
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8AEF1BFAD23411EE9491D67AC4F9AE02.roa
File: 8AEF1BFAD23411EE9491D67AC4F9AE02.roa (raw, json)
Hash identifier: OZnZt4qLoMPyuJ1LTZT5U1AvUG6NBeg+n0fI72q2ME0=
Subject key identifier: 26:B7:2E:38:84:FA:91:7C:2F:95:54:8F:9E:12:7F:9B:55:1B:CB:A4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DA6B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8AEF1BFAD23411EE9491D67AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 23:03:56 +0000
ROA not before: Tue 18 Nov 2025 08:23:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 147223
IP address blocks: 103.174.248.0/23 maxlen: 24
2402:2be0::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55915 (0xda6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 18 08:23:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c5dc-8fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:13:9d:83:5a:d8:ab:96:9b:20:6d:32:52:e8:
83:9d:d3:05:d7:06:26:42:bc:84:d6:a6:2c:b4:01:
10:ae:9c:15:24:c2:ec:33:84:6f:16:49:7f:6b:f3:
c6:9a:d2:57:5b:6d:bb:e8:7b:2a:17:c1:94:e7:13:
35:9b:b6:72:fa:f8:01:19:70:a5:07:63:74:9d:a0:
f4:3d:d5:e0:e3:a0:0a:23:6f:0a:e1:05:93:e0:ee:
43:99:1b:6f:8b:af:ec:4d:3f:bd:99:8c:22:69:62:
d3:9d:f4:7b:ac:e4:b0:c3:3e:c6:c9:d9:98:ea:8f:
a0:a1:3c:66:00:90:7d:43:be:e7:5a:3b:bf:2f:e2:
1c:91:f4:fb:de:de:09:eb:f7:44:a0:47:d2:c8:48:
aa:42:aa:ec:fa:84:a8:3f:83:57:fe:0d:1f:9c:70:
b2:44:62:01:97:f7:de:e1:c7:85:46:94:59:8e:63:
99:22:e1:b2:8b:9e:20:c2:01:51:e9:cb:0c:a8:e2:
59:bb:03:23:c3:4e:b1:46:f5:29:0c:4b:77:e8:a7:
7e:bf:59:8e:90:c1:83:77:de:6b:35:20:65:79:e2:
54:d1:e8:55:77:09:53:f7:07:e5:c0:aa:d3:01:0e:
be:bd:8b:5d:68:95:e3:17:29:81:fa:c6:f4:94:1d:
b3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B7:2E:38:84:FA:91:7C:2F:95:54:8F:9E:12:7F:9B:55:1B:CB:A4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8AEF1BFAD23411EE9491D67AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.174.248.0/23
IPv6:
2402:2be0::/32
Signature Algorithm: sha256WithRSAEncryption
4b:b8:69:af:74:28:ec:60:7b:f1:fa:c1:55:74:91:88:72:6f:
85:ed:b3:13:8b:bd:98:66:6f:21:83:cd:22:23:75:b1:ed:00:
49:37:1a:ad:10:07:6b:a9:b6:07:f8:f7:98:b8:a7:46:84:62:
54:3e:a5:4d:40:e8:20:62:a4:43:94:c6:48:02:11:95:a6:2d:
37:ce:ef:50:95:47:5b:7b:01:fd:13:dc:6e:25:d6:de:e8:89:
3f:54:1e:8f:65:f3:b0:90:e1:c8:8b:09:13:a4:92:76:23:39:
ee:ed:c6:45:09:b0:fc:10:40:07:9c:85:87:04:87:88:b1:5b:
eb:38:2f:ef:11:dc:57:40:0b:49:c9:13:e2:b0:c4:b9:e9:5f:
a7:ee:b7:48:35:d0:d4:dd:99:9f:ee:f9:08:ed:94:ac:17:32:
af:89:a5:62:df:e7:c9:d2:29:32:d5:18:be:93:99:da:e3:c0:
28:9b:f5:1f:92:3c:a1:e3:72:dd:d1:16:84:cc:2d:46:1a:90:
a2:6a:f9:7e:94:88:f5:c8:d8:bf:7e:b6:2a:b1:c6:49:33:d1:
04:40:7d:c7:6a:da:01:a6:e9:0e:dc:d3:44:ba:8c:47:18:cc:
b1:95:9d:5b:10:7e:b4:b1:69:90:0a:48:b4:ef:e4:3d:c2:10:
61:46:6f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:53 2026 by rpki-client