
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EDDDBF1A4DB011ECBC6AE97CC4F9AE02.roa
File: EDDDBF1A4DB011ECBC6AE97CC4F9AE02.roa (raw, json)
Hash identifier: JMfD6TI9F3vTHKK9BxiqfKWW96hWjovIZfyyD71U10E=
Subject key identifier: 78:7F:1D:27:1F:15:91:56:01:9E:69:16:B2:65:EE:72:7A:EF:B0:06
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D322
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EDDDBF1A4DB011ECBC6AE97CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:24:13 +0000
ROA not before: Thu 08 May 2025 16:04:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135751
IP address blocks: 103.74.180.0/24 maxlen: 24
103.74.181.0/24 maxlen: 24
103.74.182.0/24 maxlen: 24
103.74.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54050 (0xd322)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:04:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bc8d-10b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ee:ad:f8:60:04:ed:26:cd:dc:54:69:d3:4b:
ca:29:c0:9b:b1:b4:98:ac:5b:0e:a0:f9:2f:cd:32:
e9:3a:d4:0b:53:7d:8d:57:14:1a:83:28:06:c5:1c:
ec:50:45:84:d2:d2:32:44:3d:c5:97:f7:02:99:94:
a6:60:bb:1b:b7:28:7c:1e:c7:89:c9:37:7e:b0:21:
51:39:d1:69:7d:4a:a1:e4:73:ba:8c:43:ec:90:44:
4b:bb:2b:50:00:af:19:04:b0:68:c6:da:e3:ab:1f:
01:b1:43:a2:b8:bd:85:0a:e9:6e:ff:99:ac:6a:b4:
f2:ea:65:19:a4:3d:d9:cb:1e:2f:f5:26:fd:4d:db:
b2:4f:92:82:25:f8:fe:d8:a1:06:0b:a6:dd:ba:81:
56:b7:a3:a8:58:9d:a4:38:0a:37:6f:04:3f:35:41:
4c:06:ad:bf:cd:98:7b:14:ce:ea:52:2d:16:58:db:
fc:fb:9f:44:61:05:5e:50:bd:8a:cb:07:d2:3f:28:
12:23:fe:4b:81:06:54:34:df:7c:c3:7e:55:ac:ee:
6a:f6:cd:37:ca:ce:63:36:7a:c2:19:eb:4d:da:81:
19:19:97:df:bd:63:1a:58:56:10:60:48:0c:8a:55:
c0:37:ae:ad:b6:75:83:05:8c:18:53:d4:1b:e9:b6:
3f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7F:1D:27:1F:15:91:56:01:9E:69:16:B2:65:EE:72:7A:EF:B0:06
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EDDDBF1A4DB011ECBC6AE97CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.74.180.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:70:28:39:35:5a:7c:49:a7:04:0c:94:9b:64:fb:06:57:b6:
fe:c7:7c:4e:87:b2:04:ab:e4:01:ea:da:b1:b9:9f:f4:78:d1:
94:ed:19:3a:57:7e:ac:53:40:71:71:d7:ad:f5:9d:f6:1a:aa:
24:e9:2c:5d:b7:56:76:a8:64:47:e4:25:a3:79:44:54:ee:94:
5b:8a:8f:59:f8:3d:76:23:46:e1:9f:d9:89:09:ab:54:d2:7f:
3d:ba:98:12:32:48:2a:d7:0e:d6:92:91:cb:f1:c3:95:e7:7b:
3e:68:e1:5e:5e:eb:2c:3a:55:5c:4f:1f:e7:34:fa:49:28:d9:
98:4c:cf:92:8e:1d:77:14:c8:0c:6a:02:f1:84:50:2d:c0:37:
12:fd:d7:c3:84:ad:e5:07:3a:bd:7c:b1:82:ab:ec:2b:d3:05:
4e:51:4a:85:c4:92:79:e4:04:10:28:b1:36:c4:4f:20:92:05:
39:af:aa:2f:a2:f6:74:c4:79:16:03:b6:25:69:a5:c7:a6:52:
29:8f:9f:ae:3d:8e:12:b1:ff:14:5f:c2:4c:0c:e0:cf:e4:f8:
6a:50:ca:6a:e2:de:83:df:9a:bc:04:ef:6f:5c:2d:08:45:ec:
74:4f:a0:05:5d:de:ef:ff:e6:68:ed:8c:86:c9:5e:4d:db:c3:
c2:0e:7a:7f
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDANMiMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MDQ0OFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGJjOGQtMTBiNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANHurfhgBO0mzdxUadNLyinAm7G0mKxbDqD5L80y6TrUC1N9jVcUGoMoBsUc
7FBFhNLSMkQ9xZf3ApmUpmC7G7cofB7Hick3frAhUTnRaX1KoeRzuoxD7JBES7sr
UACvGQSwaMba46sfAbFDori9hQrpbv+ZrGq08uplGaQ92cseL/Um/U3bsk+SgiX4
/tihBgum3bqBVrejqFidpDgKN28EPzVBTAatv82YexTO6lItFljb/PufRGEFXlC9
issH0j8oEiP+S4EGVDTffMN+VazuavbNN8rOYzZ6whnrTdqBGRmX371jGlhWEGBI
DIpVwDeurbZ1gwWMGFPUG+m2P1sCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBR4fx0n
HxWRVgGeaRayZe5yeu+wBjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VERERCRjFB
NERCMDExRUNCQzZBRTk3Q0M0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmdKtDANBgkqhkiG9w0BAQsFAAOCAQEALnAoOTVafEmnBAyUm2T7
Ble2/sd8ToeyBKvkAerasbmf9HjRlO0ZOld+rFNAcXHXrfWd9hqqJOksXbdWdqhk
R+Qlo3lEVO6UW4qPWfg9diNG4Z/ZiQmrVNJ/PbqYEjJIKtcO1pKRy/HDled7Pmjh
Xl7rLDpVXE8f5zT6SSjZmEzPko4ddxTIDGoC8YRQLcA3Ev3Xw4St5Qc6vXyxgqvs
K9MFTlFKhcSSeeQEECixNsRPIJIFOa+qL6L2dMR5FgO2JWmlx6ZSKY+frj2OErH/
FF/CTAzgz+T4alDKauLeg9+avATvb1wtCEXsdE+gBV3e7//maO2MhsleTdvDwg56
fw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:26 2026 by rpki-client