
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF8735005E5211EC95FF2E63C4F9AE02.roa
File: EF8735005E5211EC95FF2E63C4F9AE02.roa (raw, json)
Hash identifier: lZYK1/odGNA4fmOzl8kwHH5FusZ+X6zAIPd4eRrF0vE=
Subject key identifier: 38:5A:E0:5C:74:AF:5F:87:DD:52:40:3D:0A:36:7E:47:1E:E6:A8:9A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D3DE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF8735005E5211EC95FF2E63C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:28:31 +0000
ROA not before: Thu 08 May 2025 16:08:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136713
IP address blocks: 103.103.92.0/22 maxlen: 24
2401:2c60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54238 (0xd3de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:08:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bd8e-58bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:34:96:b4:b7:9b:f3:12:a1:50:f7:fd:81:eb:
eb:30:bc:19:9f:e4:a2:80:c7:51:2b:01:04:bb:fa:
c3:f2:7e:bb:84:0e:46:9f:68:8b:86:62:1d:72:db:
ea:7a:2b:0c:f4:e2:04:0b:6c:f5:7c:ce:46:49:10:
4b:68:6e:24:7d:29:f1:94:94:8b:4c:85:78:b0:63:
eb:75:60:aa:5d:a4:b7:33:ab:0d:54:90:fa:ff:33:
25:02:cf:3c:b6:07:29:56:19:d9:61:b3:fc:bf:e7:
4c:86:a4:fe:3d:e4:1e:c7:7b:56:e4:ac:48:3f:e9:
b8:93:a8:a9:76:c0:0d:5b:e3:f7:82:e8:da:49:a9:
3b:32:44:22:e7:79:3b:12:18:7e:b1:b6:62:d4:80:
6f:3e:7b:2c:44:a0:25:e7:23:80:10:66:3e:48:1c:
11:30:7e:24:8d:70:c2:ad:8a:8a:72:a2:7c:c4:e2:
2f:5b:c3:c1:a6:d0:28:5d:72:16:97:33:65:31:b2:
90:d3:e3:68:af:b0:d4:be:98:e6:6d:c5:30:12:dc:
01:e1:c9:3b:ff:e4:ae:d5:47:f0:00:2b:3c:89:d3:
a0:c3:d6:36:66:ca:b7:8f:e1:8d:5e:b1:25:db:13:
1b:9d:7e:9b:7a:59:56:d6:a6:1d:5d:c5:84:ea:ad:
5b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5A:E0:5C:74:AF:5F:87:DD:52:40:3D:0A:36:7E:47:1E:E6:A8:9A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF8735005E5211EC95FF2E63C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.103.92.0/22
IPv6:
2401:2c60::/32
Signature Algorithm: sha256WithRSAEncryption
7e:3b:13:af:cd:73:24:98:65:80:4b:d5:67:d5:93:08:94:d7:
20:76:f8:c5:14:d7:dd:96:6a:ab:e0:10:24:a6:1a:37:7f:a4:
74:ba:4c:2b:0b:5b:4f:07:53:d7:b6:46:84:f7:d9:59:c9:fd:
68:2e:83:b8:12:89:8b:a4:cd:99:6e:05:60:a2:8f:b4:9b:76:
d4:f4:c3:85:75:81:18:6f:9c:14:ef:c8:0c:fa:63:bc:0d:f6:
68:59:9a:44:8e:5e:a9:f7:e1:04:20:c8:d3:59:59:72:98:15:
36:6b:59:05:cb:c5:1b:7a:00:a1:de:46:22:38:94:14:6d:c2:
69:bf:63:1a:c9:92:6a:b3:c2:05:d6:2b:10:28:33:be:b8:e0:
35:54:4f:0d:59:c9:bb:a8:ab:7e:5d:13:0c:47:9c:0f:f7:3f:
b1:dc:3c:25:b2:0c:33:a2:69:b2:f2:fb:ac:e1:f0:96:b0:bc:
70:f6:2e:0c:86:fd:94:26:73:8a:a9:3a:86:a3:be:50:41:b9:
f8:9c:49:ce:cc:33:cf:b3:1d:f8:7b:de:dd:b3:59:6d:30:b0:
b0:55:a0:45:59:92:42:bc:25:60:46:1d:ce:db:1b:bc:b2:a8:
81:f3:16:6b:3f:8e:07:8e:66:d6:df:f3:d1:b8:70:62:1e:9e:
34:f5:0e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:28 2026 by rpki-client