
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AEF723E4413B11EC87AB0687C4F9AE02.roa
File: AEF723E4413B11EC87AB0687C4F9AE02.roa (raw, json)
Hash identifier: vd0PQXaeLoc0W92lFn+pxuY3csXh/a7IIxPfdDk66ak=
Subject key identifier: 65:C4:6E:63:0D:A0:C5:AA:02:F8:1C:6D:56:4F:DF:D5:24:57:33:83
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D319
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AEF723E4413B11EC87AB0687C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:23:59 +0000
ROA not before: Thu 08 May 2025 16:04:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135731
IP address blocks: 103.174.76.0/23 maxlen: 24
2400:10a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54041 (0xd319)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:04:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bc7f-9799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1a:d2:9e:94:78:12:07:20:34:24:23:44:8d:
19:a9:a6:97:f3:71:d5:fd:51:de:2f:52:25:96:94:
19:11:dc:22:da:d5:ad:f8:b6:fa:8c:01:a1:b1:d1:
34:dd:f4:05:52:9b:e8:44:ed:b7:cc:cc:6a:30:30:
72:89:7b:65:22:73:f2:b8:f1:ce:67:14:f8:bc:99:
f2:7a:e3:4b:1f:d9:44:b0:f3:23:2a:48:bb:19:26:
f6:48:c2:39:cd:e6:21:91:d8:2a:04:ef:e2:53:64:
49:ad:5d:d2:1e:90:27:53:20:1a:b5:f6:30:65:66:
f5:52:15:14:03:aa:32:14:8e:e9:03:f4:be:a1:1e:
a8:38:e5:db:13:cd:77:1c:3c:33:3c:60:5e:10:60:
05:6d:2a:5c:66:10:89:8b:a6:35:7b:67:d9:66:db:
6d:e5:38:58:17:d6:59:f9:a4:5e:af:74:0c:c8:24:
c3:0c:7f:92:8d:41:80:8b:49:75:fc:71:8f:12:77:
c5:59:a0:5c:a8:a7:6a:85:28:d6:c9:0d:ae:e0:2b:
61:ec:7d:04:1a:4d:b6:d5:11:9e:58:25:df:0e:3c:
8b:08:3a:d6:55:d2:e3:ce:e5:57:e4:15:72:c5:6a:
49:17:52:73:8b:f3:5f:10:da:a2:39:b5:ed:ec:67:
9d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C4:6E:63:0D:A0:C5:AA:02:F8:1C:6D:56:4F:DF:D5:24:57:33:83
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AEF723E4413B11EC87AB0687C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.174.76.0/23
IPv6:
2400:10a0::/32
Signature Algorithm: sha256WithRSAEncryption
4e:54:10:fc:58:e8:ec:b6:9b:8e:98:4e:6a:28:39:23:56:90:
32:38:70:a3:95:3f:34:86:52:62:08:a9:be:05:5d:d0:22:c6:
2f:8f:97:48:c6:9c:8c:6f:6d:9e:1a:a8:13:1b:7b:c5:06:fc:
c7:55:57:46:57:5d:c3:fa:94:d0:78:38:0f:a0:15:59:3d:13:
5a:86:64:ec:1f:6b:d2:da:88:8a:1d:4b:21:42:c3:39:18:39:
53:11:a4:0b:96:61:22:61:4f:18:10:75:fd:e7:9c:55:d2:46:
26:e4:44:8b:1b:fe:0f:80:4e:8f:1a:d5:91:73:ed:20:45:73:
9f:3c:a8:1d:05:f2:aa:ea:a5:e6:d9:9f:51:dd:3b:a9:d8:3a:
84:c9:d0:ee:1f:97:b6:19:d3:ac:51:c1:20:85:79:58:4e:f0:
42:50:90:9d:b5:ce:92:5f:46:46:f9:57:81:4f:09:14:65:53:
ac:22:51:54:c3:24:fa:c2:64:3a:f8:92:75:25:b4:13:38:75:
bb:65:ec:27:93:cb:d5:aa:00:5a:29:d4:22:6d:cb:9a:46:63:
88:18:f8:b8:07:e5:14:dc:f3:4b:05:5a:c7:de:14:c1:75:7a:
d8:32:37:91:81:0b:d8:01:0c:0f:28:00:75:ee:7b:ee:bc:67:
ae:b3:7e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:12:05 2026 by rpki-client