
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5C8042020FC11F092D7B07AC4F9AE02.roa
File: E5C8042020FC11F092D7B07AC4F9AE02.roa (raw, json)
Hash identifier: w0GIkUXbCKH9mgbzmsjvWthL1POHsgwojb4VQfHZ+uo=
Subject key identifier: 9D:84:D2:58:69:13:56:64:9C:CA:45:78:7C:22:B6:9B:C2:AC:8D:CB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D5AA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5C8042020FC11F092D7B07AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:39:20 +0000
ROA not before: Thu 08 May 2025 16:17:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141574
IP address blocks: 103.160.210.0/23 maxlen: 24
2406:f140::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54698 (0xd5aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:17:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c018-db06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:ca:a5:82:57:9d:f2:57:c5:e4:ff:1d:e9:
c5:53:34:1c:dc:b9:e9:de:14:cc:6f:0e:0b:db:f3:
34:73:bc:6c:fd:4b:c7:51:b7:48:b2:14:df:a8:ff:
d7:c7:19:b8:d6:ce:cd:46:10:a0:26:c2:68:7e:3b:
16:41:f4:b9:93:f7:73:22:72:7b:1c:0c:3a:e7:a1:
98:dd:cf:c4:25:cd:c1:73:51:f7:23:17:e7:47:8f:
d0:8d:9d:df:88:cf:bd:aa:53:c8:85:7c:56:84:41:
8b:d4:ad:ca:5c:53:66:3e:67:33:74:54:66:d4:98:
69:5a:c7:ef:70:76:e3:cf:d1:4f:3c:59:52:aa:5c:
e9:10:d7:bf:15:7c:e8:5a:61:6a:0a:4c:47:d4:51:
8e:f7:10:71:6c:2d:8a:2d:5f:58:28:71:2f:8c:64:
55:64:73:39:d7:7c:d1:b6:b3:38:b4:34:f4:75:36:
46:c8:c2:b9:b0:d4:9d:cf:b4:a6:95:c9:da:98:04:
0a:99:16:c7:c3:29:ea:0d:5a:21:19:ed:7d:fe:76:
57:29:6c:b0:11:0a:6a:cc:e1:70:4c:9f:cd:5d:b6:
0b:e5:40:ff:46:89:51:36:fa:48:97:a3:62:2e:ca:
ba:14:7b:a2:d9:4f:82:ca:44:52:05:b5:3a:cc:cf:
6d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:84:D2:58:69:13:56:64:9C:CA:45:78:7C:22:B6:9B:C2:AC:8D:CB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5C8042020FC11F092D7B07AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.160.210.0/23
IPv6:
2406:f140::/32
Signature Algorithm: sha256WithRSAEncryption
68:b4:70:4f:31:18:64:91:35:88:fd:59:7c:86:a0:11:14:53:
33:33:f4:97:1e:57:87:7b:52:68:f3:cf:80:5a:10:bb:78:fd:
f9:da:96:6b:ac:a0:2e:05:5d:0f:b4:39:7e:51:fd:86:06:d4:
95:8c:26:4d:f8:44:5f:f3:af:ea:77:6a:a1:c3:21:6a:44:3e:
d4:00:67:e5:6a:8a:fe:98:0e:97:fb:9d:44:66:1e:43:22:e3:
3f:e4:15:79:94:0d:ec:a6:e7:d9:fe:33:00:a9:d9:82:ab:29:
10:6b:47:ac:2f:ec:2f:b1:2c:db:4a:01:7e:3b:26:30:2b:9b:
87:ac:9e:d3:f2:af:f9:4b:2c:b8:63:f7:f5:77:31:af:f3:dc:
62:e8:67:8c:1c:fd:23:10:db:37:49:a2:5e:05:60:21:cf:2c:
b2:79:13:68:bc:9d:c8:6a:46:b6:13:80:97:e5:91:41:d0:a5:
a0:9a:a7:ae:f9:22:01:ce:b0:d9:32:1d:ac:b8:a6:15:5e:9b:
b5:60:84:8e:88:d1:9c:f1:ca:39:5e:e3:9a:ab:c7:71:5b:3d:
c6:72:85:71:6b:c5:65:eb:8f:01:dd:19:95:8a:ac:8e:39:b3:
30:6f:fe:e6:d6:ae:ae:f7:37:6b:48:c7:ab:56:7e:59:b6:88:
13:2d:19:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:18 2026 by rpki-client