
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A79EE6C4321C11F09F67030DC4F9AE02.roa
File: A79EE6C4321C11F09F67030DC4F9AE02.roa (raw, json)
Hash identifier: /R7vwUtYPk8steRZ6TTsqZ535Ig1G+kAoJam6WTReEs=
Subject key identifier: BC:9F:97:80:D9:D3:64:DB:1E:4D:0F:49:EB:A7:91:81:34:88:07:52
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D8E4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A79EE6C4321C11F09F67030DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:56:50 +0000
ROA not before: Fri 16 May 2025 06:21:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133995
IP address blocks: 103.53.21.0/24 maxlen: 24
103.109.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55524 (0xd8e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 06:21:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c432-663f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5c:6c:27:a4:99:2e:0a:0b:75:f2:bc:2d:4e:
5e:81:c0:d3:cd:23:0b:c6:18:70:bf:3b:c0:18:f4:
da:b6:dd:6f:0b:87:de:76:08:ec:22:4c:45:0b:61:
36:7b:e8:0d:e7:bf:d2:99:49:0e:f8:e0:a6:c3:45:
4c:9f:2a:fa:a5:dc:cd:ec:c0:c4:7e:fb:09:cd:90:
fa:6e:6d:96:5a:41:bd:14:3b:83:14:5f:68:9c:e2:
56:26:e1:b3:eb:5f:c6:8f:38:8b:6f:c5:17:14:88:
b5:ba:72:da:45:db:af:9f:c1:6d:84:25:55:c2:61:
f9:b4:67:39:96:57:eb:83:d4:d7:1e:1c:df:d9:ff:
48:87:c2:36:6d:e7:7c:9f:e7:06:45:59:5b:44:3b:
58:db:1f:8c:e7:27:5c:7b:13:2b:0d:70:26:6e:75:
ba:8d:65:63:65:cf:13:c6:60:2a:f5:15:e1:ae:ad:
4c:49:5e:7a:b4:2f:91:af:c8:44:6e:67:68:bb:19:
0a:a5:94:58:5a:b4:f5:b8:f4:6e:a9:6e:1e:ce:c0:
7c:3e:b4:65:d8:d0:df:81:96:e0:38:16:cb:85:ba:
39:c6:b2:9c:a5:d5:c7:11:3b:fd:35:0b:dc:43:c5:
90:ef:17:2f:a8:46:99:a9:a2:aa:39:4b:23:8c:95:
90:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9F:97:80:D9:D3:64:DB:1E:4D:0F:49:EB:A7:91:81:34:88:07:52
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A79EE6C4321C11F09F67030DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.53.21.0/24
103.109.211.0/24
Signature Algorithm: sha256WithRSAEncryption
07:6e:30:78:18:82:7e:16:2f:0a:a5:63:82:5a:06:a2:05:60:
d3:e6:1b:70:e3:db:5a:27:78:4f:29:cc:19:4f:2a:14:64:c6:
5d:b0:90:11:e1:39:7a:f3:83:ff:3f:e5:35:90:84:89:79:4e:
96:75:f6:d3:dd:be:2f:bf:04:b3:62:a8:28:e5:4e:1d:8d:84:
71:a3:8e:1c:44:37:9b:2f:a7:d7:5f:5f:a9:d2:04:89:ca:64:
52:5a:b6:95:39:b2:52:ec:06:e8:74:5e:4b:49:2e:c9:f3:8d:
b1:e0:2d:4d:17:f4:0b:ff:db:a6:f0:c1:a2:af:65:72:5b:93:
f7:2a:e0:5b:50:cd:a7:5f:d1:f3:74:b6:61:c5:89:1e:b6:6c:
15:99:a6:35:8e:2a:30:cc:f8:b1:bd:b0:98:59:36:0e:3e:dc:
43:4e:d2:7f:e7:75:60:aa:56:b7:a6:1c:92:bd:13:6e:6e:5e:
9e:ac:52:35:fe:e9:1a:6c:cf:af:41:66:93:a8:de:ae:77:4c:
a0:30:1d:e5:b3:a6:c2:9a:54:cc:59:14:22:b4:24:ca:2b:91:
4f:07:fb:21:b8:e8:e7:40:f6:cd:e8:9b:3e:da:90:bb:b2:6c:
f8:79:70:d1:d2:22:12:61:74:c3:63:3f:03:e8:77:31:52:93:
99:12:e9:21
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDANjkMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUxNjA2MjEzNFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGM0MzItNjYzZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANFcbCekmS4KC3XyvC1OXoHA080jC8YYcL87wBj02rbdbwuH3nYI7CJMRQth
NnvoDee/0plJDvjgpsNFTJ8q+qXczezAxH77Cc2Q+m5tllpBvRQ7gxRfaJziVibh
s+tfxo84i2/FFxSItbpy2kXbr5/BbYQlVcJh+bRnOZZX64PU1x4c39n/SIfCNm3n
fJ/nBkVZW0Q7WNsfjOcnXHsTKw1wJm51uo1lY2XPE8ZgKvUV4a6tTEleerQvka/I
RG5naLsZCqWUWFq09bj0bqluHs7AfD60ZdjQ34GW4DgWy4W6OcaynKXVxxE7/TUL
3EPFkO8XL6hGmamiqjlLI4yVkHcCAwEAAaOCAmYwggJiMB0GA1UdDgQWBBS8n5eA
2dNk2x5ND0nrp5GBNIgHUjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E3OUVFNkM0
MzIxQzExRjA5RjY3MDMwREM0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAGc1FQMEAGdt0zANBgkqhkiG9w0BAQsFAAOCAQEAB24weBiCfhYv
CqVjgloGogVg0+YbcOPbWid4TynMGU8qFGTGXbCQEeE5evOD/z/lNZCEiXlOlnX2
092+L78Es2KoKOVOHY2EcaOOHEQ3my+n119fqdIEicpkUlq2lTmyUuwG6HReS0ku
yfONseAtTRf0C//bpvDBoq9lcluT9yrgW1DNp1/R83S2YcWJHrZsFZmmNY4qMMz4
sb2wmFk2Dj7cQ07Sf+d1YKpWt6Yckr0Tbm5enqxSNf7pGmzPr0Fmk6jerndMoDAd
5bOmwppUzFkUIrQkyiuRTwf7Ibjo50D2zeibPtqQu7Js+Hlw0dIiEmF0w2M/A+h3
MVKTmRLpIQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:57 2026 by rpki-client