
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/935479A8F28011EAB3BD1D6BC4F9AE02.roa
File: 935479A8F28011EAB3BD1D6BC4F9AE02.roa (raw, json)
Hash identifier: 68xXEA+kCwC5XhAf4uQ/oGZi0g13I1cnmflVYkcvOWA=
Subject key identifier: C5:D2:28:30:11:52:42:14:98:67:AC:1B:41:36:3B:CA:CD:D9:D0:3B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D528
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/935479A8F28011EAB3BD1D6BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:36:21 +0000
ROA not before: Thu 08 May 2025 16:14:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140181
IP address blocks: 103.155.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 11:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54568 (0xd528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:14:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bf64-18e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c7:25:aa:e9:65:f0:94:79:3c:c9:33:23:dd:
91:08:d9:0c:e2:18:55:87:a0:53:31:bb:85:f8:37:
59:c0:72:bb:61:a1:9d:ad:4e:56:cf:4a:91:c7:cf:
eb:e1:d1:ea:ce:d6:0d:15:df:79:1d:bb:14:e0:b5:
da:2a:a0:58:9e:98:54:59:1c:ed:ae:0e:8a:14:32:
cc:98:e6:0e:bb:ef:0f:7a:d2:22:f0:4f:7c:5f:89:
38:93:c6:9d:5c:69:20:e9:ea:2d:f4:fc:5d:ad:bf:
59:a0:32:14:15:34:fc:a2:1a:d3:18:e4:da:2d:9a:
0d:e8:62:14:78:ba:c3:10:49:2b:ab:d7:1a:40:0c:
bc:4a:83:0f:9b:71:d5:d5:d7:48:51:d1:7c:fa:73:
ab:22:b7:f4:8d:8c:e6:98:e2:56:3e:54:72:6a:ca:
48:3f:f9:84:a7:ed:2a:72:90:46:3c:ae:39:2c:31:
0d:3f:ff:79:a9:20:e3:1c:1a:a1:fe:65:bb:74:8e:
99:16:59:c9:6e:5d:9b:7f:bc:bb:19:07:c9:7f:69:
21:38:7a:7a:3a:7b:56:6c:22:58:a9:46:8c:27:61:
3e:7f:39:94:87:f9:e2:a7:18:43:ab:3b:87:fa:5e:
48:cd:28:13:8c:e2:18:45:30:7d:c5:3e:03:23:cb:
b4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D2:28:30:11:52:42:14:98:67:AC:1B:41:36:3B:CA:CD:D9:D0:3B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/935479A8F28011EAB3BD1D6BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.155.128.0/23
Signature Algorithm: sha256WithRSAEncryption
74:81:56:e1:91:93:e0:c8:aa:09:f5:ac:86:dd:25:bc:27:5f:
a9:31:0f:8d:b4:b3:01:ba:4d:c0:92:82:84:31:c8:a5:32:da:
57:8e:d9:5b:a9:0d:e7:ea:fa:3d:d8:2c:7f:a4:92:b7:e6:02:
88:93:26:d7:28:89:b4:87:a5:22:5e:6e:67:ad:16:2b:8d:3e:
93:58:a6:4b:76:39:ca:18:01:ab:0f:80:3a:2b:ec:7e:3e:58:
fc:cc:94:77:08:18:2b:6a:81:fa:70:42:0d:44:09:0f:c8:43:
80:3f:ec:90:99:32:a2:83:82:ff:05:a5:a8:f2:ca:f1:60:17:
49:6c:8c:85:8e:fa:56:d8:83:b1:0d:e8:3e:1b:86:54:d8:dc:
77:35:a4:62:1e:98:56:47:14:58:fb:a6:20:72:de:74:de:8f:
8f:b8:de:64:1f:bb:c3:ad:48:56:1e:e0:90:f5:a9:98:dd:57:
99:a2:de:a0:cc:c9:f1:29:0d:c7:9a:af:eb:07:78:59:25:80:
43:02:76:c8:21:eb:0d:09:ae:a6:65:00:5b:47:81:79:fd:b2:
08:75:d4:47:f6:de:7c:d9:54:4e:b4:6b:5f:f9:f9:83:b2:f0:
2d:93:cf:41:39:2d:29:06:06:7a:29:2c:9f:a0:5d:ad:51:9f:
95:c8:a0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:52:55 2026 by rpki-client