
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC338A9421C411ECBCA7543AC4F9AE02.roa
File: AC338A9421C411ECBCA7543AC4F9AE02.roa (raw, json)
Hash identifier: xlRDY10xqcPSymQUuVRJV4JPnmGgu9y/A4ukXnVsnJY=
Subject key identifier: 54:22:D4:AD:33:8C:B7:4A:9E:38:7D:79:D3:EB:5A:C0:BE:A4:FA:EB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D62F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC338A9421C411ECBCA7543AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:42:24 +0000
ROA not before: Thu 08 May 2025 16:19:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 146875
IP address blocks: 103.173.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54831 (0xd62f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:19:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c0d0-605c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:dd:15:fd:28:7e:c2:67:c0:a6:f7:29:58:
d2:df:13:96:65:5d:97:2c:4f:8f:89:ca:a7:1b:cf:
ee:0c:43:ac:ba:4c:aa:64:25:e7:f9:9b:54:27:88:
a0:41:74:e0:f8:37:85:7c:61:26:ff:67:66:74:b5:
e0:43:6f:31:47:de:9b:96:a5:62:82:55:bd:32:43:
69:7f:25:64:0b:d4:36:0d:43:d3:b3:cc:51:fe:10:
50:c8:96:bf:e5:78:ce:6c:5e:19:d5:04:9c:54:38:
26:3b:87:e7:98:f1:d9:ee:d2:e8:28:90:d2:2b:f0:
43:34:52:57:f5:f3:43:16:6f:16:df:6a:bf:5c:91:
5e:1a:da:8e:56:53:a6:42:3e:85:d8:3d:b1:7d:9a:
fe:70:77:a2:50:ae:96:be:5e:e3:80:97:13:84:df:
b9:78:7b:df:26:1e:d7:94:4a:e3:dc:93:df:1c:6a:
00:70:f1:3d:7a:d5:ed:ff:44:80:b3:c1:9c:f0:c0:
ab:f1:61:71:a9:4d:b0:39:ce:03:cf:b9:7f:f7:8a:
02:bf:06:33:0a:0e:1f:ed:0f:74:fd:1e:3f:94:6a:
c2:74:5c:c5:8d:6a:0e:83:1e:11:9b:5d:96:e3:52:
0b:91:8a:c5:6d:c4:ce:ea:2a:e2:3d:69:8f:72:e4:
8d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:22:D4:AD:33:8C:B7:4A:9E:38:7D:79:D3:EB:5A:C0:BE:A4:FA:EB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC338A9421C411ECBCA7543AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.173.170.0/23
Signature Algorithm: sha256WithRSAEncryption
90:4a:0f:b5:73:e5:91:d7:d1:c8:b8:d0:56:15:56:45:16:3c:
21:41:23:64:72:e3:fd:67:dc:d8:40:f9:1c:c5:dd:5d:a9:f8:
93:70:c5:5f:93:b2:63:dd:cb:76:42:0d:b5:76:27:81:98:66:
34:9c:ba:8b:dc:fb:1f:02:bf:2d:7c:c6:ab:1e:07:0c:67:47:
b6:4c:66:82:4d:8b:44:88:4c:56:b1:c5:8b:72:bb:ff:8a:3c:
43:31:79:04:83:49:63:dd:c4:9b:a4:6f:91:21:61:f1:cf:88:
c9:26:ad:51:57:d9:5a:d1:04:d4:ab:c9:94:42:96:55:2c:32:
78:49:f3:20:e7:eb:c3:59:5b:c8:07:69:9e:8c:36:b0:1c:ff:
83:e9:46:38:ee:9f:2b:b7:b1:17:f6:78:43:d8:ae:3c:f2:4d:
2c:d2:1e:d4:a9:b0:f5:9e:49:21:58:c3:b3:6f:30:6c:9e:49:
69:16:15:3c:fe:b0:28:79:5b:06:7c:a4:93:8e:b1:60:28:a0:
d8:d6:cc:fa:33:34:46:27:30:e1:27:71:29:7d:1b:54:d0:20:
13:f9:e9:48:f9:23:87:8b:6d:ef:fa:c2:23:9b:e4:a8:9f:7e:
82:8d:be:91:1b:2c:47:72:8b:64:0b:92:e8:26:80:1b:72:46:
d6:e0:38:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:46 2026 by rpki-client