
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B0F45E9A2F7911EEAACBD155C4F9AE02.roa
File: B0F45E9A2F7911EEAACBD155C4F9AE02.roa (raw, json)
Hash identifier: KdCVmfz8DArdRkSMnd5oeDuerHX1cjvk9DgwVhHLX3I=
Subject key identifier: 37:BC:32:93:53:B9:1D:CA:EE:4A:92:08:5F:F5:43:AC:E7:04:81:39
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D8CA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B0F45E9A2F7911EEAACBD155C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:56:22 +0000
ROA not before: Thu 08 May 2025 16:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59170
IP address blocks: 45.113.76.0/22 maxlen: 22
45.113.76.0/24 maxlen: 24
45.113.77.0/24 maxlen: 24
45.113.78.0/24 maxlen: 24
45.113.79.0/24 maxlen: 24
103.52.224.0/22 maxlen: 22
103.52.224.0/24 maxlen: 24
103.52.225.0/24 maxlen: 24
103.52.226.0/24 maxlen: 24
103.52.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55498 (0xd8ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c416-ef83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:f0:f8:e3:1b:d0:7e:ac:37:cb:24:49:40:
c7:ca:85:49:68:fc:97:06:c6:c7:c7:b5:43:ac:cb:
04:7a:2c:0c:c2:49:1a:34:59:ae:8d:81:89:4c:0e:
a2:09:6b:bf:45:d6:6e:6f:c9:fe:b8:2c:34:a3:c8:
64:6d:34:64:8f:ef:98:46:d2:03:8e:3e:a0:5e:c7:
b7:21:16:62:12:cb:b9:c4:73:c2:dc:ad:aa:64:de:
ce:28:47:11:7c:d4:c6:5d:b7:6e:0a:2a:c8:1f:6a:
f6:70:e1:91:3a:6f:18:9f:ce:1a:7e:be:55:60:55:
39:a0:8c:43:a3:3e:cf:b1:b1:4d:ac:22:ae:ea:6e:
c5:bc:e6:0e:a8:b9:19:4d:36:35:65:55:f2:32:3c:
c1:dd:14:e6:06:ab:f4:bc:11:fe:3f:80:9f:89:07:
6c:3c:6d:e5:e5:3f:2c:f7:17:46:5c:5e:7f:9e:25:
e7:8f:4a:e9:5d:9b:cf:a6:6a:6e:65:3d:6a:74:31:
ab:72:1a:83:1f:f0:2a:e5:03:3f:77:e1:b0:52:ab:
72:be:8b:50:95:d8:ce:d5:25:6c:ab:ef:42:47:7a:
a9:f7:82:5a:4c:c8:9e:63:89:3d:8b:80:de:7a:30:
ba:1d:e0:20:f7:14:a1:a2:71:9b:ca:45:70:9d:c6:
a5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BC:32:93:53:B9:1D:CA:EE:4A:92:08:5F:F5:43:AC:E7:04:81:39
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B0F45E9A2F7911EEAACBD155C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.113.76.0/22
103.52.224.0/22
Signature Algorithm: sha256WithRSAEncryption
83:11:d1:9f:3d:2c:a4:e7:f6:90:f2:b6:7b:3a:7a:8a:7b:de:
f1:e3:22:08:20:a6:4d:ce:eb:bc:02:2f:a5:23:b1:91:01:93:
96:b2:33:94:c1:ec:23:47:e8:2f:fa:94:55:93:da:a0:e6:e8:
23:b8:21:01:54:81:17:aa:2e:5b:fd:3d:70:bf:74:f7:11:65:
93:46:3a:4e:0d:35:e7:5b:e2:ef:48:ca:f4:5f:57:25:0b:5c:
fd:e0:6f:b4:f6:17:cf:49:18:fe:bc:eb:91:31:8a:44:b9:46:
a2:d6:3c:e6:65:b2:7f:f9:e7:a7:aa:07:09:d6:16:f8:52:ac:
7a:71:33:8e:91:f7:d8:ec:f7:52:61:f8:bd:f6:56:bc:fa:c9:
b0:9c:db:c3:61:3c:6b:f0:00:59:6b:26:e2:84:da:9e:33:be:
ff:95:4a:72:cd:5c:31:9f:d7:27:3c:93:16:89:0e:26:94:1a:
2e:7c:73:18:f9:a6:2a:a9:ca:c0:48:19:be:e5:83:dc:8f:e6:
91:b8:42:7b:12:33:39:64:08:d5:1a:57:d7:80:5b:10:64:0d:
07:ae:1e:e1:8f:14:70:0c:0d:ae:ce:de:69:63:f8:8a:8f:8c:
aa:10:1e:65:1c:46:f6:d5:32:e9:d5:92:c8:d7:78:42:8d:e2:
fe:a2:cb:24
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDANjKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MzIxMFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGM0MTYtZWY4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALJd8PjjG9B+rDfLJElAx8qFSWj8lwbGx8e1Q6zLBHosDMJJGjRZro2BiUwO
oglrv0XWbm/J/rgsNKPIZG00ZI/vmEbSA44+oF7HtyEWYhLLucRzwtytqmTezihH
EXzUxl23bgoqyB9q9nDhkTpvGJ/OGn6+VWBVOaCMQ6M+z7GxTawirupuxbzmDqi5
GU02NWVV8jI8wd0U5gar9LwR/j+An4kHbDxt5eU/LPcXRlxef54l549K6V2bz6Zq
bmU9anQxq3Iagx/wKuUDP3fhsFKrcr6LUJXYztUlbKvvQkd6qfeCWkzInmOJPYuA
3nowuh3gIPcUoaJxm8pFcJ3GpX0CAwEAAaOCAmYwggJiMB0GA1UdDgQWBBQ3vDKT
U7kdyu5Kkghf9UOs5wSBOTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0IwRjQ1RTlB
MkY3OTExRUVBQUNCRDE1NUM0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAi1xTAMEAmc04DANBgkqhkiG9w0BAQsFAAOCAQEAgxHRnz0spOf2
kPK2ezp6inve8eMiCCCmTc7rvAIvpSOxkQGTlrIzlMHsI0foL/qUVZPaoOboI7gh
AVSBF6ouW/09cL909xFlk0Y6Tg0151vi70jK9F9XJQtc/eBvtPYXz0kY/rzrkTGK
RLlGotY85mWyf/nnp6oHCdYW+FKsenEzjpH32Oz3UmH4vfZWvPrJsJzbw2E8a/AA
WWsm4oTanjO+/5VKcs1cMZ/XJzyTFokOJpQaLnxzGPmmKqnKwEgZvuWD3I/mkbhC
exIzOWQI1RpX14BbEGQNB64e4Y8UcAwNrs7eaWP4io+MqhAeZRxG9tUy6dWSyNd4
Qo3i/qLLJA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:06 2026 by rpki-client