCrL9Vh9n6EtNRrUIctroqQjSmQWsNBIZFVd4EZrCHCMxz8kIL1u0qeeQ+2
Qoy8MQ0DCGKG+1y2X5nBxOgE8uZTuQilVK+T233KVZcQD4Qn6BA85G6hecxTYwZz
oWYA4T26nKUghKPJ98XGK2applUCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBT6AX/G
s5BomiTIKMs6HBsxAVnXZTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzg2NjQyOTA2
NDJEMzExRUNCNDVBRjE2RUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWevXjANBgkqhkiG9w0BAQsFAAOCAQEAZMT1yl6Qm81EkBslV9Jm
7hHubnhvJB4TOjq/kARdhgt8dKDtOc3TEcHlvjOxiZoL2zlsWrSpPDZpzj2XwAOn
XSV9JltF1JSpHWUTCdjkmgayh7MNwuU2dqs6xuhH+af56nyVLexO1PDzsMd/v7f2
0GH/0ajZp5x8AfBi9MquG2WG8HMn9Ll9wNer1R1KTv7h8bFBY8MDRbZauXg6psxn
6VFpiwNIskiWe53n8AaPDr9LiLH0WpShsu2EUPz3lF7CVjCFpj67H9nM1/xBljJd
SuRdCEAbiKAD7YZLOkS18wbrH8Gh6nkRsTwN753gP8lWKr1RYybsLCBXIyggYd+Q
YQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:57 2026 by rpki-client