
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/999CFA46ABEF11EB8D78A223C4F9AE02.roa
File: 999CFA46ABEF11EB8D78A223C4F9AE02.roa (raw, json)
Hash identifier: +DX+wZZXRCTNrNsY14N6i/fSbQI9g92lrrooe4WtWcA=
Subject key identifier: AF:D4:75:DB:AA:BB:6C:68:42:EC:C3:F6:8C:E2:7C:D2:7E:21:71:4A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D440
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/999CFA46ABEF11EB8D78A223C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:30:42 +0000
ROA not before: Thu 08 May 2025 16:10:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137629
IP address blocks: 103.113.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 11:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54336 (0xd440)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:10:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4be12-bb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:41:0c:6d:d8:98:7e:ba:42:00:f5:c3:cf:
f9:45:d3:25:87:81:a3:a9:a0:36:09:32:2d:ce:cb:
be:e8:9b:ec:1f:ee:28:49:bd:4d:e2:45:df:05:50:
a2:d0:da:48:7a:5b:52:95:b2:5d:5b:4a:eb:12:56:
7c:6b:7b:f4:78:43:23:34:38:63:1f:26:69:a0:70:
cf:4a:ce:a5:fb:10:86:b5:41:8f:2f:7d:bf:58:1e:
b9:2f:af:3e:0a:72:d3:be:14:b2:be:00:a3:d3:11:
e1:8d:72:86:1e:4a:a5:1f:f5:83:c5:d4:64:5f:9d:
ae:4d:63:38:66:08:8f:e1:19:09:50:cd:2c:0a:7b:
8b:6b:c0:10:09:45:3b:e3:f6:50:ef:31:02:9a:a8:
c7:26:1f:9b:6b:e1:c5:dc:6e:18:b1:e3:43:1e:5b:
d1:cb:e3:e4:90:89:a0:e9:8c:c3:90:56:30:b8:77:
85:a5:12:95:19:5e:7b:9b:3a:93:09:5b:c7:9b:83:
04:6c:e3:df:e0:21:5e:ff:e7:a9:f2:69:e8:13:d0:
ac:6f:4a:88:71:bf:f2:45:4e:2e:5d:33:5a:47:a1:
f6:99:68:92:e8:99:33:a1:aa:38:7c:72:31:19:b5:
ff:22:37:24:39:f7:a1:0b:9b:f2:9b:7c:49:3c:a0:
a6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D4:75:DB:AA:BB:6C:68:42:EC:C3:F6:8C:E2:7C:D2:7E:21:71:4A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/999CFA46ABEF11EB8D78A223C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.113.228.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:5f:53:8d:bd:60:3a:ce:6a:b9:ec:4c:2a:b0:d5:7b:9c:be:
11:eb:4f:79:50:c4:99:74:19:84:fb:56:42:a5:3c:90:2f:18:
e1:5a:07:ef:90:68:24:08:5c:58:d1:02:56:96:de:f0:9c:d4:
30:99:b1:39:b9:8c:d1:8c:80:a6:c1:70:ef:db:45:f2:59:d4:
6b:06:9f:6e:26:c6:9c:50:9e:1f:43:77:a5:c8:3a:79:1f:85:
99:f7:30:23:d2:d2:bd:1e:cc:f3:c0:90:93:1f:8c:39:83:81:
95:e8:41:c6:c4:8a:38:77:35:56:3c:de:ef:e5:da:70:c0:b2:
82:98:dd:96:9f:2e:3e:22:75:11:18:f2:be:78:a5:fb:8d:b2:
a0:92:ad:42:b7:6d:db:f5:8f:27:4d:30:fa:85:b5:88:61:00:
1c:dc:7c:b4:fc:af:90:e6:c1:9f:54:42:4b:f0:5e:7b:19:9e:
2d:1d:b2:b0:aa:68:fc:81:6a:35:29:d3:d6:9b:98:c0:92:da:
b3:3f:9c:66:95:f3:45:53:00:d2:cc:cd:32:bf:29:aa:27:6f:
df:dc:03:56:ba:6e:79:ff:fb:a9:e9:d3:9c:8d:4d:78:2f:94:
38:a5:3d:65:5d:a0:08:3c:66:8e:ad:82:39:81:64:9b:22:86:
65:fc:92:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:48:14 2026 by rpki-client