
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9EFEB8CA36D911F0B615063EC4F9AE02.roa
File: 9EFEB8CA36D911F0B615063EC4F9AE02.roa (raw, json)
Hash identifier: l0TZMdxVhB6mAcLa4cBLkoSt4iH/UU4v6s7RlhorvQA=
Subject key identifier: 2F:50:12:57:A7:B4:32:A8:18:D9:96:C2:D7:07:5B:29:7F:83:CE:CD
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D918
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9EFEB8CA36D911F0B615063EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:57:44 +0000
ROA not before: Mon 02 Jun 2025 06:47:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135699
IP address blocks: 103.71.52.0/22 maxlen: 24
103.74.68.0/22 maxlen: 24
103.140.185.0/24 maxlen: 24
103.181.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55576 (0xd918)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 2 06:47:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c468-6e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:64:f5:6e:8a:5e:82:13:5c:e3:3e:0e:82:45:
55:de:1c:19:30:05:f8:cc:90:89:f4:f5:89:1d:1f:
7b:fb:51:c2:d5:72:f3:d2:d9:89:7f:1f:a7:26:fd:
80:20:cf:f2:d7:19:50:7c:bd:22:58:c7:cc:a9:e9:
b7:fd:cf:f7:70:3e:d1:30:a8:da:6c:e3:74:4e:63:
30:a3:44:a0:ec:23:d8:10:d9:4e:9c:02:a2:f9:67:
08:61:00:a4:63:09:02:81:45:2b:4e:92:a6:b7:9a:
52:eb:9b:d2:6a:64:65:b0:47:b6:4a:ed:2a:f6:24:
71:48:c7:9e:22:d2:39:14:32:6e:f6:ff:10:6c:2f:
c7:f3:16:0b:79:d1:0c:16:18:89:23:b1:fc:81:60:
fc:a3:eb:09:39:53:84:99:61:b3:18:3a:ea:4c:29:
dc:d0:ab:b1:44:f2:d4:d1:02:5f:76:dc:db:51:99:
02:b6:f2:39:7c:0b:0e:90:cb:6d:fd:7d:cc:e0:91:
9c:3b:f3:98:8e:99:a3:af:f3:e7:ab:2a:90:d2:da:
94:13:7f:cc:dd:69:c6:0d:f8:8f:83:0e:47:4e:2a:
b6:61:6b:39:fd:6d:83:d0:af:c9:61:95:0b:7a:86:
6a:64:ce:d8:3d:79:45:26:19:7a:6f:be:03:b0:bd:
da:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:50:12:57:A7:B4:32:A8:18:D9:96:C2:D7:07:5B:29:7F:83:CE:CD
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9EFEB8CA36D911F0B615063EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.71.52.0/22
103.74.68.0/22
103.140.185.0/24
103.181.144.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:df:77:3a:ac:09:3b:38:7e:34:7c:52:e0:9e:d4:18:83:f6:
fc:a2:9e:4b:c7:51:32:12:a5:1c:1d:94:28:33:9d:a8:32:10:
1c:d9:8d:15:44:6a:fb:11:da:59:df:85:63:9b:83:0f:00:49:
d8:b0:0d:30:18:0a:0e:f2:bf:8b:b0:58:be:9a:5a:3f:05:d8:
2e:c3:d5:9b:12:2b:99:c0:e7:35:62:56:05:dd:e5:5d:72:84:
91:35:5b:66:26:78:fa:7f:e9:54:62:fa:8f:27:f0:d6:2e:41:
71:4f:72:66:73:d5:fe:a7:0b:b7:36:5f:d6:b9:7f:ab:2e:82:
20:a4:c6:1b:aa:8c:84:6e:61:a3:a2:8e:1f:46:99:ce:7c:0f:
c5:9a:c9:94:bd:97:14:8b:15:ae:b8:25:05:75:c9:98:ab:da:
37:d8:c2:81:9c:ab:ee:62:0b:8f:94:8d:20:ce:3a:b8:71:29:
f5:8d:97:bf:61:b1:26:54:31:0e:76:bf:96:07:e8:c3:3f:95:
b9:39:7e:63:0c:b9:ee:da:82:7f:ec:e5:31:13:78:47:78:99:
3d:df:03:e6:68:ff:cf:e6:f0:5b:91:83:5b:f2:9d:c0:62:89:
98:23:cf:e3:e7:f9:5f:72:2d:75:0a:ed:94:e1:66:6e:ee:f2:
23:bd:7a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:41 2026 by rpki-client