
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F58F84A6B9E11EB87785D16C4F9AE02.roa
File: 9F58F84A6B9E11EB87785D16C4F9AE02.roa (raw, json)
Hash identifier: UDjY006aKS94btdJFw2W2oCoI4H/cHoM3PDtkRABeo0=
Subject key identifier: CF:79:32:3C:FE:05:96:BB:7A:46:85:A5:34:7A:77:49:35:BD:06:24
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D2CC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F58F84A6B9E11EB87785D16C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:22:12 +0000
ROA not before: Thu 08 May 2025 16:03:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135179
IP address blocks: 103.119.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53964 (0xd2cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:03:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bc13-b3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:79:88:05:fb:c0:25:02:c0:11:a5:aa:01:67:
c0:22:88:18:ec:d2:ca:82:e2:83:6a:68:8d:da:e0:
a0:eb:8a:a5:90:ba:3f:24:08:5a:1e:7e:ff:3d:05:
61:73:46:bb:2c:12:33:e5:46:9c:82:73:fc:1f:c0:
13:f7:6f:c4:9c:b8:80:20:26:a6:8e:d2:6c:0a:2d:
6b:71:a6:c3:46:0c:19:f4:70:c7:de:81:d4:d0:66:
90:37:4f:8a:4f:0a:40:8d:4f:60:ed:0f:87:7f:e6:
a5:3d:70:60:39:2b:cb:54:0b:d3:a3:bd:7f:1d:30:
bb:6d:62:d7:66:ca:b0:f8:7f:10:4d:af:29:1f:59:
32:3d:6e:85:48:1c:5f:23:77:14:89:db:1d:57:d0:
ad:e1:6d:c0:8d:16:59:c3:c4:e1:70:34:89:4f:e6:
0e:f5:d6:06:4a:7b:60:4a:f2:1f:07:58:af:a4:c9:
96:21:80:7d:12:e0:2b:d1:e6:a6:0b:3a:5a:dc:4d:
d1:87:b9:67:21:2a:19:94:e2:58:8c:27:d2:38:31:
b7:f6:65:87:bb:8b:3f:e0:ef:66:4b:78:c2:55:93:
84:33:07:5b:4e:a1:f6:dc:fe:7d:f3:4a:46:11:ab:
8b:ad:62:f6:7c:04:60:90:53:de:86:b7:1d:4f:c3:
38:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:79:32:3C:FE:05:96:BB:7A:46:85:A5:34:7A:77:49:35:BD:06:24
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F58F84A6B9E11EB87785D16C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.119.223.0/24
Signature Algorithm: sha256WithRSAEncryption
21:6e:88:cf:23:45:aa:70:c3:6c:0b:a3:a7:ef:e0:91:8c:54:
03:f8:4e:1c:d1:73:53:a8:67:8a:d0:33:59:e0:89:cb:a4:0d:
22:db:a9:47:91:d1:76:18:03:95:21:82:95:63:fb:f7:9e:91:
fa:f2:f5:84:28:85:3f:7b:d3:9a:6f:e3:df:6c:a5:f3:c9:03:
c0:d0:2e:4f:05:51:d5:93:e3:37:d9:4b:aa:99:63:58:cd:41:
fc:96:c2:ec:f2:f4:71:60:80:be:f0:53:b6:01:f5:27:37:be:
27:b1:b4:04:91:01:3a:cd:9f:b3:1b:b2:de:e0:21:75:16:cc:
a4:7b:5b:d9:74:27:f2:27:e8:9d:08:47:04:70:e2:d9:d2:a3:
0e:75:33:23:69:e4:ea:b4:d3:a0:6c:b4:60:1a:58:e1:36:dc:
59:92:00:ff:91:2e:56:9f:ec:a2:a3:c0:b2:6c:ff:2f:81:5e:
57:46:df:e6:2c:ed:f6:0b:d1:43:3a:7d:68:37:45:cf:7e:45:
3c:c6:54:94:52:3b:cc:cb:88:49:cc:1a:a9:7c:60:79:4b:5e:
35:f0:10:0c:e3:58:7c:44:27:69:78:aa:37:30:a1:f6:12:1d:
47:3a:eb:58:08:67:ff:6a:c2:f2:0c:8e:3d:10:c3:9f:27:7e:
52:60:d7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:44 2026 by rpki-client