
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8EBF139233AF11EBB38B4E68C4F9AE02.roa
File: 8EBF139233AF11EBB38B4E68C4F9AE02.roa (raw, json)
Hash identifier: gOLHTvan8X7BZ8n93975OYJYpIVWf2xIqBV+EvcYVwU=
Subject key identifier: 4A:71:A0:50:1E:76:D7:DC:B3:6B:ED:0C:7E:22:5F:FA:AF:EE:9F:E3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D8D2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8EBF139233AF11EBB38B4E68C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:56:32 +0000
ROA not before: Thu 08 May 2025 16:32:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59193
IP address blocks: 103.232.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 11:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55506 (0xd8d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:32:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c41f-ed4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6f:a3:06:98:24:a1:34:63:3a:e8:6e:00:77:
97:bb:dd:a4:32:7d:c8:73:29:7c:2f:19:0d:5f:b9:
d7:46:38:c7:33:fa:ec:27:5d:85:83:97:20:57:b1:
c6:69:3b:12:d7:2f:ff:83:6f:a3:de:7a:40:05:51:
a8:ac:0d:c9:62:e0:bc:e7:41:0d:21:1a:41:ff:2c:
17:60:07:09:1b:c1:c5:12:0d:2c:65:09:9b:f3:44:
52:1a:48:d1:d4:1c:1c:5e:b9:14:da:42:d4:75:16:
ac:0d:2f:c7:19:f9:6d:e9:53:7e:c6:6e:89:f7:37:
2f:1f:46:42:f4:09:e8:84:03:a3:1d:75:4f:94:2e:
0a:7e:0c:e1:bb:71:ea:ac:20:40:40:cf:7d:09:cc:
1f:20:af:19:a0:50:b9:37:b3:0a:cb:c6:83:d5:78:
7a:b2:ac:e8:b7:27:63:77:fe:ef:e2:76:c8:df:d7:
96:5e:d1:32:59:ef:81:a4:27:02:5c:c9:03:f0:5f:
8b:c3:98:fd:c6:13:08:6e:06:3c:c3:8e:8c:4c:72:
2d:2a:9d:67:3a:43:20:a8:ff:19:8b:3e:9e:8e:18:
b4:15:a2:2a:ad:92:4d:ff:b3:24:f4:ac:15:c3:0d:
d5:c3:e4:10:4b:b8:73:51:c0:cf:cc:56:ca:72:8c:
66:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:71:A0:50:1E:76:D7:DC:B3:6B:ED:0C:7E:22:5F:FA:AF:EE:9F:E3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8EBF139233AF11EBB38B4E68C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.232.241.0/24
Signature Algorithm: sha256WithRSAEncryption
43:fd:8c:4c:4c:e5:45:f9:36:de:13:b0:e5:e8:da:7c:e4:fa:
02:6c:d1:1e:ae:97:d9:5d:5a:41:78:1e:73:b5:0b:c2:dc:2d:
82:4f:fc:80:03:4d:ae:0b:18:4e:83:88:27:e7:c5:1b:38:30:
62:56:5a:f6:ae:ea:c3:c2:d3:7a:de:ba:b0:3b:f6:9b:ab:92:
d2:9e:bd:59:a4:2f:df:68:46:47:f7:a5:c9:b7:b2:55:41:01:
2c:95:e1:46:bb:0e:ab:74:70:86:d3:b7:98:03:65:ec:96:df:
e2:94:8b:9b:a2:23:d4:a2:a9:8b:55:e8:44:dd:c3:2d:77:1c:
0e:78:33:a1:f8:1a:2c:28:6a:2f:b8:5f:20:6f:59:19:29:31:
04:9c:2c:6f:63:33:3b:47:a9:a7:c9:d7:47:a4:60:1a:29:7c:
d7:a0:6e:4f:ca:18:2c:26:e8:e9:6c:50:cc:27:c8:bb:2d:5b:
8e:f8:ca:e3:ee:85:c2:82:e8:e3:e1:d5:fb:b3:c5:ce:df:eb:
59:0e:c0:8b:50:68:76:3e:3c:45:8b:80:51:bb:91:f4:9e:f7:
ea:32:10:9e:5b:a0:c1:d8:18:a4:84:11:f3:6f:a7:62:ab:32:
b8:50:8e:93:38:91:2a:c5:0a:58:27:f7:b5:80:cd:4d:6c:26:
87:27:47:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:32:55 2026 by rpki-client