
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8B53FA8252F11EDA2A99B4FC4F9AE02.roa
File: D8B53FA8252F11EDA2A99B4FC4F9AE02.roa (raw, json)
Hash identifier: gNxH1Alw07Q6VOvgPgEYE7y+TjGGR25oqEJIzmUuOok=
Subject key identifier: 2C:82:F4:6D:87:7E:E4:1F:AF:BA:7A:99:B7:04:6E:C2:79:74:2A:CF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D749
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8B53FA8252F11EDA2A99B4FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:49:15 +0000
ROA not before: Thu 08 May 2025 16:24:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150074
IP address blocks: 103.91.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55113 (0xd749)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:24:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c26b-71c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:17:a3:72:35:a9:a9:46:83:8f:b7:0b:77:f4:
24:4d:14:d6:52:31:31:14:4e:ca:4f:16:04:d1:b6:
f6:2e:12:c5:2d:a8:bb:26:43:51:80:b5:41:0d:88:
d6:54:dd:76:b2:08:37:af:1d:86:48:8c:05:f6:d9:
ae:e8:bd:60:dd:a5:8c:84:6b:f9:12:4c:f5:af:f9:
60:4e:e9:a6:8d:13:72:b1:98:36:1d:63:aa:96:76:
96:0f:c3:c7:9d:5e:18:70:1c:d4:a6:8c:d4:31:c1:
86:a9:87:8b:b6:07:36:27:78:f7:24:14:d4:5a:b1:
f5:fa:5e:c8:1b:55:ab:75:a4:79:e7:c6:30:7f:0e:
41:fe:a3:52:2e:ab:b4:3b:de:3d:dc:67:d8:45:1c:
14:32:e8:b4:e1:bc:d9:5c:a6:53:93:06:20:8e:3d:
bf:b9:c9:01:1e:ff:65:38:af:6b:78:95:be:59:6a:
6a:eb:16:95:bf:90:4d:59:42:4e:66:75:62:ca:98:
ae:51:ea:5d:a5:b5:29:78:8a:83:ef:78:4e:fc:ed:
3d:bd:e6:fd:a8:2d:68:57:0e:cd:8a:ef:03:1b:a6:
1b:b3:44:62:f7:0c:92:57:da:64:f5:cb:06:9d:bf:
e0:d0:ea:38:3a:6a:66:c6:4e:29:c5:81:8c:0a:7c:
f9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:82:F4:6D:87:7E:E4:1F:AF:BA:7A:99:B7:04:6E:C2:79:74:2A:CF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8B53FA8252F11EDA2A99B4FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.91.60.0/23
Signature Algorithm: sha256WithRSAEncryption
78:1c:3f:c6:8f:21:55:ba:78:ea:b0:48:f2:3c:bc:9c:c7:32:
63:62:2a:13:9a:cd:aa:c3:d7:38:71:17:29:8b:4c:af:53:3b:
81:54:ef:a3:a0:d8:1b:64:7c:9b:e7:20:f2:78:6f:97:f9:2e:
b8:cf:f5:95:25:e3:fd:05:6e:88:19:ad:f1:fd:8c:9d:59:3c:
da:5c:6c:59:10:78:45:58:56:28:87:9a:51:ba:3b:32:96:8f:
f7:f8:c5:a3:ec:4d:6b:bd:d5:4b:e3:67:43:a8:ec:67:5e:cf:
fb:a6:4d:36:c9:ae:b3:35:cf:9e:9f:0d:ad:f1:f6:f8:e8:72:
74:66:ed:e6:be:59:b0:bd:7b:93:81:98:c3:76:f7:04:3d:9a:
6f:36:77:35:25:49:1d:ae:9c:7e:6a:77:9d:79:d4:ce:24:54:
e1:c2:bb:63:d8:62:3b:e8:5e:54:ac:73:df:32:78:e3:d4:78:
00:b8:7a:9a:77:54:a3:39:8e:c7:94:ba:42:41:15:6c:02:f8:
8a:71:44:7e:81:76:c5:12:42:1a:82:ec:bf:3d:da:c9:bb:dc:
cb:99:10:38:2a:7d:68:5f:0a:7a:b7:c6:b2:9b:ae:98:a6:5f:
4f:c1:a8:d0:96:2e:29:06:a2:b6:52:ea:24:e2:5c:76:f5:58:
6f:b6:7b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:47 2026 by rpki-client