
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E723159EBB1511F1B3FA90A86411F970.roa
File: E723159EBB1511F1B3FA90A86411F970.roa (raw, json)
Hash identifier: BamC82EnM047nswlonV5XLWPoWOicEZQMihLjo+t5tU=
Subject key identifier: E5:88:9B:8F:79:33:F4:D5:B8:C2:70:7E:28:91:03:B3:8F:75:01:C6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FDA3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E723159EBB1511F1B3FA90A86411F970.roa
Signing time: Tue 29 Sep 2026 10:51:28 +0000
ROA not before: Tue 29 Sep 2026 10:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154375
IP address blocks: 103.148.205.0/24 maxlen: 24
163.223.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 15:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64931 (0xfda3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 29 10:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6abb982f-49c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:94:a9:3c:68:33:0e:f6:a5:6d:9a:49:2d:
b0:8d:84:51:d9:25:9c:9c:18:6d:8f:cb:01:69:5e:
23:65:8d:50:b4:0f:d9:8c:a2:7e:e3:e9:ec:3a:b0:
28:e5:e9:e9:e6:06:43:21:cb:1a:b6:97:93:6d:6e:
37:98:f9:b1:62:46:31:ca:1f:77:82:b3:5c:08:24:
d0:45:ef:02:cd:5e:b7:de:40:41:d2:35:59:9c:0f:
6d:ef:01:62:de:c8:a0:1c:7e:7a:84:73:57:ef:1c:
fb:1f:ff:47:b7:b9:39:9c:4f:0c:d7:b3:e0:01:8d:
38:1a:a9:61:03:f5:74:fb:0b:fe:8d:40:fc:3a:20:
52:31:cf:e0:a7:ba:ea:5d:b4:6e:76:2d:ce:39:3d:
46:4b:87:6f:f8:74:1b:0a:82:d6:2d:70:80:37:03:
f9:d9:cf:70:1f:4b:7b:e9:ce:13:03:67:53:d8:9c:
5a:9a:e7:db:d7:b5:4c:65:0e:db:59:52:0b:ee:d9:
7c:b7:97:c7:3c:7d:a3:35:8d:69:a5:62:4e:3a:d7:
dd:cd:98:57:a4:54:3f:d8:00:48:8c:78:3f:b6:23:
a3:ba:8a:0d:5e:1f:7d:21:86:9f:ae:56:23:db:90:
23:10:1d:06:ec:ce:df:97:91:82:c0:c1:3d:3a:ed:
2f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:88:9B:8F:79:33:F4:D5:B8:C2:70:7E:28:91:03:B3:8F:75:01:C6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E723159EBB1511F1B3FA90A86411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.148.205.0/24
163.223.168.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:aa:d2:2e:02:59:a2:7d:71:2e:82:c4:cf:6a:9e:34:5e:73:
62:82:46:15:7e:1c:59:20:9c:a7:9e:92:f9:ec:82:0f:a4:9c:
b0:7c:81:00:28:89:77:01:18:67:50:20:8d:2d:33:05:32:05:
0f:74:57:b9:56:94:c4:d5:02:1b:09:b8:66:8b:ab:e1:aa:93:
fb:5a:ae:93:38:12:b4:19:b6:ab:43:48:c1:fc:ce:93:3c:4d:
e9:b8:fe:90:42:8c:6f:f9:77:09:b2:1e:c8:20:7b:fd:a4:32:
bd:ab:14:0e:3f:54:f8:29:61:86:f3:32:84:b0:52:db:da:7d:
18:b6:83:33:86:46:b3:f6:90:d6:6f:b5:8a:ef:4e:e3:be:de:
a7:6d:31:3e:cd:86:87:7d:8d:1f:6e:db:66:2a:aa:91:8d:40:
9a:7f:02:5c:1c:fc:ad:72:64:52:df:3a:00:22:8f:ab:08:83:
1c:f2:31:bc:bd:f7:3d:a5:dc:d3:7e:47:9c:35:fc:d4:ca:33:
7b:fc:dc:10:c8:27:e3:2b:af:4d:e5:0c:e1:73:8f:17:19:da:
a6:ba:b0:74:9e:a8:47:66:8e:08:c5:df:cb:f9:5d:5c:1f:84:
56:80:b1:38:d8:37:44:4a:72:36:43:4d:1a:a2:e4:10:20:4a:
d0:52:24:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:45:56 2026 by rpki-client