
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A092B2C2EDF511EFBEEE0415C4F9AE02.roa
File: A092B2C2EDF511EFBEEE0415C4F9AE02.roa (raw, json)
Hash identifier: 6qhMrl3mADwI+91Ugk9w7kENDdm/w+JULDl1Yfh0YQU=
Subject key identifier: AF:07:DC:72:39:B1:87:D1:0A:84:9D:4D:31:CA:33:C7:C0:E5:2A:1A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D265
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A092B2C2EDF511EFBEEE0415C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:19:45 +0000
ROA not before: Thu 08 May 2025 16:01:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134286
IP address blocks: 103.109.6.0/23 maxlen: 24
103.139.59.0/24 maxlen: 24
103.148.165.0/24 maxlen: 24
103.178.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53861 (0xd265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:01:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bb81-90f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ab:c1:92:0c:f5:be:4b:56:52:6e:91:5a:a3:
bd:6d:7d:31:2f:88:11:8d:96:69:21:ea:b8:bd:7b:
c5:42:9e:0b:70:4f:dd:fe:e9:8a:de:55:54:49:01:
86:3b:5e:92:6a:2f:1d:86:1f:73:96:ef:3d:be:15:
72:32:fb:51:1a:97:f7:c3:c2:a6:42:9e:e2:f1:30:
5a:e3:f0:4b:29:38:49:29:bc:80:8c:1a:c9:88:75:
df:44:11:8a:5f:b4:a3:b8:1f:83:93:21:1e:07:b5:
c8:84:85:b3:1f:b3:08:12:b8:0a:d5:8f:3a:36:01:
29:87:7c:34:2a:ea:24:db:93:7e:cb:4d:46:18:c0:
ed:af:16:34:91:d4:12:95:f7:b8:c9:fb:d3:7b:4f:
ce:46:01:44:83:7e:b2:4d:7b:0c:12:18:42:ac:d8:
15:87:e8:23:c3:21:c5:0a:85:36:c9:50:36:ac:04:
bc:88:35:ea:02:ed:7e:2c:ee:44:df:5e:60:6b:d9:
a3:4f:bd:ba:05:fd:42:6c:73:4f:36:4f:5f:45:13:
0d:4a:b2:1b:30:8f:33:43:d5:61:52:89:4d:b3:1f:
b5:c0:ab:77:7b:62:be:6e:26:c5:c2:69:db:dc:ec:
e3:9f:07:a5:0a:1a:cf:56:ff:93:ff:8e:85:86:c1:
6c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:07:DC:72:39:B1:87:D1:0A:84:9D:4D:31:CA:33:C7:C0:E5:2A:1A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A092B2C2EDF511EFBEEE0415C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.109.6.0/23
103.139.59.0/24
103.148.165.0/24
103.178.113.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ee:ac:0f:96:ad:91:fc:36:d5:09:e9:93:eb:42:03:ce:da:
73:ba:26:56:2a:89:97:06:80:b2:2b:56:aa:f5:1c:58:36:02:
35:99:ba:cf:4e:b3:56:56:de:fc:77:28:8f:dd:a6:61:bc:85:
25:82:3d:ef:9a:1f:2a:ea:28:e8:37:a3:2f:1a:e9:9e:31:52:
02:55:b2:12:3e:b2:ef:01:2d:62:5b:ab:6f:ff:c8:ed:ad:da:
5b:03:a8:06:27:fc:2d:0e:d2:d5:c4:af:2b:13:35:fc:44:f8:
30:58:20:b4:07:af:16:bc:41:a1:3d:59:85:d9:c4:f8:01:1a:
c0:37:fa:a0:56:6a:c2:a3:f9:37:b7:ef:1b:9f:d7:88:ae:31:
6c:7c:01:2a:45:b8:50:22:72:7a:34:4e:95:de:3b:66:4c:19:
18:a7:18:29:11:97:0c:43:96:14:d0:5f:f0:27:43:4b:4e:f1:
a8:17:ba:ef:91:70:1b:4d:82:b8:36:44:a4:9c:ae:a6:c5:81:
73:6c:27:84:6f:07:42:2f:ea:4c:93:c6:f6:17:48:03:74:7c:
d0:ff:1b:a2:5e:eb:be:12:77:c0:a4:7f:f1:68:96:dd:97:af:
46:9d:59:8f:d0:73:a0:64:40:da:a2:fd:61:59:2e:e2:c0:ca:
ae:44:1b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:24 2026 by rpki-client