
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/D7C18BB20DFF11F1BA7C27AF053D8C67.roa
File: D7C18BB20DFF11F1BA7C27AF053D8C67.roa (raw, json)
Hash identifier: JtqpsK1zEhQI4Q3ZNk2C/Okx8P5fJVjn+3yBatmBfgU=
Subject key identifier: D0:7C:22:67:31:A5:0E:E1:DB:E9:3F:07:9D:C3:45:62:48:A4:D7:B5
Certificate issuer: /CN=A91AA85A/serialNumber=E80640313452D05347AEB9EAAB60DB8E00C2190B
Certificate serial: 0C
Authority key identifier: E8:06:40:31:34:52:D0:53:47:AE:B9:EA:AB:60:DB:8E:00:C2:19:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AZAMTRS0FNHrrnqq2DbjgDCGQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/D7C18BB20DFF11F1BA7C27AF053D8C67.roa
Signing time: Sun 01 Mar 2026 05:34:40 +0000
ROA not before: Fri 20 Feb 2026 01:59:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133159
IP address blocks: 103.18.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.crl
rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AZAMTRS0FNHrrnqq2DbjgDCGQs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:41:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA85A, serialNumber=E80640313452D05347AEB9EAAB60DB8E00C2190B
Validity
Not Before: Feb 20 01:59:51 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3cff0-1a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:f0:fe:de:3f:5b:fa:6f:45:bc:01:6f:e7:
5f:9b:6c:d0:3a:a2:4d:8d:f5:e0:7e:d2:8a:98:8b:
60:2f:50:ce:ca:e1:df:e3:e9:18:f7:d9:39:87:3d:
e3:be:c4:42:69:d6:be:94:5d:27:d5:e2:d6:5c:a0:
8c:42:43:cd:5f:66:be:6d:f2:72:32:23:e9:57:b6:
f8:95:17:62:a6:2a:54:90:f5:a3:41:c6:3f:23:07:
01:d8:0e:2f:d6:c3:ed:80:01:4d:ab:44:d3:8d:e0:
15:6c:61:c8:7f:e0:a5:67:9e:f3:fb:31:6a:46:b7:
b4:58:0b:bf:c7:39:38:71:7a:9c:be:a0:e7:a3:0e:
f1:88:ab:e7:ef:e5:97:85:6e:3c:11:65:07:ac:0d:
1a:e2:89:b4:83:10:ed:d3:af:f0:e6:3a:4d:40:84:
0b:87:87:d7:32:5b:8a:85:72:af:d3:8f:29:f0:65:
01:ea:23:5d:df:19:df:06:46:95:af:f1:02:21:43:
35:6f:dd:ca:ad:34:8c:9c:89:2f:35:71:88:c3:cc:
b8:8c:22:af:c6:71:b5:40:de:d2:5a:2c:5d:84:20:
e5:3b:3d:46:1a:8a:f5:80:25:5f:39:bd:ce:d8:47:
9e:15:61:7b:4c:35:18:3e:4c:ab:d6:90:86:5f:08:
bf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7C:22:67:31:A5:0E:E1:DB:E9:3F:07:9D:C3:45:62:48:A4:D7:B5
X509v3 Authority Key Identifier:
keyid:E8:06:40:31:34:52:D0:53:47:AE:B9:EA:AB:60:DB:8E:00:C2:19:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AZAMTRS0FNHrrnqq2DbjgDCGQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/D7C18BB20DFF11F1BA7C27AF053D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.18.57.0/24
Signature Algorithm: sha256WithRSAEncryption
40:80:50:78:d5:11:23:e7:a8:3d:d7:0b:f4:33:a9:01:17:b0:
1c:2e:bf:ab:4a:0e:b2:e3:f5:ad:32:69:24:32:5c:ac:26:2f:
9f:58:3f:ee:44:cc:01:13:dd:24:ab:fd:26:8c:5c:cc:c6:73:
c6:f8:32:97:e0:82:06:d7:05:e5:94:63:87:c2:32:d7:96:bc:
86:85:c9:dd:76:fb:1f:04:70:4f:d2:6c:b7:60:9f:4a:97:50:
38:a3:50:2c:bb:79:ef:43:2e:87:4c:f8:2e:96:1e:88:f7:fd:
c9:66:51:14:85:d4:9c:fd:2a:5a:07:a7:7d:64:51:16:58:17:
8c:68:77:08:e0:65:e2:07:87:0e:33:6f:c6:6d:e5:43:fa:82:
a1:dc:8a:2a:7d:17:4f:c0:db:5f:f9:a1:75:08:a5:17:b3:be:
56:9d:aa:3e:f0:b2:6f:a7:aa:eb:81:d5:c3:7c:44:a3:f0:0f:
0a:a9:a0:83:ce:9d:7f:d7:bc:84:87:11:df:5d:75:1f:37:df:
f3:dd:25:d5:f1:13:70:e9:ad:4a:9e:6a:ca:9b:95:25:1e:2e:
ba:43:29:ed:0f:67:f6:37:fe:34:4c:ae:36:ab:72:2f:a6:fd:
7e:e4:51:aa:02:41:f0:94:13:b0:80:1b:ca:6b:66:ff:30:f5:
37:58:0d:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:57:33 2026 by rpki-client