
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/894F35C2C33111ED96BA8D3DC4F9AE02.roa
File: 894F35C2C33111ED96BA8D3DC4F9AE02.roa (raw, json)
Hash identifier: coy0d/lsebccKCb1m6Pj55D2y5R4VSscVMQHBJQn6nI=
Subject key identifier: 75:77:01:26:86:0C:BA:A3:D5:71:FC:3F:B5:CC:DE:67:3C:60:F3:45
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D711
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/894F35C2C33111ED96BA8D3DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:47:56 +0000
ROA not before: Thu 08 May 2025 16:23:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149610
IP address blocks: 103.181.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55057 (0xd711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:23:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c21c-eeba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:c4:49:68:7f:04:41:70:76:d5:c4:2c:61:
1e:87:3c:c7:5a:85:1f:30:1d:d3:ff:b8:61:d7:b7:
54:5d:52:81:3d:83:1d:c3:9f:1d:74:68:0f:a3:11:
04:7e:4f:db:7f:de:4d:1a:3b:5d:af:17:3f:af:fb:
ee:2d:c5:3c:8d:72:58:bf:73:c4:38:19:0b:af:95:
9c:cf:d4:57:38:d9:9c:f9:1e:bc:5e:32:98:22:bb:
7f:f0:8f:30:db:51:55:b0:b4:2e:ec:0d:9d:70:f4:
e7:96:13:2d:23:17:ba:28:58:0f:0b:f6:ec:fa:36:
a8:8e:4e:dc:c8:4b:a7:a9:65:51:8d:74:01:6f:c5:
33:d9:35:31:d3:a6:9e:b1:f5:5e:a0:ab:21:a4:96:
1f:f9:64:50:b3:d6:74:9d:c7:50:aa:c2:39:d7:9b:
25:93:a8:a2:54:73:86:67:8a:55:c3:83:ef:44:71:
7c:c1:0d:0c:e9:f5:b9:cc:5e:55:7c:26:00:7d:bd:
2f:df:df:3b:ea:8a:fb:38:d1:7c:fa:9a:ad:e8:22:
31:7a:3c:67:16:05:86:e7:53:f3:be:7d:e2:47:57:
5a:fe:97:f5:b5:c2:d8:4b:53:21:90:7a:ee:ee:17:
3d:29:82:35:70:3b:9c:75:2b:a8:e0:71:56:c5:f8:
48:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:77:01:26:86:0C:BA:A3:D5:71:FC:3F:B5:CC:DE:67:3C:60:F3:45
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/894F35C2C33111ED96BA8D3DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.181.60.0/23
Signature Algorithm: sha256WithRSAEncryption
37:78:fd:51:33:fd:b7:d2:41:5f:1c:95:1e:21:d9:2f:b2:30:
bf:2a:79:45:7b:99:9d:92:25:97:8a:25:2b:03:7d:f2:02:53:
fd:58:35:09:e7:a9:0d:a4:e7:1e:38:c5:01:57:05:8e:2f:92:
22:15:2f:2d:ce:9f:f4:23:d6:40:0c:08:f1:7f:0f:80:71:48:
5c:e1:02:99:02:c9:c6:70:5c:e1:a3:d7:0a:72:b1:60:74:a0:
34:49:02:3d:5a:03:3e:0b:8a:97:21:a8:d9:91:0d:64:35:92:
ee:14:70:03:cb:d7:8d:57:a0:9d:9c:d8:58:75:ab:64:9d:9e:
f6:ea:2c:7e:74:fb:2c:47:44:b7:d6:a9:00:7c:2f:9e:ec:0e:
73:61:b6:b2:7a:23:89:fa:d4:04:1a:ff:81:b9:8c:a7:bd:1e:
45:eb:d9:e4:5c:af:a1:5c:31:95:11:81:85:d6:fa:b4:78:59:
9b:70:8c:83:27:73:7f:22:2a:0f:6b:2e:33:42:ec:08:36:73:
83:06:de:ea:12:92:0b:96:36:b9:7e:77:03:28:ed:1a:02:2b:
e4:9c:fa:5f:c1:4a:70:c9:91:5a:d2:f4:11:c7:f6:a7:9d:ca:
db:b1:4a:99:f0:65:ec:9f:67:e8:ab:48:8e:2a:a2:ca:bd:73:
93:13:a8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:25 2026 by rpki-client