
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B4E8C2F89B8B11EC98C88432C4F9AE02.roa
File: B4E8C2F89B8B11EC98C88432C4F9AE02.roa (raw, json)
Hash identifier: 0gAXGgziIy9htvyLKzjXYYiQTL8vh3sbtP2UE5Hv6G0=
Subject key identifier: A7:62:56:F2:E1:9E:0D:02:3C:B1:65:48:41:D2:DF:16:DD:A5:B3:CE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D4F1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B4E8C2F89B8B11EC98C88432C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:35:02 +0000
ROA not before: Thu 08 May 2025 16:13:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139544
IP address blocks: 103.181.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54513 (0xd4f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:13:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bf15-72b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:61:dc:cf:f6:95:f6:a2:36:03:ae:62:8e:
b3:4f:c0:02:7d:ed:f0:fd:3f:6f:b6:a9:1e:a2:c5:
ae:f3:d0:e8:e8:9f:9e:ad:9f:07:8b:d1:78:8d:3f:
65:ff:0d:36:c6:9a:76:93:e6:1f:8e:ac:b1:8c:29:
9c:80:3d:18:05:99:43:a0:ae:ee:f9:61:ef:e9:0f:
ed:99:fe:93:38:1e:cd:2d:66:98:80:2b:13:4c:a9:
ed:8e:f5:3c:b8:2a:40:3e:17:9f:2f:2b:16:c5:80:
11:ba:af:86:3f:35:21:c9:cc:6a:32:c6:f6:4d:b2:
5e:ec:2b:c4:7d:99:62:5c:c1:97:d1:78:de:59:88:
bf:53:c9:e4:b6:c7:39:22:2b:af:38:4a:74:42:f2:
80:62:96:46:dc:74:dd:f2:88:c4:2d:fe:4d:34:7d:
e7:d8:51:77:e8:9f:f6:6b:81:7f:95:b7:25:56:36:
39:33:49:2c:aa:b6:58:3f:41:0d:de:b9:05:81:24:
95:49:b3:5b:65:6c:87:8e:80:3f:ab:4b:92:5d:58:
ba:62:47:e5:57:93:48:1e:ea:d6:a3:6b:50:ab:f8:
44:7e:93:ad:b2:5a:c9:a1:03:b5:70:20:23:ef:5c:
9c:d9:b6:91:e2:cc:3d:d9:d9:d3:59:ee:ba:d4:18:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:62:56:F2:E1:9E:0D:02:3C:B1:65:48:41:D2:DF:16:DD:A5:B3:CE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B4E8C2F89B8B11EC98C88432C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.181.19.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:58:a3:98:ac:ff:33:b9:b1:b8:bc:cc:e7:28:a7:ce:ae:31:
9b:0b:9b:3c:f6:4d:87:d2:fa:d6:a8:e7:53:42:24:17:97:f0:
ed:82:b6:22:05:a3:cb:aa:b7:63:31:3c:87:83:32:50:83:2c:
fb:ee:af:6e:ff:95:18:31:91:f5:4d:9e:e9:c8:13:25:e4:bb:
cd:7a:99:0c:7b:97:bd:85:58:f8:cd:8d:03:67:63:2b:79:13:
1e:f2:34:69:79:9f:bb:89:2d:1f:42:c8:0e:0e:81:59:5d:00:
1a:d1:f7:a7:40:d8:24:f5:c7:e3:69:95:6b:c7:18:40:10:5e:
84:11:b0:f9:e7:85:17:b9:a9:4b:1a:2c:e0:4a:0f:78:70:58:
93:f7:a8:b5:2a:d3:91:3d:c2:15:3c:d1:6d:07:6c:a3:9c:e2:
26:4f:07:c2:22:d4:e9:84:05:ca:1a:1a:66:4f:58:75:b9:9c:
2a:ce:bc:b6:32:7e:33:e9:18:27:3d:2c:b4:1d:d0:91:b4:63:
79:e5:bc:68:01:c8:3e:33:bf:9c:d9:40:c0:2f:e5:de:e8:8f:
1f:cd:e0:68:2e:0a:91:53:89:a2:b8:bc:34:83:d8:99:e3:78:
42:51:08:ec:b7:4c:4f:fb:f6:6a:59:7a:c7:75:3b:1e:98:3b:
2f:2c:c2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:17 2026 by rpki-client