
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A60940C24BAD11EE8EF6480CC4F9AE02.roa
File: A60940C24BAD11EE8EF6480CC4F9AE02.roa (raw, json)
Hash identifier: v3U9hl+SvC0NbL8J7GiaY4Rz7gkRtVwr4gM/ODfCiQA=
Subject key identifier: FE:46:F8:C9:6E:45:0A:20:33:0B:8E:F0:83:25:35:B8:4A:39:54:54
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D7C7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A60940C24BAD11EE8EF6480CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:52:06 +0000
ROA not before: Thu 08 May 2025 16:26:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151154
IP address blocks: 103.122.204.0/24 maxlen: 24
103.122.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55239 (0xd7c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:26:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c316-2d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:9d:8e:44:65:9a:53:5d:fb:cb:0f:45:f9:
d4:ca:5a:4c:7b:03:14:72:a1:14:2d:7e:59:80:73:
54:85:98:47:10:03:63:d5:f9:4b:47:ac:49:2c:3b:
8d:e3:8e:10:bf:31:39:c0:55:a2:19:5c:0c:0b:e4:
23:10:75:c7:15:46:33:1d:c8:12:73:eb:56:68:33:
15:d6:ed:65:07:cd:18:2c:e6:d5:7d:68:18:1b:4e:
32:12:58:3b:75:5d:1b:7b:af:fc:7c:df:3c:df:9e:
f9:00:b4:c5:67:d0:a4:3c:90:18:15:28:d5:0a:bc:
be:81:84:9d:9f:c2:4e:b9:e0:8f:d5:88:ab:f2:45:
7c:da:10:33:bd:71:ac:0d:c6:0c:aa:c7:d2:e6:3b:
a6:f8:8f:e1:2b:32:c1:f2:35:b1:b1:a0:03:2b:ea:
1a:87:00:ab:bc:46:65:f9:3d:5b:d2:04:fe:a7:4b:
1e:31:c8:66:94:66:b4:6b:1c:72:b5:ab:98:36:41:
57:92:1f:21:f7:84:4a:bb:ff:34:52:d7:0f:84:3a:
37:32:2d:69:d3:1f:fc:d8:44:87:6d:cc:4e:b3:c0:
bf:82:37:dc:4f:5a:3c:88:09:13:3a:32:f6:d0:e7:
02:57:0d:4d:3c:b9:9b:55:0b:74:60:1c:e7:fa:0a:
e8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:46:F8:C9:6E:45:0A:20:33:0B:8E:F0:83:25:35:B8:4A:39:54:54
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A60940C24BAD11EE8EF6480CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.122.204.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:f0:e2:96:84:7d:a5:86:3f:f2:49:30:a6:25:75:13:4f:09:
81:39:31:9b:b0:b3:6a:3b:f0:26:a7:18:52:58:fd:32:00:35:
81:91:4c:f8:bc:54:59:3e:05:e5:fd:a8:71:1a:1f:bd:02:fb:
94:f2:ca:ee:42:f6:75:4e:f8:6f:a8:45:5d:bc:67:df:3d:69:
6c:7c:26:47:cf:e6:1e:5e:39:23:ed:b4:3b:85:8c:e5:0a:d5:
f9:09:a3:4f:23:fe:18:c5:1b:b4:ff:27:4d:8e:0f:3d:83:b6:
88:61:14:d6:4a:57:82:d2:a7:8e:2f:e3:57:20:b2:51:3b:d2:
3e:98:5f:52:ee:3c:2b:0b:51:24:e5:20:0c:04:38:5b:c3:96:
f8:1a:f8:bd:88:1a:94:b9:d6:59:cd:a5:12:65:53:5b:98:1c:
1d:3f:c7:9d:ab:fb:5d:65:70:db:ca:b2:f1:79:c2:5e:8f:e8:
a4:0d:ec:9b:48:a1:9e:8e:54:61:fa:8e:0e:f6:fd:6e:91:5a:
d9:a0:5d:8a:42:90:72:3c:38:f5:b0:95:77:a1:60:42:ff:57:
83:8b:85:b3:5e:4d:21:ab:d5:f1:77:2d:09:7d:11:41:d4:05:
29:f3:ec:50:04:d0:1d:40:90:2c:19:43:4b:3f:47:5a:72:c1:
71:e7:dd:5c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDANfHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MjY1OFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGMzMTYtMmQ4YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALGUnY5EZZpTXfvLD0X51MpaTHsDFHKhFC1+WYBzVIWYRxADY9X5S0esSSw7
jeOOEL8xOcBVohlcDAvkIxB1xxVGMx3IEnPrVmgzFdbtZQfNGCzm1X1oGBtOMhJY
O3VdG3uv/HzfPN+e+QC0xWfQpDyQGBUo1Qq8voGEnZ/CTrngj9WIq/JFfNoQM71x
rA3GDKrH0uY7pviP4SsywfI1sbGgAyvqGocAq7xGZfk9W9IE/qdLHjHIZpRmtGsc
crWrmDZBV5IfIfeESrv/NFLXD4Q6NzItadMf/NhEh23MTrPAv4I33E9aPIgJEzoy
9tDnAlcNTTy5m1ULdGAc5/oK6P8CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBT+RvjJ
bkUKIDMLjvCDJTW4SjlUVDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E2MDk0MEMy
NEJBRDExRUU4RUY2NDgwQ0M0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWd6zDANBgkqhkiG9w0BAQsFAAOCAQEAH/DiloR9pYY/8kkwpiV1
E08JgTkxm7CzajvwJqcYUlj9MgA1gZFM+LxUWT4F5f2ocRofvQL7lPLK7kL2dU74
b6hFXbxn3z1pbHwmR8/mHl45I+20O4WM5QrV+QmjTyP+GMUbtP8nTY4PPYO2iGEU
1kpXgtKnji/jVyCyUTvSPphfUu48KwtRJOUgDAQ4W8OW+Br4vYgalLnWWc2lEmVT
W5gcHT/Hnav7XWVw28qy8XnCXo/opA3sm0ihno5UYfqODvb9bpFa2aBdikKQcjw4
9bCVd6FgQv9Xg4uFs15NIavV8XctCX0RQdQFKfPsUATQHUCQLBlDSz9HWnLBcefd
XA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:59 2026 by rpki-client