
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B58B40A2404A11EBA10D3C57C4F9AE02.roa
File: B58B40A2404A11EBA10D3C57C4F9AE02.roa (raw, json)
Hash identifier: /WEaILLxXG/Nq8Md06qBt9FqU21SfK3no+KZ7hEX6VI=
Subject key identifier: 5F:82:7C:2C:B1:3F:3B:83:44:85:76:68:4C:60:1A:94:75:AD:22:2A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D569
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B58B40A2404A11EBA10D3C57C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:37:50 +0000
ROA not before: Thu 08 May 2025 16:16:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141335
IP address blocks: 103.160.98.0/23 maxlen: 24
2001:df5:9b80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54633 (0xd569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:16:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bfbd-9115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d2:86:3e:b0:70:22:bc:a2:e8:de:89:d4:0e:
3c:16:e2:1c:8c:68:f6:32:c4:83:7e:53:5e:e4:16:
fc:d5:67:e4:88:1c:3a:a3:a5:29:55:84:f9:b5:1c:
98:ad:ac:7f:c6:05:69:5d:c3:06:08:18:c1:79:f6:
92:b1:5b:c0:50:87:c4:7c:ab:47:7d:ab:ab:3f:e9:
0e:47:a0:7e:77:c4:d8:0a:23:58:3d:8a:00:14:2c:
4a:95:d2:57:ef:da:eb:be:7a:60:f3:0d:61:e7:a0:
ef:c0:ee:21:35:21:3a:fa:9a:72:8a:17:1f:86:8a:
8f:ed:34:9e:98:65:3a:fa:61:1b:d1:69:24:80:78:
18:53:95:fd:b8:32:ec:06:f0:b6:e1:43:5f:96:5c:
ad:82:70:cd:2b:eb:b8:e0:76:ce:01:9d:dd:38:98:
c0:86:c5:1f:5f:fd:56:61:60:55:d1:16:d7:bd:c7:
28:0d:ab:be:7f:2b:c7:35:e6:ad:57:f2:46:20:ca:
69:8a:d6:d4:b6:a8:8b:50:52:ea:5c:f6:ce:c6:4a:
a7:d2:6f:8a:08:7b:79:dc:93:4e:ea:d9:4f:34:f4:
f0:c2:2e:81:d8:fe:be:f5:e9:0c:ba:f5:88:59:fa:
ad:29:7c:fc:8b:74:4a:e4:34:ac:16:8d:49:ea:f8:
44:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:82:7C:2C:B1:3F:3B:83:44:85:76:68:4C:60:1A:94:75:AD:22:2A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B58B40A2404A11EBA10D3C57C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.160.98.0/23
IPv6:
2001:df5:9b80::/48
Signature Algorithm: sha256WithRSAEncryption
3c:5b:9d:18:9c:15:fd:db:ea:ad:4a:55:92:af:44:2a:55:d5:
93:6d:b6:b8:2f:83:db:64:25:a9:24:d4:c6:2b:ac:83:4e:f5:
65:ae:e8:4f:b6:4d:74:b5:9e:c8:e0:d4:c0:25:5e:a8:8a:cf:
c5:1b:ff:a7:70:93:70:29:5b:4c:ed:92:cd:9b:68:f4:7d:c6:
ed:6c:c4:1f:3d:0c:95:b5:2e:d2:86:6f:2b:ca:19:83:68:ca:
2c:fc:c7:f5:ab:a9:59:db:23:75:59:c8:5f:5b:3f:66:06:e1:
9c:03:73:43:d5:93:2f:73:3d:de:ac:78:a0:d5:62:15:27:a6:
2d:cf:43:2a:92:5b:1d:21:e3:f5:e4:4e:d1:97:62:1d:2e:f2:
be:b5:65:2a:d0:bd:82:e0:a6:ec:88:a2:93:29:35:f3:ce:10:
1b:13:83:56:01:5c:a4:23:a3:ac:f7:81:7a:23:c8:8d:4f:94:
26:3f:2e:0f:7b:95:02:43:8a:e5:7b:bd:f2:a5:09:6a:b5:71:
a9:72:e5:ad:e7:f6:3f:69:8f:ab:60:dc:8e:38:c3:15:60:dc:
3a:17:94:35:50:1f:84:8f:a9:e9:a4:98:3d:a5:bb:f9:2b:76:
c6:e6:47:b3:45:ca:19:ec:aa:ea:de:9d:22:e8:b9:cb:9d:11:
cd:b4:b7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:12:10 2026 by rpki-client