
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7FAEE7CFE1E11EAB49F5939C4F9AE02.roa
File: C7FAEE7CFE1E11EAB49F5939C4F9AE02.roa (raw, json)
Hash identifier: sz08aqKXoTgj3uvXE4zOY8Bp7nJmCYolO9sgLMKKL9o=
Subject key identifier: 95:4B:B9:19:43:95:10:DC:DF:48:5E:BE:19:B7:A1:78:B2:CD:C1:83
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D534
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7FAEE7CFE1E11EAB49F5939C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:36:37 +0000
ROA not before: Thu 08 May 2025 16:14:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140203
IP address blocks: 103.155.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54580 (0xd534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:14:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bf75-811b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:72:25:ba:6e:61:50:dd:7f:0d:b9:49:4e:91:
b1:b8:f0:2a:5a:69:f4:1b:39:e5:7a:59:dd:64:c1:
ce:a5:de:01:08:64:86:d9:29:3a:15:58:3e:29:77:
53:8e:98:64:08:71:b4:13:b9:d7:b9:b0:92:2b:e0:
96:4f:eb:db:a4:f8:0e:64:73:ea:e9:91:5c:94:0e:
0b:f8:cc:65:96:81:e1:ec:0a:61:c2:28:ac:99:63:
99:7f:34:f5:b4:48:72:ba:c8:83:76:2c:d8:8b:b1:
52:76:4c:18:6c:30:2a:31:8a:fb:94:b3:72:b1:7e:
86:e2:04:5d:bc:e1:7e:8d:65:db:02:a2:4e:b7:09:
aa:3b:a7:87:4e:91:b9:80:a7:9b:e0:b3:af:78:b0:
6d:72:39:2a:60:91:38:42:d8:d8:8c:e0:aa:27:ba:
58:14:b8:55:3b:74:60:c9:97:0f:f5:40:5c:9e:15:
c7:fe:fb:91:d3:61:80:56:e8:21:4a:8f:84:64:0f:
cf:ee:81:77:31:ff:01:cf:92:e0:6f:09:aa:a4:d8:
91:14:cb:b6:ec:29:dd:30:5f:99:c6:cb:eb:25:db:
05:9c:c5:81:49:be:60:ce:e3:85:72:2d:9a:4f:81:
6b:e6:90:16:09:16:bb:88:cf:94:f7:88:f3:f1:67:
91:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4B:B9:19:43:95:10:DC:DF:48:5E:BE:19:B7:A1:78:B2:CD:C1:83
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7FAEE7CFE1E11EAB49F5939C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.155.220.0/24
Signature Algorithm: sha256WithRSAEncryption
38:03:1f:e5:59:06:01:e1:2e:41:6a:f3:8d:ec:ca:28:17:b0:
ea:d1:8e:32:54:d1:1a:96:4f:b1:b3:de:ea:1e:0e:d2:04:6f:
c6:c8:d1:de:23:cc:f3:07:cd:d0:99:a6:52:e7:3e:c2:1a:fa:
63:f2:70:f9:7b:9b:04:c1:66:4d:8e:ae:7f:6d:2f:28:8f:34:
ca:a3:b3:96:6b:4e:31:f2:50:6d:91:58:87:f7:cd:81:d4:c7:
cc:4e:b8:2a:a9:1c:80:c4:e6:83:bd:e5:74:97:19:de:6c:bb:
48:5e:31:18:a8:1d:66:06:1a:00:e3:84:ab:9c:01:2d:a0:75:
31:21:58:00:ee:85:85:2e:33:fc:79:33:f0:7d:56:af:72:3b:
bd:94:89:5a:bb:1a:a6:58:8e:2d:f6:a5:cf:7e:b2:c3:af:bf:
e6:21:06:fa:6c:bf:53:db:83:88:f8:d2:00:cb:90:f6:e3:46:
b5:fc:d8:61:27:41:c2:ba:6a:0b:b8:c5:5f:21:96:e2:79:85:
bf:c4:e8:71:66:86:a8:5a:96:bb:af:81:ee:05:4d:c7:d8:16:
f8:51:f5:75:16:19:7d:2e:46:96:48:8c:bf:ed:eb:1c:d1:3a:
ba:7b:ca:75:6f:4f:89:1d:95:e5:7f:8d:22:b2:14:69:bf:96:
46:83:09:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:54 2026 by rpki-client