
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8B213524C2D11ECA85EBF28C4F9AE02.roa
File: F8B213524C2D11ECA85EBF28C4F9AE02.roa (raw, json)
Hash identifier: AoWrllAcJDPj2TyoU+gOkQY4aFn7QusiLULoa5CJZ6U=
Subject key identifier: 6B:76:20:F7:DB:4D:A6:3D:BE:30:B3:36:D0:1D:55:EB:DD:58:90:E0
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D308
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8B213524C2D11ECA85EBF28C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:23:36 +0000
ROA not before: Thu 08 May 2025 16:04:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135692
IP address blocks: 103.71.76.0/22 maxlen: 24
103.105.152.0/22 maxlen: 24
103.160.176.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54024 (0xd308)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:04:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bc68-e8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:94:0c:57:e7:48:d3:9b:66:8c:71:b4:df:bf:
a8:5c:de:e4:75:6d:b0:dc:8e:2b:c4:ed:f9:c7:cd:
e0:af:20:5c:42:01:8a:23:dd:32:fd:cc:ed:57:a0:
55:e4:aa:3c:8b:ef:b6:74:1f:ec:0a:43:52:9e:d2:
3b:7f:5e:47:9f:42:01:f7:2c:9f:ac:2a:d3:4a:98:
0b:9d:15:10:3b:89:2c:c0:60:80:42:56:aa:ed:b9:
0b:69:01:a7:27:bc:6f:7a:f4:55:86:4b:ff:dd:34:
27:42:9a:b7:d1:05:af:a8:80:cc:1b:ab:11:b6:67:
97:00:1a:08:97:de:d4:04:f5:9c:8e:bf:7e:af:03:
57:df:c4:cb:82:74:57:0c:6d:ad:cb:cd:ab:d3:1f:
e9:f5:35:db:7d:bf:a6:18:51:96:28:ac:a0:9c:70:
44:15:55:a5:e6:84:bf:ea:d8:14:bd:bb:33:76:37:
ac:83:0a:5e:9b:70:32:2d:97:4c:c4:8a:d2:4a:e2:
47:bd:39:bc:f4:04:bf:3c:76:09:e7:e1:af:fe:14:
30:c6:c3:79:a0:e3:81:1f:0a:32:81:83:82:4a:81:
e7:16:dc:34:2f:77:13:8e:07:52:c4:ac:e9:4b:c1:
db:12:aa:dc:19:8a:88:ae:ea:13:e4:20:3d:b6:11:
57:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:76:20:F7:DB:4D:A6:3D:BE:30:B3:36:D0:1D:55:EB:DD:58:90:E0
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8B213524C2D11ECA85EBF28C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.71.76.0/22
103.105.152.0/22
103.160.176.0/23
Signature Algorithm: sha256WithRSAEncryption
16:58:32:3f:93:b4:bc:c6:24:c4:ec:fd:44:03:6f:80:ab:ed:
40:fe:86:1b:84:15:d9:4b:f0:74:d1:98:66:3a:98:e0:6e:5f:
d5:52:a1:70:e7:31:17:5d:78:50:ce:c0:8a:a1:3a:58:21:48:
13:10:9a:b4:48:95:6e:6a:13:3e:71:99:d2:9f:b3:f2:52:9b:
83:d2:a7:1b:f1:3a:7c:a6:1b:d2:7e:57:2f:8a:e6:6f:76:7e:
22:f2:24:bb:83:1c:e0:e3:20:65:b7:c7:5b:19:57:97:16:67:
07:cd:a3:60:bf:57:f5:e0:e9:6a:c9:1d:f9:6f:10:a2:08:56:
03:13:75:6e:de:e0:f6:6c:61:54:6d:1d:3d:66:dd:b4:16:d7:
b1:6a:8e:35:44:2a:a2:02:8e:07:97:b0:8c:77:3f:b9:ca:db:
ce:80:4b:1a:d2:52:69:d1:dc:ca:73:f2:e6:82:64:d3:25:a9:
67:74:c6:89:c5:b2:39:f7:4a:ad:b0:85:f6:d8:6a:1d:8c:fc:
c7:24:a0:6d:14:17:d1:20:28:a0:9f:7d:e1:19:27:c6:51:77:
94:87:c1:69:fd:4e:4b:da:1c:7a:50:57:fe:47:3d:be:55:6b:
bc:6d:4f:e7:4b:31:e2:9d:ca:1b:71:87:c5:2c:6d:c0:16:72:
18:d5:bf:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:51 2026 by rpki-client