
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87B1EF22734F11F0A458FF49C4F9AE02.roa
File: 87B1EF22734F11F0A458FF49C4F9AE02.roa (raw, json)
Hash identifier: wCaqGH8tTmh930ImA8eh6rs0vVQ8lvr5Q8oDiYlh8+E=
Subject key identifier: 8F:AB:BB:2B:39:AF:BC:BC:78:72:9A:83:1C:48:50:2F:5D:A6:86:20
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D9AC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87B1EF22734F11F0A458FF49C4F9AE02.roa
Signing time: Sun 01 Mar 2026 23:00:22 +0000
ROA not before: Thu 07 Aug 2025 05:29:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151763
IP address blocks: 103.158.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55724 (0xd9ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 7 05:29:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c506-2c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c3:65:c3:dd:e1:ba:d8:ed:56:71:eb:04:15:
54:a4:6c:7d:16:29:54:c3:e2:1a:1b:56:0b:b9:81:
18:56:12:31:4e:e6:ed:0b:e8:64:9c:cc:ec:96:7a:
10:07:0c:2f:9d:a0:c7:2a:2a:f9:49:2a:05:5f:1b:
6a:fe:1e:cc:be:27:7c:24:a5:55:31:19:ed:88:21:
77:91:9c:a0:56:81:75:22:0e:f9:e8:4a:c7:97:c4:
d4:8b:74:33:76:81:75:29:18:67:2a:96:ab:60:55:
6f:77:31:03:7c:b6:dd:55:e1:23:52:7d:05:4f:64:
ec:c5:89:88:ca:6d:b1:67:79:39:f0:32:0d:2c:13:
39:a4:5d:42:25:e1:40:84:43:dd:2d:b3:da:2f:fa:
ae:30:09:c6:fd:2a:09:34:3d:41:93:e0:de:6d:92:
cf:15:5e:3f:96:27:8c:ec:93:30:c0:79:51:de:5f:
f1:71:b2:e7:c6:97:e5:18:2b:54:66:ca:d6:c2:56:
cc:68:b1:c8:e5:70:ad:da:19:37:d3:a7:e7:09:2c:
3b:30:ab:1e:0e:65:26:a0:00:7d:6b:34:d9:a5:4b:
34:d7:1e:56:f9:11:30:a4:87:8e:29:21:9c:12:71:
82:5f:5c:bf:ee:b9:c7:78:dc:91:0f:1e:70:42:bc:
00:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AB:BB:2B:39:AF:BC:BC:78:72:9A:83:1C:48:50:2F:5D:A6:86:20
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87B1EF22734F11F0A458FF49C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.158.185.0/24
Signature Algorithm: sha256WithRSAEncryption
50:36:ab:f8:bd:fc:f1:de:53:e3:43:71:a8:dc:32:c3:9a:7c:
b9:9c:ea:b5:5d:04:bd:f6:91:2d:9e:8d:91:23:22:7b:84:a9:
e3:ff:3b:25:f5:ed:82:fe:8a:4f:ac:c6:40:aa:82:3d:e7:18:
d3:03:59:08:0f:77:85:7e:be:17:97:44:2f:dc:1f:49:cd:1f:
d8:ea:d8:49:30:b0:34:31:30:7e:27:a8:f1:d1:98:e8:a8:dc:
52:ad:f5:d9:bd:45:58:f6:4f:54:db:0a:37:c8:1f:1f:53:9b:
8c:53:a4:35:fa:42:5d:50:31:77:e0:bc:df:92:f9:e7:36:0e:
8e:2e:06:bf:d5:6b:51:71:07:d3:1d:ac:fc:e6:af:74:01:6f:
04:5b:6a:3f:81:9b:c7:47:65:b9:44:ab:74:a9:a7:7f:ab:fb:
77:66:b8:59:6b:1b:d7:9f:29:43:dc:0a:a6:68:d8:ca:48:62:
07:75:3b:1f:da:db:b1:79:58:0e:a2:de:d0:dd:97:ef:52:b4:
47:34:e4:73:49:a2:da:05:6d:2b:78:c1:7d:5e:1f:bb:82:4e:
66:a6:36:1a:ac:11:99:11:7f:bd:b4:a2:28:6f:8c:fd:a3:55:
c5:f7:a7:32:9b:60:0d:b8:82:08:5a:a5:5a:db:e4:49:66:0f:
a9:2e:22:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:44 2026 by rpki-client