
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7B1689E066411EDA7A8DF3BC4F9AE02.roa
File: A7B1689E066411EDA7A8DF3BC4F9AE02.roa (raw, json)
Hash identifier: KTqVKTOR1HH5mVIWpC0pr3bJLnOFuY6ImL+mbuMzvJQ=
Subject key identifier: 43:87:97:0D:C6:8D:01:1F:11:D8:55:7C:FE:81:36:5B:88:70:C4:51
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D878
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7B1689E066411EDA7A8DF3BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:55:00 +0000
ROA not before: Thu 08 May 2025 16:30:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205544
IP address blocks: 103.173.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55416 (0xd878)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:30:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c3c4-5b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:15:ee:a9:44:aa:71:19:ad:bf:40:dd:e6:
fb:90:a2:47:55:ff:bf:2e:b3:8f:c2:34:b3:a8:38:
23:fb:8e:0f:75:8a:de:7f:5b:36:87:81:06:6f:cf:
fe:5d:5b:72:f6:28:40:90:8d:77:45:c9:e4:3a:35:
4c:f3:af:ee:48:70:0d:c8:9e:75:7d:a4:ca:4f:bc:
f8:db:f6:ad:e1:bd:f2:61:22:58:d5:e6:6f:81:2e:
f8:48:b9:a4:10:f0:f8:23:6e:d6:84:b8:85:32:8b:
28:f4:77:dd:4d:25:1b:de:05:2f:3d:b4:22:a5:8e:
21:dd:ec:75:d4:36:73:38:b0:c9:af:ed:fc:ee:4f:
2e:e0:eb:91:cb:b8:f7:85:34:9d:8a:ac:47:4f:2d:
bf:ab:56:2f:54:85:31:69:d1:34:7a:49:7f:8f:00:
f9:8c:34:37:c9:9a:02:4e:58:13:86:36:5a:d3:b3:
a6:04:89:d2:04:21:f0:e1:fe:d2:46:cd:1c:07:3e:
22:41:49:4b:1d:59:f8:23:12:38:c9:46:33:18:4b:
0c:1e:49:28:01:ac:7f:69:c2:b8:bd:22:a3:40:d3:
2e:e9:83:e8:ae:dc:9d:c8:cd:cd:28:f5:0e:80:3f:
9f:e3:e4:f8:d5:c5:46:b7:66:e4:35:34:2b:59:d6:
c0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:87:97:0D:C6:8D:01:1F:11:D8:55:7C:FE:81:36:5B:88:70:C4:51
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7B1689E066411EDA7A8DF3BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.173.197.0/24
Signature Algorithm: sha256WithRSAEncryption
43:94:58:c5:66:8b:60:56:7c:b6:79:e5:6b:0c:71:3d:44:34:
1d:0c:58:c8:5b:28:5c:99:2f:6c:5a:0e:0b:b2:f3:99:18:b6:
68:1f:ae:27:32:b5:5c:d2:4e:cc:38:41:86:01:45:2d:fc:52:
51:9a:30:77:47:df:4c:f3:b2:35:c1:6c:b5:0f:ab:dc:01:6c:
8d:31:1f:9d:25:ff:e0:d7:31:ad:9d:41:b8:44:d9:43:c3:99:
87:21:45:68:d6:31:85:6d:b8:f8:ae:33:d7:28:8d:b8:07:52:
dc:25:eb:5f:c0:b0:d5:75:8d:fc:d5:b6:ea:a4:7d:b2:ff:6b:
1c:f9:88:cc:6f:31:64:d8:fc:82:1e:b9:72:09:e9:2a:1c:f3:
31:8e:ea:e0:4a:65:25:20:8a:03:32:d4:bd:2f:db:be:5e:9c:
99:fd:55:29:dc:47:0c:e8:e6:6d:bd:a4:e0:91:9b:df:5b:f3:
39:c6:9c:51:e2:1a:f8:e1:67:bf:6d:e6:8e:1c:ab:00:8e:cf:
bb:9a:36:95:37:ba:f9:45:00:4f:fc:87:34:9f:e4:ab:6b:f3:
16:eb:92:30:32:96:ec:9b:39:79:be:6b:95:33:44:0f:71:e5:
a9:36:db:26:93:bf:1c:34:c4:26:ab:17:51:6e:1e:9f:c4:4b:
6d:75:76:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:20 2026 by rpki-client