
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AF752C4A507411EE9ECFEE7BC4F9AE02.roa
File: AF752C4A507411EE9ECFEE7BC4F9AE02.roa (raw, json)
Hash identifier: FPP6Fe9fJkvjMOdZsOl6O3UrU0aG5+p10AmBQW0oAIg=
Subject key identifier: F7:B9:9E:2C:64:5F:EB:35:05:3B:EA:48:15:A9:49:FE:27:E0:A5:21
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D317
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AF752C4A507411EE9ECFEE7BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:23:57 +0000
ROA not before: Thu 08 May 2025 16:04:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135727
IP address blocks: 103.250.110.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54039 (0xd317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:04:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bc7d-7385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:07:d8:44:3f:c7:e0:c6:61:d3:6e:9d:83:
e9:d7:dc:da:87:ed:34:e7:44:77:37:57:37:ca:9c:
55:66:a7:3e:b3:be:18:44:61:cc:75:fb:cd:fa:9e:
bf:32:25:f1:3a:a3:fa:fd:fc:06:76:97:eb:21:37:
d7:05:71:a5:64:e1:fd:59:26:18:b2:4a:00:0f:43:
7a:97:01:a2:bd:10:06:64:b4:4e:d8:a0:53:5b:9e:
23:58:47:03:ae:e1:f6:ec:66:60:1d:5c:d3:9c:25:
87:5d:89:54:4b:51:97:7e:c7:7b:21:69:ee:2f:28:
c7:2c:5e:50:af:db:54:d9:31:ec:53:1f:5e:c4:4d:
09:64:23:dd:a4:79:5f:57:31:0d:5f:8f:9c:db:07:
4c:27:d5:71:a2:9a:41:74:cc:77:23:3b:f4:c5:15:
24:7d:73:1c:4d:ef:b0:33:a7:a7:ad:c0:34:e6:2a:
98:98:13:10:12:11:10:5f:d8:e2:93:42:53:80:09:
de:cf:91:0f:c6:66:4f:ed:23:6d:70:84:e5:40:ac:
d2:8a:76:3d:26:52:22:15:1d:3a:9f:75:6e:88:b5:
d1:81:9c:37:96:8e:13:d1:b2:8c:f9:31:97:3e:c3:
ef:50:52:82:33:a7:5e:7c:bc:9d:a6:89:86:9f:92:
c3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B9:9E:2C:64:5F:EB:35:05:3B:EA:48:15:A9:49:FE:27:E0:A5:21
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AF752C4A507411EE9ECFEE7BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.250.110.0/23
Signature Algorithm: sha256WithRSAEncryption
76:93:08:71:e5:1d:78:ba:31:a6:db:ed:57:ae:47:0e:d8:a1:
da:a9:44:33:2f:85:14:3a:19:72:ff:9e:14:c3:d1:17:b2:5e:
c9:aa:f2:31:2b:c4:48:a0:09:d4:e3:f1:77:12:dd:25:50:1d:
42:c3:6c:1a:65:dd:5b:c3:b2:30:16:d1:79:58:eb:22:38:46:
5b:e6:34:c3:c9:d7:cb:f8:7d:29:43:16:a9:47:57:fe:1c:ce:
42:d9:a7:e8:77:21:fd:d4:e8:b6:00:ae:42:84:f0:eb:c4:b0:
ab:2f:0b:ac:f3:86:e9:d6:50:5e:37:73:e4:b1:fe:e7:a2:a4:
75:9a:68:56:0c:82:70:0e:ca:3d:6a:8b:1c:a2:87:28:80:9f:
ee:28:8b:dd:b1:69:b8:5e:af:dd:c5:39:f5:73:66:16:16:eb:
5b:06:8d:43:27:88:95:d4:ca:79:bb:71:91:27:89:02:df:b8:
3f:c8:82:60:fb:a3:a1:3b:4c:51:e7:d1:52:0f:dd:80:ef:43:
5f:96:e3:fa:e6:c4:71:c4:69:1f:b6:77:09:5e:27:00:e6:39:
40:94:23:5c:be:96:98:70:95:3e:f5:9c:7f:b7:61:fb:6f:f5:
e3:d8:3f:5c:76:ba:4e:f0:98:49:ba:a2:ef:40:5c:61:0c:da:
35:e1:97:09
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDANMXMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MDQzM1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGJjN2QtNzM4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMRMB9hEP8fgxmHTbp2D6dfc2oftNOdEdzdXN8qcVWanPrO+GERhzHX7zfqe
vzIl8Tqj+v38BnaX6yE31wVxpWTh/VkmGLJKAA9DepcBor0QBmS0TtigU1ueI1hH
A67h9uxmYB1c05wlh12JVEtRl37HeyFp7i8oxyxeUK/bVNkx7FMfXsRNCWQj3aR5
X1cxDV+PnNsHTCfVcaKaQXTMdyM79MUVJH1zHE3vsDOnp63ANOYqmJgTEBIREF/Y
4pNCU4AJ3s+RD8ZmT+0jbXCE5UCs0op2PSZSIhUdOp91boi10YGcN5aOE9GyjPkx
lz7D71BSgjOnXny8naaJhp+Sw50CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBT3uZ4s
ZF/rNQU76kgVqUn+J+ClITAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0FGNzUyQzRB
NTA3NDExRUU5RUNGRUU3QkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWf6bjANBgkqhkiG9w0BAQsFAAOCAQEAdpMIceUdeLoxptvtV65H
Dtih2qlEMy+FFDoZcv+eFMPRF7JeyaryMSvESKAJ1OPxdxLdJVAdQsNsGmXdW8Oy
MBbReVjrIjhGW+Y0w8nXy/h9KUMWqUdX/hzOQtmn6Hch/dTotgCuQoTw68Swqy8L
rPOG6dZQXjdz5LH+56KkdZpoVgyCcA7KPWqLHKKHKICf7iiL3bFpuF6v3cU59XNm
FhbrWwaNQyeIldTKebtxkSeJAt+4P8iCYPujoTtMUefRUg/dgO9DX5bj+ubEccRp
H7Z3CV4nAOY5QJQjXL6WmHCVPvWcf7dh+2/149g/XHa6TvCYSbqi70BcYQzaNeGX
CQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:15 2026 by rpki-client