
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A6BDE1C6412D11EC948F6B60C4F9AE02.roa
File: A6BDE1C6412D11EC948F6B60C4F9AE02.roa (raw, json)
Hash identifier: mEfLfb23ymiNwFjmutLMDFrg2cpGCT9vR2NMj/ZwCMI=
Subject key identifier: 58:18:D7:8E:6E:D2:55:41:4B:9B:3B:01:D4:55:F1:9A:6B:10:D7:40
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D5FE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A6BDE1C6412D11EC948F6B60C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:41:16 +0000
ROA not before: Thu 08 May 2025 16:18:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142477
IP address blocks: 103.163.64.0/23 maxlen: 24
103.171.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54782 (0xd5fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:18:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c08c-aff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ce:35:26:55:0f:c3:df:aa:e1:fd:d9:c5:ce:
93:b7:3e:fd:fe:8c:4e:21:cb:d6:14:06:15:1f:b8:
64:6b:27:59:0c:1c:23:dc:67:6d:8b:48:2b:ab:7f:
0e:76:f5:b6:1e:53:68:1c:3d:5a:cf:25:89:88:69:
76:24:78:00:02:5d:94:26:ec:2f:3f:fb:7c:a2:ef:
43:12:8c:d1:4a:f3:5d:32:3b:e8:6b:2a:06:ec:79:
46:81:64:4d:42:4c:78:e0:eb:33:2a:99:d1:c0:e6:
25:6b:d4:fe:f4:a5:32:fb:05:0e:58:4f:15:89:5e:
58:61:c6:31:5d:2b:a8:d9:9c:64:3e:d8:31:4b:37:
49:86:2f:83:95:19:50:cc:07:91:a8:f9:91:a5:3f:
91:97:73:8c:76:4b:42:13:e9:2a:c2:95:e6:39:a1:
1c:2f:2a:d7:36:e0:33:6b:d4:1e:4a:c2:58:11:73:
3a:86:66:e8:c9:a0:af:89:89:43:75:f6:5d:cf:87:
7c:86:18:a6:00:a1:2f:ba:d0:43:64:72:8a:e5:c6:
e9:89:c1:f1:9c:c1:aa:7f:5b:05:ff:14:58:5c:d9:
8a:15:18:e2:4e:9c:b8:c1:f7:5f:44:f6:f9:ae:d3:
86:89:c6:2e:c7:40:c4:eb:75:49:dc:cc:6d:3a:6a:
ea:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:18:D7:8E:6E:D2:55:41:4B:9B:3B:01:D4:55:F1:9A:6B:10:D7:40
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A6BDE1C6412D11EC948F6B60C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.163.64.0/23
103.171.98.0/23
Signature Algorithm: sha256WithRSAEncryption
42:97:b9:8b:e3:af:22:9a:23:65:68:8b:11:de:39:f5:6b:11:
af:56:59:19:97:95:c6:fb:b5:3a:53:ac:5e:de:e1:e2:1b:de:
f2:16:37:97:e1:5d:8a:b2:c7:ac:f4:22:f2:2c:71:c0:9c:4c:
c0:63:7b:9c:23:ec:bb:9f:af:72:f4:d7:90:72:18:2f:a0:4a:
e5:55:fa:60:b6:bb:72:74:df:39:a6:49:e4:5a:d2:81:b0:8b:
65:54:ba:d1:9c:64:24:eb:78:d3:9b:c6:db:79:7c:7e:7e:37:
4d:32:16:8a:5a:1a:f3:ec:fb:aa:a4:3e:74:f0:53:44:16:8d:
42:41:4a:15:99:f7:d7:ab:b9:ca:27:15:3e:3e:f0:0a:2b:da:
d6:59:f6:59:0d:81:3b:4e:cb:86:c8:88:1c:49:db:5b:93:dc:
a9:51:47:d8:4e:62:9e:0b:5d:fa:c8:29:88:2e:a7:4b:27:a7:
96:4b:6c:d5:93:f4:40:ad:3b:3f:61:9c:ec:9b:42:05:f1:c9:
7a:81:4c:d0:f4:4b:76:df:29:17:7d:e4:ed:1b:d4:69:8d:29:
c0:1f:3d:34:f2:b4:e2:52:a9:5e:f0:b9:d2:eb:81:c1:06:b5:
18:53:f0:01:dc:63:8c:af:7a:16:7b:82:8b:d1:04:19:6f:37:
a0:ce:7e:8d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDANX+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MTg0NloXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGMwOGMtYWZmNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMvONSZVD8PfquH92cXOk7c+/f6MTiHL1hQGFR+4ZGsnWQwcI9xnbYtIK6t/
Dnb1th5TaBw9Ws8liYhpdiR4AAJdlCbsLz/7fKLvQxKM0UrzXTI76GsqBux5RoFk
TUJMeODrMyqZ0cDmJWvU/vSlMvsFDlhPFYleWGHGMV0rqNmcZD7YMUs3SYYvg5UZ
UMwHkaj5kaU/kZdzjHZLQhPpKsKV5jmhHC8q1zbgM2vUHkrCWBFzOoZm6Mmgr4mJ
Q3X2Xc+HfIYYpgChL7rQQ2RyiuXG6YnB8ZzBqn9bBf8UWFzZihUY4k6cuMH3X0T2
+a7ThonGLsdAxOt1SdzMbTpq6nECAwEAAaOCAmYwggJiMB0GA1UdDgQWBBRYGNeO
btJVQUubOwHUVfGaaxDXQDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E2QkRFMUM2
NDEyRDExRUM5NDhGNkI2MEM0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAWejQAMEAWerYjANBgkqhkiG9w0BAQsFAAOCAQEAQpe5i+OvIpoj
ZWiLEd459WsRr1ZZGZeVxvu1OlOsXt7h4hve8hY3l+FdirLHrPQi8ixxwJxMwGN7
nCPsu5+vcvTXkHIYL6BK5VX6YLa7cnTfOaZJ5FrSgbCLZVS60ZxkJOt405vG23l8
fn43TTIWiloa8+z7qqQ+dPBTRBaNQkFKFZn316u5yicVPj7wCiva1ln2WQ2BO07L
hsiIHEnbW5PcqVFH2E5ingtd+sgpiC6nSyenlkts1ZP0QK07P2Gc7JtCBfHJeoFM
0PRLdt8pF33k7RvUaY0pwB89NPK04lKpXvC50uuBwQa1GFPwAdxjjK96FnuCi9EE
GW83oM5+jQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:25:20 2026 by rpki-client