
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9D48D01E0DD211EFAB224072C4F9AE02.roa
File: 9D48D01E0DD211EFAB224072C4F9AE02.roa (raw, json)
Hash identifier: lJWWgWeAHj8O52A71waNA0UeZgvrn3IMdUOLdyTVKRo=
Subject key identifier: D2:83:E4:36:A3:7C:8D:57:F3:35:EE:36:BB:42:96:28:09:33:C3:7C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D29D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9D48D01E0DD211EFAB224072C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:21:04 +0000
ROA not before: Thu 08 May 2025 16:02:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134878
IP address blocks: 103.204.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53917 (0xd29d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:02:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bbd0-09f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a6:6b:bd:b6:a5:27:56:4c:50:84:e9:83:22:
79:71:54:b6:76:b3:8e:6e:5c:2d:8a:96:7a:ed:c2:
a3:54:03:19:6e:0c:f7:46:7b:66:98:3e:db:69:f6:
82:18:a7:99:32:9b:b2:12:a7:2b:78:50:41:20:61:
bc:3d:87:1b:b1:bb:ac:71:6c:33:48:4a:a3:ef:e1:
71:17:bf:43:96:7c:79:59:a9:e6:cc:61:02:ff:cf:
7d:20:5f:d4:b2:18:a2:9c:8f:a4:6c:7b:71:73:29:
57:de:69:8d:9a:e9:43:4c:d0:89:6f:34:ca:6b:b7:
1c:fd:39:61:e9:8b:95:a3:7c:5c:9d:f0:3a:b4:fe:
eb:b2:2e:31:2c:23:73:6f:5e:80:84:96:b5:8f:d4:
08:35:ef:2d:66:0a:80:b6:c1:17:ca:57:c1:cd:3b:
2e:30:a0:64:06:28:3b:12:af:43:6d:3d:97:b2:f2:
7e:7a:dc:d1:cf:51:f3:b6:a8:3a:53:60:6b:c5:64:
b3:ac:76:ef:f4:cf:f5:19:de:d8:bd:a6:c7:8c:a3:
9f:cf:a4:8f:ee:2e:89:d8:df:35:dc:89:fd:e6:0a:
16:dc:b3:48:a9:07:84:8d:6b:05:5d:45:e3:c0:e9:
a9:a5:e6:00:4b:fe:6a:92:bf:63:e3:2f:a4:32:c6:
af:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:83:E4:36:A3:7C:8D:57:F3:35:EE:36:BB:42:96:28:09:33:C3:7C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9D48D01E0DD211EFAB224072C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.204.156.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:f0:6d:79:d4:08:3a:13:52:a1:c8:39:66:4a:42:12:e7:a4:
a5:1d:38:2d:80:3d:9b:4b:67:c5:0e:be:1e:18:1e:fc:a9:d1:
7a:58:9c:1b:21:1a:80:29:c0:ce:d2:d9:5b:f7:b7:d0:e9:b3:
00:b0:30:35:4b:6d:31:99:93:7b:9b:ea:6d:61:f4:e7:5d:90:
71:a9:1a:bb:75:67:3f:ca:2c:56:79:fa:93:6f:35:69:4e:d2:
b8:4d:b3:9e:ad:17:08:00:bb:3d:98:d8:a0:4b:c9:05:55:ab:
56:27:ef:7d:e6:8d:c6:e6:87:39:6d:5e:4a:97:6e:fa:2c:61:
3a:fb:8b:e0:82:a1:99:29:7b:8a:6b:86:59:29:ec:f2:49:65:
a1:f9:e8:18:a1:a3:cb:95:56:65:9d:93:ba:04:ff:29:eb:e4:
38:79:63:be:d8:6c:37:38:66:c4:57:63:d0:3d:53:e5:e6:4c:
ff:ee:e5:54:48:3e:1b:05:b3:41:6c:cb:bc:05:58:28:2e:69:
3a:ce:f0:9b:9b:b9:ed:d1:d0:6c:c2:4e:d6:19:e9:4c:e1:6c:
cf:b3:54:2b:72:63:cf:0a:c4:00:15:7a:22:41:69:d7:a0:2b:
24:53:ef:45:36:f3:d5:27:a7:27:1d:e2:18:6c:5b:63:a8:e6:
22:4f:76:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:52 2026 by rpki-client