
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/90749C100F8E11F0963C2B3DC4F9AE02.roa
File: 90749C100F8E11F0963C2B3DC4F9AE02.roa (raw, json)
Hash identifier: Ek85V8RX8dN35429LmDplE+qXVj4qaX5gI467LwDM8g=
Subject key identifier: F3:27:FD:59:05:AC:95:1D:09:04:27:CC:EF:E1:49:A8:52:52:1A:68
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D26C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/90749C100F8E11F0963C2B3DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:19:54 +0000
ROA not before: Thu 08 May 2025 16:01:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134301
IP address blocks: 103.88.57.0/24 maxlen: 24
103.88.58.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53868 (0xd26c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:01:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bb8a-1614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:97:86:76:3c:1e:0a:e0:08:cc:4f:f5:90:0d:
14:f7:78:27:8f:38:08:b1:3e:db:9e:d6:a6:fe:2c:
89:ec:0f:e7:55:b4:81:a6:77:13:c9:75:13:cf:e0:
ea:3d:17:19:39:86:13:57:44:6f:68:27:e9:a1:df:
43:09:76:f2:ca:14:0f:ff:98:b0:e6:2e:dd:06:e5:
f3:5b:ce:a2:03:b0:74:ed:e8:3d:ea:80:8b:c1:d6:
a8:a9:82:f5:63:f2:44:8c:ae:4b:b3:d4:52:40:e7:
44:5e:70:a8:f6:05:b5:8b:af:22:7c:81:48:d2:e7:
af:a5:9b:70:94:b0:85:42:bf:cc:1a:c8:a2:ba:51:
d3:60:4a:b0:4c:2a:fb:39:d3:a2:a1:14:bd:fd:ff:
04:87:91:55:6f:ff:c6:b7:0d:e2:e0:37:16:fe:38:
37:83:0e:99:ec:86:8a:e8:8f:80:74:04:8f:62:7d:
12:42:f0:95:73:4a:10:ae:87:b1:de:f7:5e:ba:02:
1c:d9:ac:53:0d:12:be:1f:9a:c3:8f:dd:f2:2b:2c:
6b:a2:f1:8a:a8:8c:96:08:77:f8:75:40:b7:82:08:
56:5f:05:a5:f7:ae:b3:ef:44:f2:28:90:7d:fd:97:
22:5a:37:38:86:66:85:f8:2a:39:28:7e:28:fa:ea:
f6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:27:FD:59:05:AC:95:1D:09:04:27:CC:EF:E1:49:A8:52:52:1A:68
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/90749C100F8E11F0963C2B3DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.88.57.0-103.88.59.255
Signature Algorithm: sha256WithRSAEncryption
49:15:56:47:93:dc:b4:26:43:70:13:e6:9d:7e:9f:9d:bf:00:
b3:61:2b:48:50:4d:26:8b:73:dc:83:74:ee:db:36:35:36:d4:
12:57:34:04:ef:88:ef:9c:71:52:9e:ba:14:f1:ee:74:6b:cb:
93:38:09:62:9f:dc:6b:14:c6:dd:5b:e9:f3:8a:77:58:ba:2d:
4a:db:1a:c6:fb:10:37:bc:1f:c6:95:21:d1:45:9d:49:50:18:
61:f8:af:5d:cf:ef:78:c3:15:42:72:05:a8:03:6d:8d:28:c4:
04:f2:3f:5c:dd:83:4b:8b:de:89:1c:28:fc:d4:ee:ef:8c:7c:
3d:09:f9:f7:a3:38:3b:94:40:a8:ba:10:35:8c:1d:b2:14:1d:
16:18:0b:22:bb:a7:4c:39:9f:17:36:8d:ca:49:2e:7f:d5:6b:
8c:21:03:0c:b9:24:b0:26:2c:14:90:e0:8b:b2:4c:79:75:69:
3a:5d:9a:84:2a:57:1e:59:f7:4b:64:c4:1e:9f:48:56:3a:da:
6e:ef:35:4f:79:a7:e2:1d:67:8f:0b:96:17:8a:6e:77:98:32:
0f:26:68:e7:ca:5a:03:26:0f:b0:04:8b:23:6d:81:20:42:7b:
7d:4e:0c:86:0a:e3:ec:b0:0b:08:f0:cd:22:4e:a2:a3:27:83:
2b:25:b4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:16 2026 by rpki-client