
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99170A903E2511EBB1B0E431C4F9AE02.roa
File: 99170A903E2511EBB1B0E431C4F9AE02.roa (raw, json)
Hash identifier: ispK8+ii3UjddYJzdBlxFHQuDeJDfgTvhlMKZfyPMAs=
Subject key identifier: E9:02:DD:C8:25:2D:A2:01:53:65:1F:F3:E3:CF:32:8D:65:C7:50:7E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D556
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99170A903E2511EBB1B0E431C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:37:24 +0000
ROA not before: Thu 08 May 2025 16:15:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141295
IP address blocks: 103.160.49.0/24 maxlen: 24
2001:df5:9880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54614 (0xd556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:15:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bfa4-6e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8d:6c:90:a6:a5:4b:82:28:bb:4d:8d:1c:fa:
29:50:88:c1:80:c0:87:f2:83:a9:b6:bb:8e:de:87:
68:f0:30:87:84:16:15:34:6f:44:2e:4f:42:72:73:
34:85:85:d1:0c:23:82:8e:0c:20:57:a3:6c:11:be:
34:7f:31:28:0e:7a:72:52:74:d2:19:d0:ec:77:86:
06:ca:f7:63:0d:1d:72:1c:66:6a:4e:64:fc:2e:fb:
30:ee:bd:5b:e3:ca:9d:a8:e3:dc:68:29:a2:78:7b:
94:70:63:31:14:4b:4e:3a:c7:06:2b:a6:1f:a2:75:
17:b0:b6:bf:37:19:5a:12:14:c1:25:35:ff:79:1b:
a0:b9:e7:f3:3a:14:25:a5:e2:b6:5c:04:63:da:13:
4a:cf:19:9f:0a:f3:9b:d5:b4:69:28:1a:5d:f4:3e:
c8:34:1e:2c:31:9f:79:fd:df:e2:31:64:3d:c9:7a:
bc:cb:68:02:e1:a5:cf:5d:b6:f9:fd:82:16:3e:8e:
ec:6c:28:76:ec:78:2f:08:3a:5e:7a:fb:58:7f:c2:
0e:d4:c3:09:0b:1a:22:60:fe:40:a3:b4:12:f3:ec:
ba:35:3d:46:fd:cc:e2:96:88:1b:ab:a7:cc:aa:0a:
14:45:d4:b2:c4:90:3b:82:73:27:1e:59:f5:37:55:
c3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:02:DD:C8:25:2D:A2:01:53:65:1F:F3:E3:CF:32:8D:65:C7:50:7E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99170A903E2511EBB1B0E431C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.160.49.0/24
IPv6:
2001:df5:9880::/48
Signature Algorithm: sha256WithRSAEncryption
a1:95:21:35:e7:c9:cc:f7:dc:be:f1:a6:97:c5:d8:66:89:d2:
9f:75:50:40:1d:ed:03:0a:50:64:08:9d:3f:fd:ae:c3:4c:9e:
ce:30:f0:d9:64:ec:e3:17:96:ae:36:e5:0a:b0:b7:b8:de:83:
fa:45:6e:10:1d:ec:a9:d2:3d:83:b3:42:73:e6:e3:2b:51:d1:
76:46:8e:c3:1b:1b:42:b2:a1:e9:47:d7:f0:c3:ea:4f:85:c5:
05:21:07:10:58:f6:b7:3e:7f:77:c6:30:b9:c2:0e:ac:53:8d:
95:5b:fe:67:f1:5f:58:b1:bb:58:23:4b:d4:fb:d7:07:75:4f:
d1:a4:f5:6d:af:7e:91:f4:65:e4:b1:75:ae:84:a1:71:6d:6a:
24:63:d2:66:89:60:1f:eb:38:d6:f7:cb:cb:9a:49:d5:d2:78:
9e:a1:f7:45:d7:d1:2d:eb:5f:54:57:d5:3f:97:65:3e:12:2a:
e2:af:ac:cc:3a:98:00:a4:a8:6e:73:31:7b:c7:1c:39:25:d3:
ee:41:42:17:a5:d6:75:0c:4c:99:62:92:f8:52:6d:04:d9:94:
74:8d:e4:ae:17:fb:33:b7:2d:7f:ca:b6:ff:f1:00:44:96:00:
62:fd:d9:bf:e8:bb:4b:82:89:1e:08:c6:64:fd:19:75:a1:a1:
1d:01:ef:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:19:34 2026 by rpki-client