
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B2BC4E804C0B11EB8DA2FD26C4F9AE02.roa
File: B2BC4E804C0B11EB8DA2FD26C4F9AE02.roa (raw, json)
Hash identifier: 1jLNzV46xOrzXNmgLr3WXyCerPXzr4qFRNDfRuk6YhA=
Subject key identifier: A0:18:32:42:EC:14:E2:0D:CD:BD:9C:E0:00:B6:EE:BB:8E:67:E3:8B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D570
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B2BC4E804C0B11EB8DA2FD26C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:37:59 +0000
ROA not before: Thu 08 May 2025 16:16:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141481
IP address blocks: 103.160.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54640 (0xd570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:16:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bfc7-8bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:61:4f:c0:29:6b:5b:a9:18:49:a3:5b:5c:
d8:a3:21:fd:48:a4:a4:98:a8:76:08:45:2a:3c:dd:
e8:b7:f4:ad:42:bd:f7:34:04:4d:18:38:d6:c3:7b:
8d:87:db:1d:6f:3e:b0:05:15:05:72:64:cf:b5:2c:
bc:c1:44:85:8b:54:95:e5:56:ec:85:9b:2a:a8:ae:
e6:26:99:97:60:35:14:bb:21:f4:bd:1f:05:dd:8f:
45:f3:e6:e8:ba:57:a4:68:c3:8e:43:9a:28:68:62:
9a:a1:27:ec:5a:f9:cb:21:97:1b:83:21:fe:b5:15:
6d:7a:37:b0:02:c7:53:15:01:7c:43:f0:33:25:70:
d5:a2:fc:1c:76:4b:4c:66:49:3b:1a:ad:38:2c:c4:
56:b6:72:b4:db:c7:eb:1f:7e:de:62:0e:89:34:9f:
c1:57:a5:72:6f:83:50:e5:53:80:e2:06:0c:be:9d:
02:d7:e0:25:4c:35:e4:80:66:f8:70:6a:6b:af:8e:
a2:7c:b9:2b:c0:92:c7:18:87:53:b1:51:54:3c:80:
5f:2c:3c:7c:27:16:15:de:02:e7:5e:91:4e:92:80:
6a:98:41:43:9e:ff:b5:4c:3d:f8:e5:74:f1:70:a5:
01:d3:f6:06:3a:0b:ec:43:77:0d:9d:02:a6:e5:2f:
76:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:18:32:42:EC:14:E2:0D:CD:BD:9C:E0:00:B6:EE:BB:8E:67:E3:8B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B2BC4E804C0B11EB8DA2FD26C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.160.234.0/23
Signature Algorithm: sha256WithRSAEncryption
81:94:b6:cd:ff:5e:e6:a2:fa:0e:af:1b:b4:4c:5d:45:b3:5a:
6e:74:57:a7:dc:bb:0f:bd:5f:30:d7:c4:b5:a7:0c:8c:3c:dc:
7f:ff:08:66:45:1a:7c:e9:89:6b:6d:0f:4a:dc:fc:87:52:0e:
c9:58:da:10:0f:f7:3f:7a:5b:dc:62:c9:f2:b7:04:af:0d:23:
3a:3f:e2:6a:00:cd:85:39:a4:1b:9c:5f:b8:e6:5f:97:01:1f:
bb:bb:74:94:23:6c:a2:79:d0:bb:aa:80:c0:97:d8:78:3d:85:
38:98:4a:8d:2d:0c:d7:ec:71:1c:15:7d:15:13:bf:78:24:ff:
2d:31:c2:4e:48:1f:8f:96:2e:03:29:92:af:a5:14:ef:61:8f:
cb:30:4d:93:a1:2f:72:fe:97:00:f7:d4:09:4d:88:2a:4d:40:
a5:cd:e6:0b:73:7b:2a:24:0c:f7:27:f8:da:dc:f4:d1:7a:4d:
14:bc:b1:45:14:e9:d5:05:56:65:d3:d2:1e:3b:6a:54:d7:c0:
ee:72:4d:a0:b2:38:cc:e3:5f:95:6d:43:df:6a:e0:0d:0d:56:
40:bd:8a:8a:19:fe:3d:06:e7:ab:d6:a4:72:15:29:4e:9d:ed:
d6:e0:60:bb:d5:dd:9e:82:37:d2:51:f8:9d:e2:58:9e:30:e9:
56:e6:55:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:15 2026 by rpki-client