
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CDF31D0A8B5111ED81ECD33AC4F9AE02.roa
File: CDF31D0A8B5111ED81ECD33AC4F9AE02.roa (raw, json)
Hash identifier: j0QvYenuwqP6pkzBzyO/nq3y00L+oVtJaJsqLq7tlRk=
Subject key identifier: 4C:3D:9F:73:8B:DE:9C:10:72:80:19:66:F4:2A:2B:47:55:33:EE:0F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D778
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CDF31D0A8B5111ED81ECD33AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:50:20 +0000
ROA not before: Thu 08 May 2025 16:25:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150607
IP address blocks: 103.114.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55160 (0xd778)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:25:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c2ac-bc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:2e:d5:2c:5e:4b:1f:29:45:1d:cc:bd:c9:
f4:d2:01:4d:58:77:58:28:93:8c:47:48:51:a7:7d:
06:65:6d:e6:61:5a:60:a5:ab:93:72:52:cf:73:b8:
68:78:04:b6:b5:14:a3:29:b7:eb:48:b2:21:4f:a8:
c2:cd:4b:38:5f:20:6e:6f:76:87:70:0b:fd:c0:12:
37:04:77:ea:c2:1c:0e:29:20:8c:35:69:7e:74:dc:
05:36:52:34:f4:9f:06:ec:92:8f:22:b0:34:73:5b:
7c:c0:b8:c6:90:52:b6:20:3a:e4:fa:8b:5d:2c:80:
c4:f6:ef:fe:5e:87:e4:db:cc:cb:52:4b:08:85:2b:
cc:a4:6d:f1:f7:0f:c5:9f:df:9f:42:79:21:f1:50:
6f:c5:51:af:dd:42:bc:b2:76:5f:2e:d4:95:31:9d:
f6:7b:96:f5:5b:38:1e:8f:d6:cb:86:07:e0:69:3d:
02:bf:d8:46:e9:0e:23:c5:98:24:fe:e2:39:d2:f8:
55:37:5d:4b:b0:f2:5f:d3:b6:bf:3d:be:d5:66:32:
89:a8:0c:da:a8:4e:57:cc:30:80:6c:16:db:39:cb:
57:04:5f:73:a0:1d:89:13:08:07:36:4f:e6:cd:fb:
01:77:d2:9c:08:3a:c0:41:1c:23:c2:06:67:32:70:
05:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3D:9F:73:8B:DE:9C:10:72:80:19:66:F4:2A:2B:47:55:33:EE:0F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CDF31D0A8B5111ED81ECD33AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.114.63.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:cc:3e:72:3d:5b:6f:34:00:db:ce:98:55:5a:6c:8c:9c:d4:
14:0f:e1:72:0f:68:10:96:c3:0e:ba:97:71:e0:99:a8:d1:e7:
80:ef:16:7c:2c:06:33:0b:e2:e0:3a:93:02:ee:8f:8c:a6:00:
7f:34:ab:00:85:bb:a0:90:11:fb:a1:64:9a:7a:50:c3:3f:f1:
90:ae:c8:a5:6e:66:8c:a9:42:bb:83:9d:79:04:fc:13:86:d5:
09:78:7e:4f:11:5d:ee:29:5e:b2:9f:69:8e:9d:13:7f:41:9c:
28:5f:f0:b1:ab:f0:ba:35:72:8d:b0:80:df:c6:88:84:f2:e4:
a9:1c:09:b7:3b:6c:64:85:0a:66:73:77:b2:b6:c7:70:10:f3:
98:40:d7:14:ac:10:ec:87:d0:d7:eb:a3:21:59:f1:83:ea:06:
89:3c:97:29:c9:4b:82:cd:88:41:13:ff:e6:63:b0:a2:e7:99:
ef:9b:bc:a0:b7:8d:6e:f4:24:f4:7c:70:2b:b7:4b:7e:5f:fe:
35:dd:e0:f3:9c:ac:30:d2:52:ee:d2:8a:f5:4f:ed:14:fb:e7:
c1:3c:66:b9:c2:29:fc:fd:20:89:25:d6:d2:2c:5b:61:cc:05:
b7:1c:03:de:2a:b2:18:80:66:09:dc:b3:b4:20:7b:99:53:c7:
17:6b:af:8c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDANd4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MjUyOFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGMyYWMtYmM5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKeULtUsXksfKUUdzL3J9NIBTVh3WCiTjEdIUad9BmVt5mFaYKWrk3JSz3O4
aHgEtrUUoym360iyIU+ows1LOF8gbm92h3AL/cASNwR36sIcDikgjDVpfnTcBTZS
NPSfBuySjyKwNHNbfMC4xpBStiA65PqLXSyAxPbv/l6H5NvMy1JLCIUrzKRt8fcP
xZ/fn0J5IfFQb8VRr91CvLJ2Xy7UlTGd9nuW9Vs4Ho/Wy4YH4Gk9Ar/YRukOI8WY
JP7iOdL4VTddS7DyX9O2vz2+1WYyiagM2qhOV8wwgGwW2znLVwRfc6AdiRMIBzZP
5s37AXfSnAg6wEEcI8IGZzJwBZcCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRMPZ9z
i96cEHKAGWb0KitHVTPuDzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0NERjMxRDBB
OEI1MTExRUQ4MUVDRDMzQUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGdyPzANBgkqhkiG9w0BAQsFAAOCAQEAH8w+cj1bbzQA286YVVps
jJzUFA/hcg9oEJbDDrqXceCZqNHngO8WfCwGMwvi4DqTAu6PjKYAfzSrAIW7oJAR
+6FkmnpQwz/xkK7IpW5mjKlCu4OdeQT8E4bVCXh+TxFd7ilesp9pjp0Tf0GcKF/w
savwujVyjbCA38aIhPLkqRwJtztsZIUKZnN3srbHcBDzmEDXFKwQ7IfQ1+ujIVnx
g+oGiTyXKclLgs2IQRP/5mOwoueZ75u8oLeNbvQk9HxwK7dLfl/+Nd3g85ysMNJS
7tKK9U/tFPvnwTxmucIp/P0giSXW0ixbYcwFtxwD3iqyGIBmCdyztCB7mVPHF2uv
jA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:16 2026 by rpki-client