
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/983A2AA20F3011EDA9D57685C4F9AE02.roa
File: 983A2AA20F3011EDA9D57685C4F9AE02.roa (raw, json)
Hash identifier: f3Vnk8NTafbOpMDGRdnUHWIZ/z871QVt9cpOO5kC9pM=
Subject key identifier: 6C:76:39:7B:7B:00:EF:BD:1C:95:56:C9:98:50:11:9F:0A:4A:96:F8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D737
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/983A2AA20F3011EDA9D57685C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:48:51 +0000
ROA not before: Thu 08 May 2025 16:24:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150050
IP address blocks: 103.191.40.0/23 maxlen: 24
2400:94a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55095 (0xd737)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:24:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c252-ec00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:16:5e:47:6d:0a:f5:24:64:d4:c9:5d:8f:17:
cc:b5:e9:fb:1c:3e:e1:42:75:f1:2c:fe:7d:97:bf:
8e:3f:ec:0f:b0:99:aa:c0:a3:1b:15:88:04:01:8a:
7a:ff:cd:bb:22:b5:ef:c4:7f:de:e0:57:5a:ba:34:
9b:24:32:fc:b8:54:95:b5:f5:d1:b1:a2:0e:06:c7:
c1:0a:99:1b:55:44:fc:17:a5:c4:b7:67:22:cb:2a:
5e:8f:cc:f4:ff:5b:5c:4a:ff:74:e2:6b:67:f6:8a:
9e:82:81:90:24:01:01:93:07:bc:1f:13:08:db:cc:
99:9c:05:9c:d7:cb:b5:ca:4c:d5:53:05:c9:83:50:
a8:46:30:91:9d:22:c7:90:bb:ed:d1:df:b8:f5:50:
0c:15:15:52:9e:36:e1:e4:c6:83:03:fb:15:52:06:
26:2d:a0:d4:d6:53:dd:8f:f3:0c:e7:b0:9e:f8:53:
ab:17:40:a4:dc:50:73:9a:44:55:cd:a0:68:29:49:
14:8b:54:91:a1:22:58:7a:ff:b9:a5:32:87:dc:21:
03:1c:6e:eb:27:59:ee:a0:db:f4:7d:a8:24:de:b4:
43:60:c7:3a:e7:a9:da:5c:be:70:90:47:60:df:ca:
04:04:90:ff:ac:d1:2f:d9:8b:ab:61:29:ba:33:de:
05:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:76:39:7B:7B:00:EF:BD:1C:95:56:C9:98:50:11:9F:0A:4A:96:F8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/983A2AA20F3011EDA9D57685C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.191.40.0/23
IPv6:
2400:94a0::/32
Signature Algorithm: sha256WithRSAEncryption
b5:c4:f8:fb:ad:cb:73:4b:f2:f8:26:d6:c6:65:66:b5:b6:59:
b7:a4:b9:25:2e:51:02:18:04:aa:ac:d4:e2:9f:88:63:e9:08:
2a:d6:b7:0c:b7:8c:37:d1:c6:dc:9e:70:5f:f1:6e:f5:85:42:
2c:d1:a7:4a:1a:31:7e:b5:74:7e:80:b5:8c:04:c8:55:fd:d6:
d4:13:45:7b:16:6b:20:43:ef:9e:39:95:57:1e:16:3f:98:38:
0d:cd:f0:25:95:84:60:62:64:e2:2a:9c:ef:e3:2a:b3:cf:90:
af:9b:1c:6c:3f:09:16:1a:40:a5:12:ac:6b:aa:41:60:b8:61:
00:cd:b1:5d:ef:8e:f0:2e:df:69:7a:11:99:7d:31:83:69:19:
75:36:92:44:98:dc:d9:29:01:19:5a:ff:61:1a:fe:64:d3:1e:
1a:b0:a9:a8:56:38:7d:6f:9b:6f:02:6a:a0:9a:16:ec:57:cd:
72:11:b1:3d:64:d2:9c:86:ab:ac:32:ca:18:41:1a:85:fa:f6:
ea:c8:d9:fb:3e:f1:4d:2c:7a:8b:93:44:af:78:55:c5:ee:25:
c6:6b:08:0f:f3:41:a5:94:54:ca:e2:4a:66:a8:03:fa:a1:ad:
86:c1:08:07:b3:6c:f6:75:15:6b:87:24:c8:06:44:d4:e1:d2:
d0:c5:06:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:52 2026 by rpki-client