
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/F22AC4E253FA11F0ACEFB91BC4F9AE02.roa
File: F22AC4E253FA11F0ACEFB91BC4F9AE02.roa (raw, json)
Hash identifier: SMyrmxtQV4hV/cATS/CS4tud6wAe7MdwhtLWVFj4Hls=
Subject key identifier: 02:88:7A:65:5F:A2:24:11:BC:CC:49:D2:3B:BE:6B:17:1D:5F:D3:E3
Certificate issuer: /CN=A918FE4B/serialNumber=D0A4666AF35B4B654D8181C4CD1C911AEF9945BB
Certificate serial: 9A
Authority key identifier: D0:A4:66:6A:F3:5B:4B:65:4D:81:81:C4:CD:1C:91:1A:EF:99:45:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/F22AC4E253FA11F0ACEFB91BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:54:39 +0000
ROA not before: Sun 01 Mar 2026 03:22:37 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 150811
IP address blocks: 103.65.240.0/23 maxlen: 23
103.65.240.0/24 maxlen: 24
103.65.241.0/24 maxlen: 24
2001:df1:c9c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl
rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:04:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FE4B, serialNumber=D0A4666AF35B4B654D8181C4CD1C911AEF9945BB
Validity
Not Before: Mar 1 03:22:37 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a48b6e-3417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:39:ba:77:22:70:81:f7:31:f4:b3:b1:2a:60:
9a:5c:65:b6:90:1b:de:8a:bb:b7:eb:de:97:85:53:
c3:5f:77:45:cc:62:d8:81:c5:30:60:1d:65:4e:4f:
b5:01:d3:3a:71:21:5b:97:bb:96:7b:ea:94:d4:51:
c2:0b:3b:89:38:09:95:42:3e:3b:02:15:7a:b1:59:
42:80:45:7f:4f:33:0a:e0:12:48:98:5d:09:03:39:
21:82:c9:78:b2:f9:47:61:db:47:a4:40:0f:b4:34:
14:d2:29:06:1e:2b:0d:23:c0:c2:0c:dd:eb:b4:ee:
62:1e:ca:ed:89:35:55:b3:c7:56:bd:0f:d1:29:38:
3a:84:98:df:4c:7a:71:1b:a1:b9:44:ef:e2:fb:46:
e4:66:4f:86:75:09:98:7e:db:c2:39:0c:cb:30:7c:
d5:15:c0:a7:cc:1f:93:b7:17:37:94:78:8b:91:4f:
34:5a:3c:75:9b:5f:44:1b:7a:c7:8d:4e:48:28:ed:
aa:58:61:a1:e1:97:58:a0:e4:35:a7:5b:25:eb:24:
ab:8b:4a:11:61:10:64:a0:ec:74:f2:50:ee:84:86:
cd:3a:db:8c:d7:e4:34:6c:fa:49:1e:82:db:90:bf:
11:04:e7:96:50:ba:86:12:8e:c5:b0:3d:ef:f3:25:
94:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:88:7A:65:5F:A2:24:11:BC:CC:49:D2:3B:BE:6B:17:1D:5F:D3:E3
X509v3 Authority Key Identifier:
keyid:D0:A4:66:6A:F3:5B:4B:65:4D:81:81:C4:CD:1C:91:1A:EF:99:45:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/F22AC4E253FA11F0ACEFB91BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.65.240.0/23
IPv6:
2001:df1:c9c0::/48
Signature Algorithm: sha256WithRSAEncryption
14:b7:19:6a:9b:ec:10:56:ae:79:de:cd:9e:c8:84:fe:39:07:
ee:0f:37:78:bd:dc:32:25:e1:49:57:0f:aa:de:ac:38:5c:e3:
f2:c7:fe:02:5c:ec:26:dd:9b:21:18:58:85:d7:10:77:7f:d0:
59:15:91:2a:11:97:52:21:57:6d:17:23:65:22:ea:d0:4a:44:
4f:fa:a7:1f:b6:46:ae:e8:8e:92:f6:3a:c3:15:e0:7f:10:f3:
39:01:77:56:c4:f8:aa:92:cd:bc:f4:a2:f2:38:7e:9b:3d:be:
4f:38:01:ef:07:9e:07:25:a4:e6:b5:9a:f0:99:9f:78:5b:0d:
f3:f8:6d:b2:19:f8:f6:30:00:86:82:9e:74:ba:37:fb:e0:bf:
f0:e2:f7:e1:51:6c:96:f3:22:62:60:94:8c:e7:22:10:70:a3:
59:fc:a2:d1:4a:8f:e6:69:0f:4d:3a:3c:5f:81:94:2b:b5:50:
5e:63:9c:68:40:b1:28:df:c6:99:9b:92:f5:8c:fc:fc:85:c2:
aa:df:ff:80:90:97:8a:2b:e4:ac:14:15:2e:d7:af:5b:a8:2c:
22:c8:80:bf:7f:fa:e6:a1:ed:23:1b:26:e5:0f:c7:99:43:cf:
f8:0f:1c:d7:02:a7:07:c0:fa:b1:b0:48:75:8a:5a:ab:3e:6a:
1f:1b:59:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:49:10 2026 by rpki-client