
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/0F291AFE9D2811EC83448E6FC4F9AE02.roa
File: 0F291AFE9D2811EC83448E6FC4F9AE02.roa (raw, json)
Hash identifier: Kr35OqLAdLLcbYsUb9Idl/TWhv1QqY/qee8KwLiHvqE=
Subject key identifier: D3:A4:D6:8F:E4:3F:6B:76:E0:D3:99:C6:68:AD:E4:06:02:D6:EF:2E
Certificate issuer: /CN=A9118B32/serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995
Certificate serial: 042C
Authority key identifier: B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/0F291AFE9D2811EC83448E6FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:55:18 +0000
ROA not before: Thu 03 Apr 2025 00:56:58 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 149521
IP address blocks: 103.182.118.0/23 maxlen: 23
103.182.118.0/24 maxlen: 24
103.182.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl
rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:57:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1068 (0x42c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118B32, serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995
Validity
Not Before: Apr 3 00:56:58 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3fef6-f55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f2:8b:53:1a:e7:ec:35:a3:73:c8:61:fd:7a:
84:4c:76:42:dc:33:5e:23:a2:c5:a4:60:8f:09:ac:
8f:e1:47:53:27:d7:ba:c6:e0:8a:55:6f:d9:ff:00:
dc:d7:7e:a2:c6:e6:7e:71:f9:74:78:c9:bc:c9:a2:
ad:d9:50:35:3d:75:1c:47:12:98:7e:4a:a3:8f:5a:
b2:d3:d3:6c:62:60:87:86:0a:60:45:30:32:ea:8b:
69:10:8f:d6:ee:d5:16:03:e5:5a:c2:6c:0c:ef:54:
a3:90:61:5e:a2:47:5f:77:42:fc:be:4b:41:b4:d7:
ca:f6:f5:88:0d:af:5d:6a:c0:7c:6b:32:ea:33:18:
5b:ef:53:45:23:75:76:7a:5c:f3:54:22:bc:3a:87:
ec:a5:46:1f:14:0d:40:cf:37:c2:be:01:22:d1:51:
43:61:fd:34:98:22:3a:d9:e6:3c:12:d2:09:5e:7d:
d0:47:08:99:ce:c8:61:d0:65:6c:d7:81:c0:bd:72:
2d:82:a5:2e:d8:06:ff:07:5a:56:d7:08:64:94:b3:
d5:55:4d:df:23:47:92:81:60:5e:8a:8a:e6:f6:2f:
96:d9:27:0b:b3:f2:5f:d2:ab:e0:e9:5a:75:d8:af:
e2:65:4a:8e:e6:ae:99:80:1c:ed:d3:c2:ed:66:22:
41:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A4:D6:8F:E4:3F:6B:76:E0:D3:99:C6:68:AD:E4:06:02:D6:EF:2E
X509v3 Authority Key Identifier:
keyid:B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/0F291AFE9D2811EC83448E6FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.182.118.0/23
Signature Algorithm: sha256WithRSAEncryption
60:7e:00:58:e0:66:a2:70:26:b2:0b:cd:5f:bf:36:02:a5:96:
45:06:6c:18:44:ad:24:06:17:95:ee:79:94:75:08:bb:b9:7a:
a8:65:c8:30:ff:5f:fe:bf:ac:b7:f6:a1:f0:5e:e5:f6:ef:d8:
60:a9:7b:1b:e0:6b:5e:c9:15:ca:6c:04:27:7c:c5:c7:20:bd:
48:d7:73:e2:aa:6a:d4:a7:57:05:33:3a:5f:b2:d8:4e:9f:83:
0e:0b:63:0e:5a:e4:75:7a:26:a5:3c:4f:c4:0e:13:41:63:11:
ce:b3:d8:b2:22:39:fb:2e:b3:fd:63:8c:40:bc:e6:85:8d:f9:
77:71:44:2b:54:17:cc:5d:a3:8f:b9:67:f6:6d:4c:ee:b1:dc:
94:de:2a:8f:27:a7:76:46:8b:31:62:a5:67:e9:a9:2a:20:83:
88:11:0d:53:a9:65:0c:70:ed:35:d9:4c:4b:2c:d9:03:de:77:
3b:07:4b:3a:c2:a9:10:e1:1a:c2:1d:68:59:43:8d:66:57:4f:
a6:51:32:26:96:37:b9:52:c0:62:ea:a8:5b:09:93:50:15:7a:
b8:78:da:d8:80:27:5a:cf:4d:f0:02:5c:ea:07:d9:74:6a:2c:
fb:2f:01:a9:22:eb:02:12:e5:3e:57:05:ae:b3:36:e7:7a:f2:
a2:07:52:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:41:10 2026 by rpki-client