
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB260F28329611EDB48BD746C4F9AE02.roa
File: DB260F28329611EDB48BD746C4F9AE02.roa (raw, json)
Hash identifier: 3L2ZeC7zVJ6+sy73a8zZor+FD8IvhcjKRkt8iJ8vWKk=
Subject key identifier: B7:AC:38:13:0D:D0:B6:48:EF:19:8C:D7:7F:08:B9:F0:3F:0B:D8:53
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D436
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB260F28329611EDB48BD746C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:30:26 +0000
ROA not before: Thu 08 May 2025 16:10:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137616
IP address blocks: 103.114.220.0/22 maxlen: 24
2001:df1:7440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54326 (0xd436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:10:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4be02-6fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:27:c4:51:80:64:22:4a:b7:89:0c:72:74:48:
c5:44:2c:b0:9b:d4:5f:73:f9:81:ad:51:ad:42:7d:
b3:75:eb:8a:1b:cf:8e:81:a2:a4:96:64:11:5f:ff:
94:83:a9:a1:bc:8e:41:c0:8e:6f:0b:66:0c:25:6f:
9d:1a:e3:b4:b6:75:00:5a:a3:10:8e:dc:7d:fb:71:
1b:cb:0d:b8:63:e9:43:f7:91:47:69:dc:0a:1f:3e:
b6:38:49:0f:dd:f9:8d:15:de:1e:58:6d:c7:ab:0d:
72:67:8b:ee:63:80:e7:9f:6d:71:82:98:94:24:2f:
3c:a3:25:39:32:08:89:50:53:6f:e8:ac:cc:06:4e:
fc:63:ab:bc:59:25:b9:01:1a:49:19:cb:89:7f:9f:
8f:99:ee:75:32:9c:34:fb:18:cf:35:a1:ef:7e:be:
ba:db:8c:52:3a:64:c2:83:11:72:e7:de:0f:22:4d:
47:3a:80:70:ac:63:eb:f0:57:a8:e5:dc:5f:e5:58:
9e:03:4b:e8:15:44:27:9b:77:5a:ed:14:04:be:e9:
59:8f:34:ce:7e:f9:63:ed:f4:44:25:f5:a6:29:0a:
9c:58:f4:78:74:f5:38:b1:58:cf:ec:14:e4:58:b4:
de:a2:a3:87:da:64:62:d4:8c:b7:63:6b:f6:2b:72:
f0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AC:38:13:0D:D0:B6:48:EF:19:8C:D7:7F:08:B9:F0:3F:0B:D8:53
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB260F28329611EDB48BD746C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.114.220.0/22
IPv6:
2001:df1:7440::/48
Signature Algorithm: sha256WithRSAEncryption
b6:9d:b5:76:2d:03:10:e9:86:cd:f4:d3:d9:0e:a7:99:6d:f4:
9f:21:d1:bf:4b:df:b5:a1:36:b7:96:2b:09:0e:61:cc:b2:5c:
79:b7:96:45:ab:01:94:42:35:7c:01:8d:8d:44:23:29:32:eb:
a3:d8:e7:7f:9a:24:dc:98:91:8b:95:0b:f9:a9:e2:00:2a:fc:
85:5c:f8:36:b2:e5:dc:53:b7:a2:3d:43:c3:e4:2a:49:d4:3a:
fe:d5:85:39:2c:0f:ea:65:16:56:45:f4:e4:49:bb:cd:3d:08:
13:83:17:91:5c:4c:dd:ab:52:90:80:ab:ea:cb:38:d3:74:03:
48:db:07:0e:00:49:da:ef:7b:40:bd:db:a8:09:f3:9e:33:c8:
48:93:8b:36:18:ed:46:01:69:ac:5a:ad:98:2a:5c:5f:08:e8:
88:b7:3d:f6:83:cc:34:cd:a4:49:79:7f:b3:0b:ff:df:5d:7d:
93:13:5d:c0:57:a4:23:3e:60:c2:e7:9d:60:39:2a:91:96:0e:
9d:be:ae:66:19:6b:da:9b:e9:03:f7:15:c2:77:3e:01:fa:3f:
76:e9:1a:67:52:56:ec:67:5f:55:7b:0d:da:a2:b5:83:68:f6:
ca:c8:cb:b1:a1:0c:09:1c:61:22:88:0d:86:69:b2:9c:35:15:
c5:83:ac:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:12:23 2026 by rpki-client