
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D4ACA00603CD11ECA480B07CC4F9AE02.roa
File: D4ACA00603CD11ECA480B07CC4F9AE02.roa (raw, json)
Hash identifier: r3DUxHLSE2wA7MG5hd4UpB1Yp9OTAPqgjqoT2/1X8Ck=
Subject key identifier: 83:E6:53:5F:55:F6:C1:E4:01:6F:B4:3A:24:94:82:65:51:4D:E7:8F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D590
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D4ACA00603CD11ECA480B07CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:38:43 +0000
ROA not before: Thu 08 May 2025 16:16:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141534
IP address blocks: 103.167.124.0/24 maxlen: 24
2001:df6:b580::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54672 (0xd590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:16:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bff3-3803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:63:8a:cc:2b:51:53:a2:61:d7:9f:d0:af:
3b:43:c9:65:84:7d:a8:17:65:37:19:9f:7e:50:16:
40:38:db:70:9c:83:6e:2f:20:f1:7d:62:05:9c:bc:
2e:4a:f9:4d:47:75:87:88:4b:85:cc:be:00:59:f3:
d5:24:6f:f3:73:8c:86:57:61:62:1b:1a:e7:e4:ac:
aa:cc:cb:7e:20:27:77:6d:6c:be:8b:86:f2:05:37:
35:9a:6c:bd:ad:49:8e:fd:07:84:85:8c:50:80:7a:
e0:d5:ab:6c:b8:b3:5c:98:62:d3:96:af:35:6c:97:
44:81:cb:58:e9:d9:16:e3:66:17:11:c0:c4:93:9e:
e9:3c:d0:5a:08:a6:73:ab:90:0b:06:0c:ca:0e:5e:
e4:b0:fe:35:52:6d:77:1f:60:40:84:64:ef:b8:cd:
62:d8:82:4f:49:f4:3e:39:4f:2d:f3:71:68:a2:ed:
b0:7c:af:96:4b:c7:eb:2d:b5:a9:fc:86:8b:47:db:
15:2d:0a:e9:8e:5e:1d:12:29:5e:51:13:87:8a:fb:
18:4a:b4:2e:50:3e:74:ea:19:15:9e:c3:47:e0:8e:
f1:d9:a1:a7:58:e9:d0:da:53:95:f2:34:a9:6b:64:
81:c8:12:79:4f:51:be:ac:94:30:3f:13:95:0d:89:
f9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E6:53:5F:55:F6:C1:E4:01:6F:B4:3A:24:94:82:65:51:4D:E7:8F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D4ACA00603CD11ECA480B07CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.124.0/24
IPv6:
2001:df6:b580::/48
Signature Algorithm: sha256WithRSAEncryption
81:eb:08:8b:f5:34:c2:43:42:26:d2:d2:b9:fa:67:f9:1c:68:
c6:2e:06:a4:28:ce:ca:ba:59:ed:9d:9a:60:1c:e2:ec:10:c5:
2e:65:4d:3b:39:b7:3b:b2:34:51:57:fd:a3:e9:40:0b:26:f9:
cc:6c:07:6d:b9:22:68:54:e8:09:ee:7a:65:60:db:e0:85:fa:
08:18:28:06:ea:ba:c3:1c:7d:f9:d7:8f:e0:c3:0f:61:1f:f7:
f9:99:9f:3f:b2:a5:39:14:3b:17:b3:b3:b7:97:ff:12:2a:77:
f1:f8:09:d3:8c:9f:60:f1:16:92:99:0e:c0:5c:a2:30:82:20:
67:57:0e:10:33:97:a8:38:f7:50:8d:d2:82:34:05:7b:4c:3e:
19:ae:ec:c6:94:28:7d:ae:5e:15:0c:f1:8b:7a:78:b9:4b:5a:
25:08:87:1d:02:b7:f9:02:97:8a:1a:a3:a1:7a:f1:71:7b:12:
48:37:6d:de:9a:2a:77:9f:3a:aa:a8:02:6f:b3:c8:ad:aa:b2:
4f:f8:2f:28:48:f1:a1:54:b4:a2:a6:ee:dc:c2:e9:f4:30:e4:
86:59:b6:45:48:54:8e:8f:2b:3c:59:25:34:6e:65:30:6a:b5:
3f:ad:42:08:2d:c0:3c:c0:30:e2:0a:c2:51:79:3e:ec:1c:7a:
12:7c:4b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:48 2026 by rpki-client