
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/AC549BBCD64C11F086D19BCFA9248E41.roa
File: AC549BBCD64C11F086D19BCFA9248E41.roa (raw, json)
Hash identifier: dWYmbgaVBCtICno2DXbASgGqvt29K/L5vXNYpaWvnIU=
Subject key identifier: 4A:5D:6A:A0:C1:96:5E:4B:5E:B3:19:C8:6D:F3:AE:CD:73:96:1E:8B
Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530
Certificate serial: 0E9E
Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/AC549BBCD64C11F086D19BCFA9248E41.roa
Signing time: Sun 01 Mar 2026 17:39:39 +0000
ROA not before: Mon 12 Jan 2026 12:35:25 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 138624
IP address blocks: 103.134.225.0/24 maxlen: 24
2001:df7:d500::/48 maxlen: 48
2001:df7:d501::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl
rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:34:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3742 (0xe9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530
Validity
Not Before: Jan 12 12:35:25 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a479db-579d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:1b:ed:73:80:c6:43:bb:63:7d:91:ba:89:
c5:02:10:4d:be:b9:cc:bc:00:5a:75:d2:38:41:67:
2f:f3:27:88:ed:cd:db:be:34:bf:71:a4:45:c8:f2:
98:b8:44:b3:35:8c:79:43:d0:cf:9a:83:fb:7b:0f:
ef:ba:84:67:1e:f1:7d:14:22:7f:e4:e9:38:58:4d:
ef:aa:86:07:4f:15:69:4d:97:c6:84:c5:60:f7:3d:
d9:27:77:56:9f:4f:1b:c5:a2:36:a0:c2:8f:aa:32:
bf:43:3e:51:b9:ce:56:5e:f4:ed:66:9c:55:95:da:
c6:b4:00:94:49:80:ed:62:cb:9e:f5:7c:cd:27:9e:
56:c8:55:99:40:60:d8:3c:4b:c3:30:53:7d:ae:6d:
a3:3c:1c:14:39:94:a7:52:c1:8c:89:e4:ca:d8:8d:
4c:7e:2d:48:d0:bc:80:63:63:f0:cb:8c:af:75:d0:
cd:1d:fa:4e:8f:6e:c6:66:80:a8:a7:b4:ed:55:37:
c2:f1:ca:e5:67:ac:ac:9d:1b:90:d7:ae:75:c2:cc:
8f:bd:1a:d7:26:75:11:21:70:e5:eb:1e:01:e2:42:
f5:46:aa:95:97:86:ba:9b:1c:b4:ea:87:d5:07:51:
42:3b:50:9b:8f:50:65:83:e0:dc:54:79:ef:97:3d:
05:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5D:6A:A0:C1:96:5E:4B:5E:B3:19:C8:6D:F3:AE:CD:73:96:1E:8B
X509v3 Authority Key Identifier:
keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/AC549BBCD64C11F086D19BCFA9248E41.roa
sbgp-ipAddrBlock: critical
IPv4:
103.134.225.0/24
IPv6:
2001:df7:d500::/47
Signature Algorithm: sha256WithRSAEncryption
46:72:85:60:e3:cb:ce:e2:4f:fe:a6:8c:8b:a9:d7:2b:73:f7:
8a:64:ae:70:49:13:b7:95:0e:ae:be:a6:7d:0a:fa:68:c4:ce:
3d:be:6a:61:cf:61:32:55:52:de:08:c6:e1:0b:50:bb:4c:14:
a8:79:3a:f0:ae:7f:28:fa:a7:61:4c:53:c6:fe:0e:16:47:5d:
d8:1a:17:e6:67:a6:f8:53:03:04:38:d7:75:a2:94:7e:1c:38:
d4:8d:f4:87:09:3d:dc:da:1e:3c:e4:54:a3:a8:f3:c8:78:68:
df:ea:3b:1e:79:ae:58:ba:03:95:b4:5f:8d:66:7b:5c:36:a3:
74:55:5a:d2:b9:f5:7c:d0:f3:cf:41:e9:cb:ba:d4:31:06:99:
41:71:f9:9f:6f:39:a8:8c:c4:67:d5:b5:b8:c7:66:6d:a0:95:
1b:21:c5:b3:a1:1b:ab:14:d1:4d:6a:c5:ec:ac:8f:67:55:db:
37:65:55:64:34:1b:cd:46:b2:e3:9a:c2:a5:48:9e:87:bc:04:
a8:ea:c4:46:16:27:5d:fa:fa:6b:28:c8:78:6d:51:62:18:54:
77:8c:d9:22:f4:4e:5a:1f:0f:e8:31:0e:db:8e:9d:20:f7:87:
09:d3:aa:ae:8c:65:48:24:c0:5a:b0:ea:0c:06:38:61:46:5c:
6a:ad:ad:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:24 2026 by rpki-client