
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3C8FE32989011ECA9CA0034C4F9AE02.roa
File: F3C8FE32989011ECA9CA0034C4F9AE02.roa (raw, json)
Hash identifier: hs48xkR8xwXUSd8YpLHFf+csnYqdrGfdVKpYXRsV32M=
Subject key identifier: 06:4D:36:E8:34:E4:BC:8C:1B:00:48:1B:B0:8E:D6:70:B1:06:03:08
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D554
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3C8FE32989011ECA9CA0034C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:37:21 +0000
ROA not before: Thu 08 May 2025 16:15:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141293
IP address blocks: 103.159.182.0/23 maxlen: 24
2001:df1:ddc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54612 (0xd554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:15:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bfa1-5081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:74:65:96:0a:26:fb:39:d3:f4:08:d4:32:81:
b8:ca:cb:ab:f5:56:ad:1c:e2:6d:66:50:c8:a7:92:
8a:82:83:34:cf:d5:0b:7f:d9:67:55:39:04:5d:61:
12:03:fd:6a:68:5b:97:87:a9:f5:df:82:da:3e:62:
57:db:99:db:c5:bd:29:42:87:0c:b1:13:d9:5a:da:
c7:04:cd:ff:1b:7a:93:bf:da:21:0e:ee:63:77:be:
5e:b6:ff:a0:3c:c7:08:a9:19:40:7a:c5:a8:05:8f:
34:1c:d2:71:50:25:25:d4:96:44:10:18:ca:e0:88:
ae:30:7f:c3:f1:99:2d:ba:56:4d:23:e9:4b:7e:9b:
e0:ec:6d:5b:3e:34:cd:ca:23:85:01:4d:8c:fa:b1:
9a:42:ac:1f:f0:11:ab:1b:b9:2e:f7:61:7e:e2:55:
76:dc:b3:97:dd:e5:1d:03:a5:1f:76:7e:fa:df:a3:
4b:88:01:9e:72:2f:a9:e6:11:64:5e:d4:ef:ac:49:
a8:e5:9a:1f:9f:4c:40:17:d1:85:cb:aa:a1:fd:74:
4c:3e:35:78:fb:42:19:81:50:45:65:70:a4:a2:6b:
ef:fa:52:3c:4f:e6:7f:ee:74:ee:db:58:42:43:30:
5c:e5:7d:a1:58:c4:5d:1d:8e:e5:6d:4e:97:9a:79:
e9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4D:36:E8:34:E4:BC:8C:1B:00:48:1B:B0:8E:D6:70:B1:06:03:08
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3C8FE32989011ECA9CA0034C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.159.182.0/23
IPv6:
2001:df1:ddc0::/48
Signature Algorithm: sha256WithRSAEncryption
ab:30:c4:86:74:d5:c6:7a:2c:23:6a:d5:7b:51:ef:23:38:73:
02:05:02:4f:ae:76:df:16:59:0e:a2:ea:cc:15:a0:b6:f9:73:
44:b7:47:5d:a4:0e:ab:02:2a:fa:57:e9:b3:77:65:22:9b:61:
b3:3f:6c:0e:14:ee:69:40:15:bf:d8:41:04:3e:55:96:c5:e1:
09:86:93:85:04:c5:ee:1f:0c:6f:1d:0b:1e:1a:7b:cc:b0:26:
ce:0b:67:a3:56:63:53:80:68:f8:ec:a7:86:e0:f5:48:eb:99:
dc:c8:eb:6a:2d:ff:0a:61:ec:fc:1c:2d:04:3b:71:4f:c6:48:
14:b3:67:7c:0a:22:30:21:23:bf:0f:85:99:84:21:40:fc:35:
27:28:0b:81:73:28:5a:84:3f:19:3b:85:63:ac:09:b8:8a:b5:
8e:94:75:c7:82:36:3f:30:51:fd:25:5c:54:e2:eb:47:f1:d3:
0b:a0:57:16:d7:49:94:fb:44:93:80:0b:4e:b9:87:15:14:ca:
cf:a1:61:b0:c3:7e:cb:1f:29:05:3d:b0:9a:af:77:a0:32:72:
4b:16:24:d1:8b:b7:0d:88:3f:f7:4a:d2:09:32:e1:ce:fc:93:
32:f4:3b:b6:23:95:b2:ea:c0:16:21:ea:9b:42:53:63:fc:66:
ba:b3:89:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:17 2026 by rpki-client