
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9348B3CDD4B11EAA8892A78C4F9AE02.roa
File: E9348B3CDD4B11EAA8892A78C4F9AE02.roa (raw, json)
Hash identifier: IOXLWh4nZx4kNvy41Y/11DDWscY6rm3GUG9cFVGy4vM=
Subject key identifier: 36:B5:4C:CF:78:88:28:D2:7A:90:EE:28:38:A4:3D:8B:9E:0A:AA:EE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D357
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9348B3CDD4B11EAA8892A78C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:25:27 +0000
ROA not before: Thu 08 May 2025 16:05:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135863
IP address blocks: 103.80.68.0/24 maxlen: 24
103.103.52.0/24 maxlen: 24
103.103.53.0/24 maxlen: 24
2001:df6:ce00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54103 (0xd357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:05:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bcd7-8d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5f:93:1e:61:45:2e:6c:8d:9e:ff:cc:3f:ee:
1e:f7:1b:2d:0a:f4:a7:f5:b3:4a:35:4f:85:de:7e:
45:3e:11:f5:e9:21:21:70:f9:45:ba:8b:15:4a:1d:
ed:00:cb:9b:60:c3:84:df:df:66:d2:aa:cf:2e:93:
a3:70:0a:10:48:94:7d:24:7a:96:2f:a6:d0:d5:0a:
b9:fc:43:3c:3c:6f:64:d5:fc:68:69:bb:49:7c:f5:
5f:66:a0:d5:e9:d8:b1:6b:9d:bc:a9:b7:4c:85:ea:
10:da:95:6a:33:d7:c6:36:a6:6a:b0:62:cf:46:2f:
3e:9e:67:b0:0e:42:ca:30:49:ed:19:a6:34:d9:e4:
67:4d:ed:ca:fe:20:e6:e3:8f:18:32:8b:81:64:7c:
c0:b3:3e:fe:b9:ec:1e:db:01:db:bc:f5:69:9f:52:
b8:2d:b4:8a:e1:e0:1e:5a:97:c5:98:75:bd:47:43:
c9:b1:ab:32:d3:4c:5f:1b:73:02:30:eb:05:b6:62:
13:dc:42:12:77:3a:b4:0d:70:90:b5:ee:40:52:5c:
30:73:fe:9c:bf:0a:93:0a:bd:69:e4:3b:c2:f6:50:
ea:17:d7:1f:d4:d6:70:d9:19:fa:7c:44:06:4a:2b:
b6:07:3b:c1:f5:a5:2d:87:5b:a5:02:53:24:11:98:
4c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B5:4C:CF:78:88:28:D2:7A:90:EE:28:38:A4:3D:8B:9E:0A:AA:EE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9348B3CDD4B11EAA8892A78C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.80.68.0/24
103.103.52.0/23
IPv6:
2001:df6:ce00::/48
Signature Algorithm: sha256WithRSAEncryption
05:b2:13:ca:b7:a0:c0:da:a9:9d:53:79:b1:e9:72:d3:ba:60:
7c:88:c8:48:87:8e:15:ab:23:1c:58:f6:f5:b6:bc:6f:6f:ea:
15:a2:e2:57:c6:c7:5e:1f:48:9a:2a:19:dd:17:64:e9:ce:66:
11:d8:d3:bf:3e:21:7d:51:b8:59:50:f7:a6:2f:34:cb:dd:82:
f1:5c:68:a4:0c:26:42:d7:09:76:24:d0:70:27:ed:dc:07:fd:
e5:61:3d:f7:6f:54:ee:dd:97:a0:92:b6:20:35:eb:05:29:2d:
fa:98:d4:15:91:19:a8:07:a0:10:7e:eb:e9:5b:33:bd:8c:09:
a0:d0:d1:8f:6b:71:c1:4c:c2:bc:f7:6c:e5:88:1f:19:4d:f9:
3d:54:70:61:1b:f7:b8:42:42:ea:cb:17:cd:49:28:94:ab:d5:
ff:00:9d:4f:c2:fb:e5:11:21:2b:b2:9e:30:15:80:9a:9b:40:
7f:24:b3:3b:38:98:ef:5f:ca:1b:7c:22:db:18:7c:a1:9c:c4:
56:ca:cd:ee:8f:74:4c:81:94:9b:ea:9d:2d:26:37:70:a6:a6:
50:c3:47:b9:13:1f:e4:4c:a7:94:40:42:9b:9e:e3:3f:69:44:
49:9c:9f:ec:33:a6:9d:b5:ed:dc:82:86:c5:b7:dc:f8:bf:7b:
c9:e5:85:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:35 2026 by rpki-client