
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E441800ED7FE11EBBBE1637CC4F9AE02.roa
File: E441800ED7FE11EBBBE1637CC4F9AE02.roa (raw, json)
Hash identifier: YS4d0Lm0i9IpSS8CH68O0HzPwyuke1zuPYZTTpKNLNU=
Subject key identifier: 0B:47:A4:72:31:D5:5C:29:63:C5:C0:31:D7:0E:C6:1A:F6:3B:CF:E5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D5C3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E441800ED7FE11EBBBE1637CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:39:53 +0000
ROA not before: Thu 08 May 2025 16:17:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141823
IP address blocks: 103.167.72.0/23 maxlen: 24
2001:df3:f540::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 11:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54723 (0xd5c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:17:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c039-dc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c1:9b:e2:60:e7:c8:25:57:d9:12:c3:69:86:
38:ed:82:70:e4:9c:6d:35:12:2b:13:cc:65:57:15:
d6:83:58:c8:67:f8:40:74:56:3c:ec:c4:0c:97:58:
53:0b:dd:bf:98:fa:7c:b1:84:6e:9c:1b:56:13:8e:
b8:db:d7:01:9e:70:0f:5f:67:57:10:91:67:b0:17:
7b:2e:82:14:e7:94:43:35:31:2c:76:7c:8a:f4:da:
78:5b:8a:b9:93:86:f1:a0:4f:fe:00:d8:93:22:71:
76:dd:a3:04:ec:c7:6c:b9:1f:71:f4:3e:b8:e6:2d:
86:5d:c4:b8:82:b3:ec:85:e5:d4:3b:0e:9e:17:42:
94:54:1f:a3:5d:c9:0f:ae:13:59:0e:7c:ca:38:3d:
c2:5c:fc:b5:d7:13:38:42:a0:80:cc:41:de:db:27:
52:76:32:11:e2:c9:47:87:e0:43:c7:d9:05:9d:81:
07:77:12:06:46:c3:4b:03:b8:c2:33:5c:79:31:30:
13:4d:81:bc:5c:6e:e3:32:25:a4:59:99:1f:97:94:
a5:3a:33:21:57:b5:89:58:b4:2c:a2:34:3a:bc:dc:
80:98:74:94:e3:82:91:a3:e2:12:62:23:b3:ed:86:
b9:0b:3f:fd:a1:17:17:16:40:74:93:93:53:09:5c:
37:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:47:A4:72:31:D5:5C:29:63:C5:C0:31:D7:0E:C6:1A:F6:3B:CF:E5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E441800ED7FE11EBBBE1637CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.72.0/23
IPv6:
2001:df3:f540::/48
Signature Algorithm: sha256WithRSAEncryption
b1:6b:f4:bc:b4:26:fa:c8:ef:81:ec:32:43:e1:93:7a:57:57:
17:60:f4:cd:fe:7a:e3:aa:55:5e:41:ac:4c:63:74:91:90:82:
46:ae:c4:1b:e3:70:3a:f7:69:46:05:03:56:44:69:10:22:fe:
03:dd:b8:54:10:7e:94:d2:8a:db:86:cf:26:59:2c:ff:fb:88:
ac:63:64:1d:41:c7:0c:e6:3b:c4:4d:a0:2d:86:d4:a0:39:28:
f1:89:15:1a:54:44:39:6b:57:df:4c:15:85:62:ec:64:ca:de:
58:c6:86:e0:ed:05:e0:ea:2a:5a:a2:df:47:e8:0d:02:05:21:
4a:a4:44:29:38:52:c9:b7:4b:e8:94:63:06:c0:68:7c:22:ee:
fa:1a:7b:71:90:ac:65:6f:59:4d:ea:2a:ec:7b:de:fa:ec:6c:
ab:87:ce:c4:05:53:6c:80:6e:b2:e2:a3:25:2c:5c:85:18:47:
41:93:61:91:90:d3:bc:8a:c8:c7:ba:88:6e:cf:3a:91:c7:6d:
35:4b:4b:b3:d5:b0:0c:f3:a7:fc:d0:d9:36:68:41:fb:b8:32:
09:ec:58:e1:ff:55:d3:c3:01:2b:fc:33:57:14:35:dd:4e:53:
e1:b1:51:45:51:4c:98:b8:ed:8b:d6:ab:6b:0b:6c:aa:b0:b3:
3c:df:39:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:11:39 2026 by rpki-client