
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8D6098E458A11EEA6299718C4F9AE02.roa
File: B8D6098E458A11EEA6299718C4F9AE02.roa (raw, json)
Hash identifier: 74mYTNlM5D4tkvfw5idc9LurvUIwqe7mz8/lNfoQhCU=
Subject key identifier: 10:74:23:AD:24:DD:65:CA:A5:4F:00:88:B7:1C:EC:B2:24:CE:3B:47
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D238
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8D6098E458A11EEA6299718C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:18:42 +0000
ROA not before: Thu 08 May 2025 15:59:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133990
IP address blocks: 103.54.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53816 (0xd238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 15:59:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bb42-f361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:de:c1:09:62:56:16:a0:68:0e:40:1f:8a:
74:14:57:7f:82:7c:99:8a:97:36:cd:e9:d6:2a:45:
8e:d8:cc:d1:32:cc:36:70:d5:42:40:71:b3:eb:17:
e3:1b:c3:c0:ec:bc:e6:82:68:44:2b:d7:08:70:d9:
31:6a:62:1d:24:a0:c7:05:b3:1d:2f:21:d7:a4:e7:
af:f9:09:10:2e:4d:91:72:33:5e:44:b4:08:52:65:
84:50:1e:33:b5:38:2b:a6:b3:99:49:59:e7:ab:1a:
05:03:22:99:79:e4:e2:51:5f:89:ed:8c:94:63:90:
9b:3e:75:20:3f:f3:7f:f4:50:7e:bf:2f:17:95:71:
fb:f5:23:e6:52:f0:a4:9a:9c:c6:d5:bd:57:61:84:
03:43:29:20:01:a0:43:69:b2:ed:3e:5f:7f:9d:e0:
17:79:cd:1b:d8:05:9e:dd:3a:28:e8:7b:dc:17:d9:
82:c0:1e:81:07:66:14:98:ef:8b:3f:ff:55:df:99:
2d:f1:07:43:0f:0b:88:37:2e:64:11:5f:0b:3c:50:
11:cb:b3:46:6c:2a:65:f5:f7:ee:6f:ad:e9:aa:1f:
a9:b8:cf:22:5a:97:18:56:4e:12:a9:c8:8a:69:5c:
56:5f:c5:09:94:7a:19:f6:f0:54:cc:c0:61:ac:79:
a8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:74:23:AD:24:DD:65:CA:A5:4F:00:88:B7:1C:EC:B2:24:CE:3B:47
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8D6098E458A11EEA6299718C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.54.173.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:19:4d:3e:ee:3e:bb:63:34:69:64:f9:88:85:7b:d4:16:69:
20:1a:65:4e:89:a2:1b:7a:7b:9c:95:c0:a2:cf:68:6e:aa:48:
3d:98:71:ac:d0:83:12:43:f8:3d:84:a0:f5:2d:47:42:28:3d:
cd:53:7f:a2:ba:c5:1a:69:a4:5f:fc:de:9a:aa:42:0d:8c:af:
c5:8f:7c:b8:38:d4:4f:68:c7:aa:10:ac:62:f1:2c:60:39:09:
7f:10:3d:7a:49:68:a1:b6:e5:27:25:f9:08:c1:1b:04:33:5c:
ae:d9:a9:de:ec:20:e6:f5:05:fe:da:57:81:64:d4:42:d6:89:
10:f9:78:0b:a7:30:ab:9a:c7:88:52:08:1a:8e:d5:4f:b9:15:
ae:dc:9d:20:4a:8d:ef:db:02:0c:5c:b0:70:d6:80:e1:f5:5f:
eb:86:55:20:5f:42:73:5b:c8:ee:51:a7:05:a1:fb:2b:a5:14:
f7:41:cf:2a:81:32:99:97:1e:17:3f:6a:8a:3d:78:47:a5:a1:
f0:df:1b:b9:f8:dc:68:01:35:74:9e:db:d2:59:9f:8d:8d:3c:
b9:65:95:54:f6:82:bd:df:05:87:c2:29:01:5d:e3:2f:16:21:
4a:18:7d:f1:17:e8:62:bd:88:8b:1d:aa:21:f2:96:a0:85:bb:
f8:6d:bf:e5
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDANI4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE1NTk1OVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGJiNDItZjM2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALDi3sEJYlYWoGgOQB+KdBRXf4J8mYqXNs3p1ipFjtjM0TLMNnDVQkBxs+sX
4xvDwOy85oJoRCvXCHDZMWpiHSSgxwWzHS8h16Tnr/kJEC5NkXIzXkS0CFJlhFAe
M7U4K6azmUlZ56saBQMimXnk4lFfie2MlGOQmz51ID/zf/RQfr8vF5Vx+/Uj5lLw
pJqcxtW9V2GEA0MpIAGgQ2my7T5ff53gF3nNG9gFnt06KOh73BfZgsAegQdmFJjv
iz//Vd+ZLfEHQw8LiDcuZBFfCzxQEcuzRmwqZfX37m+t6aofqbjPIlqXGFZOEqnI
imlcVl/FCZR6GfbwVMzAYax5qCkCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQQdCOt
JN1lyqVPAIi3HOyyJM47RzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0I4RDYwOThF
NDU4QTExRUVBNjI5OTcxOEM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGc2rTANBgkqhkiG9w0BAQsFAAOCAQEAThlNPu4+u2M0aWT5iIV7
1BZpIBplTomiG3p7nJXAos9obqpIPZhxrNCDEkP4PYSg9S1HQig9zVN/orrFGmmk
X/zemqpCDYyvxY98uDjUT2jHqhCsYvEsYDkJfxA9ekloobblJyX5CMEbBDNcrtmp
3uwg5vUF/tpXgWTUQtaJEPl4C6cwq5rHiFIIGo7VT7kVrtydIEqN79sCDFywcNaA
4fVf64ZVIF9Cc1vI7lGnBaH7K6UU90HPKoEymZceFz9qij14R6Wh8N8bufjcaAE1
dJ7b0lmfjY08uWWVVPaCvd8Fh8IpAV3jLxYhShh98RfoYr2Iix2qIfKWoIW7+G2/
5Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:35 2026 by rpki-client