
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EDE5496E297211F0BA55FD3DC4F9AE02.roa
File: EDE5496E297211F0BA55FD3DC4F9AE02.roa (raw, json)
Hash identifier: GsTQIJsCiQ01SAOBCURilpA4/29P9N0uWu9N7scj4+g=
Subject key identifier: 73:34:3A:93:F0:EA:FD:30:1F:B6:30:2E:74:9B:7F:EC:BB:D3:DC:CD
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D860
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EDE5496E297211F0BA55FD3DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:54:36 +0000
ROA not before: Thu 08 May 2025 16:29:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153759
IP address blocks: 103.83.70.0/24 maxlen: 24
2400:d180:74::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55392 (0xd860)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:29:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c3ab-0ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:8d:62:1e:3d:1c:43:9e:74:51:b4:4a:4a:
d0:f8:a9:26:4d:1b:8f:9d:e6:83:6d:85:31:02:3c:
84:05:61:e0:9f:2f:37:a9:29:cd:58:4d:e2:c3:07:
f4:86:b3:47:5b:20:55:4f:5a:ac:e9:46:5e:e3:57:
9a:05:72:bc:0c:6a:43:96:10:02:1b:0b:b2:45:db:
83:e8:fc:45:1a:cd:a8:60:9d:22:f9:d8:de:17:31:
9e:2a:e2:4f:fa:87:18:c0:5f:b2:d2:88:9c:6e:db:
b6:dc:5f:71:06:f3:04:d0:cc:64:d4:74:d4:8e:ad:
74:56:8d:d6:52:9a:62:25:ae:e2:ed:76:b8:a6:d5:
74:46:b9:ac:1a:b3:ae:a8:c6:da:44:93:ae:b3:74:
97:3c:40:96:65:ac:cd:21:bd:75:e8:20:55:aa:4d:
19:9a:e7:b1:7f:f0:29:ef:1a:7a:fd:54:2b:f3:53:
bf:a8:72:46:d0:bd:4b:07:e1:21:93:5d:70:61:89:
e4:70:54:49:cf:a4:0c:8d:f3:6b:44:fb:49:fc:15:
86:44:6b:7a:65:81:04:47:3c:fc:8e:21:82:fb:47:
26:99:27:ae:61:67:3b:01:74:53:69:5e:8b:e5:34:
92:34:4d:ff:d0:76:dc:15:0d:86:a3:b9:f9:92:2b:
5f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:34:3A:93:F0:EA:FD:30:1F:B6:30:2E:74:9B:7F:EC:BB:D3:DC:CD
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EDE5496E297211F0BA55FD3DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.83.70.0/24
IPv6:
2400:d180:74::/48
Signature Algorithm: sha256WithRSAEncryption
0a:d7:2e:98:80:1a:b7:a4:e1:1e:37:88:11:fb:e8:cb:79:4a:
ad:0e:98:5c:0e:25:35:fa:be:a9:0d:2d:b0:1e:68:dc:1d:f1:
a4:48:06:85:b7:0e:af:91:43:f0:43:66:41:ed:23:98:3f:80:
31:9a:4e:70:80:8c:74:08:22:fb:41:ac:6c:e2:5a:70:00:c5:
2e:20:b3:8b:29:49:a3:da:1c:fb:d5:c0:e3:68:5b:e9:1c:7c:
f5:ee:79:27:ae:6e:15:48:92:ce:c2:8f:54:16:01:a5:91:dc:
2d:a5:0e:0c:8b:46:da:bc:70:c9:67:8b:ac:ba:0c:f3:5c:bc:
d5:66:3e:56:30:2d:59:c2:46:29:27:37:c4:14:f3:e7:e4:e5:
6b:27:d6:47:0e:8f:df:9c:79:e1:d5:a0:aa:d3:19:32:83:8f:
d1:fc:cf:7a:53:f1:62:b4:8c:6e:0a:f2:0f:3c:a2:ce:8f:0d:
67:c4:57:31:83:a1:77:5d:f5:dc:9a:22:db:fa:db:8b:a2:4f:
90:54:44:78:f2:80:ab:5b:cd:f2:0d:7a:0a:45:04:14:e9:af:
ab:85:f6:84:ac:db:d1:60:5e:c7:d9:ab:cb:fd:72:8f:4f:3f:
dd:b4:5c:37:67:ef:e6:58:f2:f9:31:5c:be:2b:4e:5f:e1:0c:
8e:d1:4d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:21 2026 by rpki-client