
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B9003BB0FD7111EE87C9375BC4F9AE02.roa
File: B9003BB0FD7111EE87C9375BC4F9AE02.roa (raw, json)
Hash identifier: 6ER/b8DSHigisB5EZrzkBA3lPVKOnt2R9r7yeuhRWs4=
Subject key identifier: FA:72:92:D3:E4:5C:CD:00:C1:4C:3F:09:FF:D5:15:6D:9C:B6:1B:D6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D87F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B9003BB0FD7111EE87C9375BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:55:07 +0000
ROA not before: Thu 08 May 2025 16:30:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23528
IP address blocks: 103.11.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55423 (0xd87f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:30:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c3cb-66a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4b:41:f4:2e:fd:ba:04:d9:bf:da:4a:cc:c3:
45:eb:00:a7:68:4b:0c:51:c8:82:da:8d:37:97:c8:
3c:4a:29:b4:d8:51:58:2e:b3:34:ed:cc:28:8f:0d:
6a:de:7b:c3:f3:15:22:07:70:ac:f2:f7:f7:4f:3c:
b2:d3:66:0a:c9:9f:5b:de:08:da:49:61:16:89:a2:
df:7e:f1:3c:a5:0e:5e:5c:48:0a:b6:14:dc:2d:29:
6d:f9:b0:85:59:0f:ea:36:d2:29:66:30:db:27:d6:
af:c0:ae:58:98:eb:b2:f8:3d:9b:5a:ea:97:74:9e:
f6:69:e5:fe:85:b8:f3:58:7d:fa:21:8c:ee:7e:1e:
2a:bc:bb:d1:1e:e0:13:e3:d9:b1:8e:05:03:b2:5a:
e2:03:25:52:7d:57:c1:d9:32:58:fb:e0:85:af:0c:
fd:da:2c:15:54:7b:77:97:a0:aa:73:61:27:c0:2f:
af:cd:a9:5c:e4:4c:e8:11:2d:0e:94:ad:ae:43:e0:
0a:4c:b7:2e:d3:35:f4:e5:29:74:36:0d:df:67:2f:
2e:65:ef:58:ac:9f:d4:55:bb:2b:85:6a:f6:2a:14:
c1:e7:46:47:6e:c2:93:f9:80:dc:1a:a9:c6:32:bf:
fb:69:bc:6d:fd:f9:a1:db:ee:46:56:bb:f7:28:d5:
ad:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:72:92:D3:E4:5C:CD:00:C1:4C:3F:09:FF:D5:15:6D:9C:B6:1B:D6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B9003BB0FD7111EE87C9375BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.11.244.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:54:f4:f7:45:61:1f:c4:78:f1:4c:62:42:63:d8:d6:b1:b7:
05:8a:8c:16:6f:2b:66:79:e8:29:fb:f9:1f:a8:91:b3:32:36:
6b:24:43:cf:5b:62:ed:59:12:5e:14:6c:88:c6:be:b8:46:15:
3a:61:f9:f2:44:31:fc:12:72:ed:da:b2:50:b4:85:1f:53:b7:
2c:ad:70:28:e8:58:2b:38:ad:c2:08:39:87:5c:5b:98:0d:bf:
cb:73:51:f1:d3:e0:4c:58:44:42:b6:73:24:ec:86:a3:38:9d:
1e:ef:74:a6:6a:44:8a:96:08:4d:14:3c:45:4d:f8:8d:cb:9b:
18:67:f5:f5:10:30:15:f1:63:50:5b:28:9e:0a:71:74:6e:a9:
ff:63:6a:10:47:de:be:4e:9c:ab:eb:dc:4e:3f:00:13:e3:55:
8a:33:4a:e9:45:d2:57:67:5f:ee:8f:66:43:fc:53:7e:e0:2f:
98:1f:98:ad:fb:8d:f2:80:3f:b7:ac:bd:1d:5d:fd:dd:bd:56:
eb:78:80:0c:3e:60:69:3f:9e:46:12:de:b1:da:d5:f4:4d:a8:
99:e1:36:74:1c:de:4f:ed:6c:a0:1e:98:89:f2:52:54:e1:64:
00:83:0b:ef:de:a8:8f:ab:11:10:74:51:15:df:bf:52:65:5d:
7c:77:f6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:32 2026 by rpki-client