
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DD9BDB3ABDD011EA9702FC12C4F9AE02.roa
File: DD9BDB3ABDD011EA9702FC12C4F9AE02.roa (raw, json)
Hash identifier: x6y5ds4Zlvvxnw6YVek6AKFk1m1togwr6vnlmRBHtUQ=
Subject key identifier: 0B:A4:45:79:29:BF:15:AF:C5:5F:A0:6F:4E:33:1E:46:E6:A4:04:9C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D4E6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DD9BDB3ABDD011EA9702FC12C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:34:47 +0000
ROA not before: Thu 08 May 2025 16:13:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139526
IP address blocks: 103.146.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54502 (0xd4e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:13:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bf07-c5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:13:f0:7f:0a:33:d5:fc:ba:5c:25:8c:6e:87:
e5:a0:45:cd:d4:cd:b5:d0:ce:67:87:e4:7b:f1:9d:
83:6d:08:f8:ac:94:95:5c:78:64:c7:2e:2e:24:81:
76:c2:ae:1e:32:da:76:2e:19:e3:17:aa:40:45:92:
4a:4a:79:26:e3:f6:45:bb:19:06:45:48:97:98:d5:
be:61:bf:a7:42:17:83:8d:c4:98:96:5e:a8:0f:cd:
dd:ff:e6:24:ee:c4:68:b1:b0:31:59:38:d6:76:3d:
5a:69:11:0c:23:5c:f7:3b:73:ac:84:2f:e5:c3:08:
b2:bd:f9:79:fe:d3:9d:55:aa:df:b1:e9:d1:a9:d1:
e3:4a:9d:90:0a:f9:48:a2:4a:d4:4f:4d:ef:1d:5d:
75:45:b2:42:83:26:81:c7:a2:b6:45:81:89:8d:da:
5f:2a:a4:7b:0d:15:b7:ff:29:84:74:f9:4e:1b:18:
8a:b0:72:26:24:1a:29:93:a2:ab:6b:32:f3:5c:30:
c3:ee:cc:e6:61:b6:77:53:55:5e:1f:5b:37:82:72:
87:2c:be:e8:c2:ca:a4:20:83:00:83:08:5b:da:06:
9e:d6:72:ae:e2:c4:dd:d2:79:39:8e:66:b5:be:0f:
c0:6f:b3:4e:e6:b7:11:e1:be:0d:e9:c3:49:a1:3c:
c5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A4:45:79:29:BF:15:AF:C5:5F:A0:6F:4E:33:1E:46:E6:A4:04:9C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DD9BDB3ABDD011EA9702FC12C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.146.0.0/23
Signature Algorithm: sha256WithRSAEncryption
69:a6:79:e3:0c:01:79:c6:67:1a:ba:3a:86:73:67:94:58:a2:
f0:ce:04:24:31:c7:d9:a1:fa:8c:c5:0c:a7:ee:63:62:1c:0b:
94:67:67:9c:bd:ca:72:69:e9:f3:85:a4:fa:9d:b6:fa:11:22:
fa:25:ea:ac:70:6d:51:db:05:6f:96:68:a3:50:2b:ba:07:ba:
63:a2:1f:a0:19:08:e4:d3:38:20:c4:c4:8e:f3:16:fa:61:12:
ab:8d:00:4f:f0:34:16:a4:d6:d3:49:a6:c0:59:97:72:a3:91:
80:5c:3f:be:de:26:46:72:f6:f2:c1:62:59:d3:d4:65:56:9d:
ef:4f:58:96:54:a0:9a:47:67:a6:ca:7e:08:9a:df:eb:61:c9:
30:ea:50:4d:1e:50:02:9d:f7:3f:31:c8:27:60:d6:51:0e:f4:
03:b6:8b:b8:17:5d:0c:a7:46:db:40:e5:76:f8:46:af:47:43:
8a:07:d3:2e:ce:56:da:3e:18:e3:c5:8e:d2:b4:0f:f6:6c:bf:
0e:7a:57:39:66:67:80:23:1a:84:a3:4d:23:d6:f1:3b:69:19:
42:97:c6:bf:1f:4b:5e:88:a8:f2:00:05:25:4a:d8:fa:a0:68:
d6:d6:99:04:05:9b:34:a0:bb:da:15:eb:2c:50:53:70:b8:1b:
d5:bb:06:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:18 2026 by rpki-client