
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/0F291AFE9D2811EC83448E6FC4F9AE02.roa
File: 0F291AFE9D2811EC83448E6FC4F9AE02.roa (raw, json)
Hash identifier: kVxDpjbggfcolPJrx4wyAyjtrQ4Mtc6iJ6/Dgd9wN9w=
Subject key identifier: 56:15:F6:21:E3:BE:FB:04:A6:A1:EE:CD:ED:20:CA:35:27:F3:A0:1C
Certificate issuer: /CN=A9118B32/serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995
Certificate serial: 044E
Authority key identifier: B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/0F291AFE9D2811EC83448E6FC4F9AE02.roa
Signing time: Wed 29 Apr 2026 01:32:30 +0000
ROA not before: Wed 29 Apr 2026 01:32:30 +0000
ROA not after: Fri 28 Aug 2026 00:00:00 +0000
asID: 149521
IP address blocks: 103.182.118.0/23 maxlen: 23
103.182.118.0/24 maxlen: 24
103.182.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl
rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 00:16:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1102 (0x44e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118B32, serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995
Validity
Not Before: Apr 29 01:32:30 2026 GMT
Not After : Aug 28 00:00:00 2026 GMT
Subject: CN=69f15fae-9355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:30:76:e3:87:73:85:8a:14:c1:70:e9:86:8d:
4b:0f:78:a0:43:39:f2:10:a4:a9:53:47:e2:80:09:
73:1e:eb:82:80:68:f4:0b:6f:ed:f6:8d:df:60:64:
ed:96:21:01:6b:56:eb:df:7f:45:7f:ef:ea:cd:a4:
e4:93:7f:d7:87:84:6f:e5:c2:38:29:70:ea:d1:d4:
69:16:ec:b2:62:79:de:f4:8a:71:29:c8:6d:b3:82:
57:1b:07:fa:7c:2d:8e:ba:12:a5:d9:4a:6b:67:80:
2a:14:73:94:82:d7:1c:ca:1b:15:ab:46:06:57:e5:
32:07:e1:e7:8e:0a:7c:c7:16:7d:cb:4d:a8:ba:16:
a3:08:be:93:87:6b:29:fb:e8:64:de:45:b0:c1:7d:
c9:59:30:cc:cf:29:25:8c:1c:1a:45:69:5e:b9:5e:
6a:49:94:ea:de:12:93:f3:d9:a0:9c:9b:69:db:41:
49:02:a6:14:75:6a:e6:a3:f0:d8:1a:92:b3:6a:23:
30:e6:68:a4:a3:9c:a9:62:b5:94:7a:10:61:1a:c7:
e6:8f:ce:ff:79:1f:40:c9:18:f6:7e:96:a1:04:5c:
3e:21:eb:74:c5:f9:e6:a5:3b:55:61:df:dd:c7:59:
4a:34:3a:b3:04:a0:a0:d2:a5:bb:b0:23:a6:71:ea:
dd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:15:F6:21:E3:BE:FB:04:A6:A1:EE:CD:ED:20:CA:35:27:F3:A0:1C
X509v3 Authority Key Identifier:
keyid:B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/0F291AFE9D2811EC83448E6FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.182.118.0/23
Signature Algorithm: sha256WithRSAEncryption
54:e9:d1:ec:2d:fa:56:49:87:e5:2d:76:3d:4d:0b:de:20:7f:
8a:a5:cb:68:e7:c9:46:6c:93:e4:07:20:cd:16:d0:a3:a4:71:
80:69:11:e1:04:10:87:8f:08:14:71:3e:ce:b7:86:96:03:55:
c9:5e:42:e0:fa:46:ab:76:b5:96:b7:d3:00:40:e1:86:30:a9:
54:55:77:aa:1b:cb:cb:3a:8e:89:fe:66:80:d8:98:56:68:7a:
d1:0b:66:91:8e:26:d6:d4:80:78:17:38:e1:23:59:f7:ff:f0:
e4:13:7f:93:3e:c4:1b:87:14:26:c9:5d:29:6f:98:bb:48:33:
9b:83:66:97:47:41:b3:9b:2a:d7:e9:ff:5c:02:fd:ae:22:41:
af:ed:7f:75:7f:34:8e:12:84:9e:9a:0c:bd:9d:2a:24:61:9d:
c4:4e:68:07:78:14:01:47:bb:fb:7f:26:a5:5c:5d:5c:be:9d:
b7:13:bd:eb:7a:e8:fe:c3:0f:1b:5f:5c:6a:a3:20:4c:f5:5b:
7b:22:b9:96:c4:f2:95:de:53:ec:54:85:c2:18:a0:57:28:77:
c5:39:0d:1f:f8:a4:2f:78:55:cb:c3:a1:ef:85:a9:7d:f4:31:
bc:89:40:cb:06:e6:12:a9:78:22:6b:fe:56:50:2f:c2:1e:96:
21:ec:9a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:10:35 2026 by rpki-client