
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/D318E67076CA11EDAA4FE042C4F9AE02.roa
File: D318E67076CA11EDAA4FE042C4F9AE02.roa (raw, json)
Hash identifier: 4BA5NqaVokjWFwQzUDF6z/aNu276DFdfvc22Mig/Z84=
Subject key identifier: 7A:02:C1:A0:6E:F7:D4:84:4B:49:B1:54:C8:E7:4F:92:B3:B6:8F:BE
Certificate issuer: /CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6
Certificate serial: 0271
Authority key identifier: 82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/D318E67076CA11EDAA4FE042C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:05:41 +0000
ROA not before: Thu 25 Dec 2025 01:22:22 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 58715
IP address blocks: 103.49.114.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl
rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 625 (0x271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CA1B, serialNumber=82064A103CF50F01D19453006A386CD387391BE6
Validity
Not Before: Dec 25 01:22:22 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a455c5-6eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:46:eb:97:d8:f4:04:13:60:9e:6d:29:ea:db:
e3:a6:26:43:42:ec:c5:5d:f2:14:1c:1b:a7:da:12:
04:f3:fe:39:4f:1d:14:ec:c7:90:34:c5:18:ef:e2:
1a:d4:fb:8d:ea:e9:fa:22:64:ed:28:38:96:09:ed:
5a:d1:78:87:8d:01:33:92:b9:fc:3f:16:c5:d3:47:
e5:ac:a2:b1:c6:9a:c0:f6:ef:9e:75:fd:e6:4a:a0:
05:2b:b1:3c:8e:da:77:fd:dd:90:59:15:d9:94:42:
b9:da:0a:35:7d:3a:80:28:67:c7:c7:cb:63:7c:1a:
9e:2f:29:ed:50:08:c5:f0:49:52:16:f9:40:3f:7b:
a9:cc:3a:81:02:8c:7e:3a:9c:16:ce:17:6f:c1:a2:
ec:21:98:7e:1d:18:32:3d:fb:84:c1:fe:b7:43:52:
68:84:83:7e:85:00:9e:dd:36:a6:47:d8:9a:0d:4f:
ee:ce:40:0a:57:30:4c:95:60:70:e1:dd:f9:43:81:
0f:c5:bb:c5:38:35:80:90:6f:92:72:06:5e:96:41:
1e:54:6a:3c:16:3e:e2:d8:99:87:ff:ad:0b:ab:05:
78:08:23:0f:8c:bc:4f:6e:aa:96:0c:70:67:d7:40:
db:5e:a6:b6:84:b7:e4:ec:63:88:4e:2c:0b:2a:bc:
3d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:02:C1:A0:6E:F7:D4:84:4B:49:B1:54:C8:E7:4F:92:B3:B6:8F:BE
X509v3 Authority Key Identifier:
keyid:82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/D318E67076CA11EDAA4FE042C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.49.114.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:e9:d5:a5:46:c1:07:2c:ab:8f:8c:d4:0f:87:a2:d5:79:1a:
2f:b1:ca:80:06:cb:f0:9f:1f:04:a4:a1:a7:d9:18:aa:0c:c0:
26:b9:fc:a3:7f:c3:5c:7e:3e:29:97:60:8d:1c:c5:89:bc:95:
de:a7:f4:52:7e:9f:b2:c0:60:63:4f:b8:0e:a0:f2:f1:0d:41:
0b:38:fc:97:ef:c9:f6:65:87:26:63:61:29:cf:fd:5e:e5:e9:
50:79:b4:26:d6:45:88:b6:7f:5d:17:1a:e0:cb:ff:fa:fd:b9:
34:65:92:9c:35:ec:9c:6b:d6:ff:43:64:8b:58:27:21:93:a0:
67:eb:9a:6a:70:81:85:93:33:ad:f7:12:d1:3b:ec:c9:c3:bd:
5d:9c:bb:5c:e0:5c:c4:a7:73:b8:70:d0:de:82:0f:ba:dc:c7:
f8:a2:03:b4:cb:d8:0c:4c:6c:ed:8a:df:0c:23:d5:61:64:9f:
e8:82:21:6f:03:fc:3b:f8:fc:6d:98:f7:fc:fe:ab:1f:97:89:
3b:15:77:76:ee:9a:60:82:0e:79:3d:69:64:45:10:ca:a9:82:
2b:73:aa:03:66:9c:4e:ee:54:af:f0:2b:a0:aa:08:aa:8a:18:
c7:8b:30:d9:4f:99:3b:44:30:b8:d2:a4:88:0a:d0:f1:1e:2f:
e6:88:4d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:07 2026 by rpki-client