
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/D0D1D812FB0D11EFABB24730C4F9AE02.roa
File: D0D1D812FB0D11EFABB24730C4F9AE02.roa (raw, json)
Hash identifier: XIXAdlf2Wapfr3aA+RYeScI/7J0gFTrDr34LwCofapU=
Subject key identifier: 8C:5A:BD:34:C2:36:C2:9C:26:45:3B:F3:0E:5F:63:1D:4C:0D:19:39
Certificate issuer: /CN=A918F961/serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
Certificate serial: B8
Authority key identifier: 4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/D0D1D812FB0D11EFABB24730C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:00:28 +0000
ROA not before: Fri 07 Mar 2025 04:37:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153669
IP address blocks: 163.223.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl
rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F961, serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
Validity
Not Before: Mar 7 04:37:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3e40c-4adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c1:5d:07:ab:6d:02:78:ec:5c:91:3d:46:72:
05:76:52:bd:6d:0a:c1:ca:c6:1f:a8:5f:78:f5:26:
d5:38:16:2d:ba:2b:88:15:b6:3e:2e:30:dd:fb:e3:
ae:9f:7a:f4:27:55:91:2f:80:ae:a4:c7:19:10:93:
2e:6c:32:d6:5d:58:25:b9:1b:a1:97:c6:fe:24:c7:
a8:6b:41:a1:4b:c2:99:0e:30:e9:58:79:70:45:93:
ad:01:c7:e0:1e:f4:bb:06:15:5e:8c:5e:8e:a0:90:
03:83:95:09:83:57:25:1a:45:20:9a:1d:70:14:fa:
46:7b:0f:6a:cd:23:b8:fd:55:c8:c9:de:60:0f:b2:
00:c4:e3:ec:47:0a:3c:f2:e8:9f:44:db:0a:83:15:
53:fd:ae:be:50:61:92:e3:39:42:ea:59:1c:9f:1d:
45:d2:64:18:71:95:1b:c5:c3:c2:d2:70:53:a1:37:
9d:b8:57:e2:47:3b:43:a0:0b:fa:56:3f:c8:e3:d1:
4c:16:e9:8f:2a:cb:8f:18:9d:f3:1f:d2:c8:d3:2a:
c0:ec:d2:8f:54:da:48:9c:d2:cd:d1:75:4c:e6:0e:
a9:f8:0c:1c:fa:2c:21:0a:13:2a:d4:b1:5e:2b:5e:
dc:16:a9:75:18:e6:28:41:49:57:81:71:7f:f3:1b:
72:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5A:BD:34:C2:36:C2:9C:26:45:3B:F3:0E:5F:63:1D:4C:0D:19:39
X509v3 Authority Key Identifier:
keyid:4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/D0D1D812FB0D11EFABB24730C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.36.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:71:75:25:23:95:ec:1b:5a:14:53:18:d8:97:40:38:3a:4a:
8c:50:b7:bb:d5:ba:89:ef:c7:de:17:78:d3:97:8d:e3:e0:79:
2b:8d:7f:6a:7f:de:a7:d4:1c:0e:09:d7:5a:f7:00:7c:fa:8a:
6c:30:97:97:bc:8a:d9:59:5d:b6:00:61:89:53:d9:bd:b0:c9:
3b:45:50:1f:cd:b3:b8:f3:79:03:f2:95:08:6b:04:63:5d:d8:
33:e2:49:d0:c2:44:a8:94:87:81:1d:e3:28:67:04:cb:19:92:
d5:f1:8f:65:1f:0f:67:ff:8b:6e:93:72:0f:31:97:a9:db:78:
c2:05:cf:35:a7:c6:b3:ba:67:70:22:0f:b8:6c:41:d8:59:60:
78:b6:c5:10:46:bc:53:85:b9:7f:81:95:95:7a:cd:39:09:64:
06:4e:34:e5:14:7b:57:f6:c1:1b:e6:d2:0d:de:b8:63:72:96:
2f:c7:c1:c3:2c:a1:b5:b7:b5:78:61:df:85:6e:a5:ff:db:91:
87:e5:79:2a:bf:b2:a0:c4:4f:1f:2d:ac:1a:0d:d7:a2:94:c2:
7d:89:2d:1e:69:c9:00:78:2a:12:83:16:75:17:33:55:c6:63:
40:25:4a:36:2e:a8:03:99:28:50:1d:5c:a6:05:a1:e0:db:bc:
57:a1:0f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:10 2026 by rpki-client