
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8BD38E68F08311ED90308752C4F9AE02.roa
File: 8BD38E68F08311ED90308752C4F9AE02.roa (raw, json)
Hash identifier: ZcXZYe9an+Rpf9V+SdOcc85w0IVM+Rpj8jzd/4lhhrs=
Subject key identifier: 1B:07:21:23:81:0A:1B:A5:02:1D:4C:19:6C:0A:C9:6D:4D:5B:58:82
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D7A5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8BD38E68F08311ED90308752C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:51:23 +0000
ROA not before: Thu 08 May 2025 16:26:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151094
IP address blocks: 103.250.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55205 (0xd7a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:26:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c2eb-85b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:85:07:a7:ce:76:72:43:55:9c:bf:6e:32:49:
89:9f:f2:e2:9a:4f:02:a3:fb:32:8e:da:3b:5f:b5:
5a:3f:38:35:4a:e5:08:ae:22:b7:48:d4:4f:1e:d6:
65:06:ad:a4:3e:cf:62:68:f4:d3:33:12:0b:bd:51:
ae:27:c5:1a:e9:a9:db:65:b5:fc:6b:92:39:88:0e:
f7:df:36:6e:ec:0f:68:cf:f2:dd:9d:0b:b3:ee:d1:
39:0c:11:cd:d4:32:30:46:85:82:1a:9a:bb:f8:e7:
23:b6:0b:ff:cd:95:8a:75:b7:a1:d5:89:99:13:9f:
04:f1:fc:56:f7:15:4e:09:67:ce:68:32:6a:11:44:
d5:0a:a7:73:23:b3:3f:b4:4c:90:62:e0:9d:4a:8a:
29:1d:e7:ee:db:49:7f:81:5a:80:1c:99:ca:f1:40:
ff:58:55:90:93:f1:b3:12:f0:79:ef:8c:71:d9:14:
ea:6a:f9:66:4c:60:a9:f0:44:3f:be:a3:43:b3:ab:
4f:36:ad:64:94:c2:b9:55:81:61:57:f2:98:5e:4e:
aa:61:71:28:67:14:b8:46:49:de:41:d5:e6:23:03:
7a:1d:4c:61:c3:21:36:c9:73:c8:3d:c9:3a:3d:61:
bf:21:7e:43:6a:60:ec:4c:f0:00:d9:d9:cb:7c:fb:
8b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:07:21:23:81:0A:1B:A5:02:1D:4C:19:6C:0A:C9:6D:4D:5B:58:82
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8BD38E68F08311ED90308752C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.250.187.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:04:e5:30:b4:01:c9:91:10:52:42:cb:72:30:e4:83:1d:1f:
1b:9e:93:09:9a:ac:d7:f2:aa:b5:de:cc:e9:2b:3d:ee:01:15:
59:29:d7:15:50:4d:1b:6c:1c:08:99:53:5a:5b:32:d3:62:76:
93:f3:33:71:50:0f:6d:85:78:20:b2:8c:31:e6:5a:08:8f:ba:
50:04:94:a5:1f:a7:8e:90:de:a2:a2:c1:a9:ee:01:ef:7e:70:
4d:7a:3a:2b:64:16:ff:dc:da:5d:43:e9:8a:da:e3:3e:ea:21:
3f:aa:69:31:6a:f5:54:0e:6d:c8:a5:ad:e0:ee:6b:74:d1:6f:
64:47:5f:13:2a:00:b0:3a:14:c5:e7:33:7e:77:c8:d1:14:3c:
7f:ab:61:a6:9d:6b:2f:26:9f:40:16:21:36:5d:96:72:fd:90:
c1:f5:0c:8d:cf:73:00:af:2c:b0:3c:0b:34:0d:48:24:2d:90:
90:b6:1a:95:e6:b5:21:dd:28:68:03:f4:52:eb:05:92:08:ba:
44:fb:46:e0:a2:40:1a:17:d0:07:4c:70:75:86:81:fe:6d:dc:
ad:57:88:9c:24:5c:81:bb:61:1b:b3:94:69:98:98:e7:70:0f:
49:5b:ca:1b:8b:61:7a:19:0d:fb:be:95:e4:d8:af:8d:46:1c:
eb:59:8f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:35:04 2026 by rpki-client