
$ rpki-client -vvf rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/74EAEAC41ED211EFA618AB5EC4F9AE02.roa
File: 74EAEAC41ED211EFA618AB5EC4F9AE02.roa (raw, json)
Hash identifier: luNzOp9WQ2A7sNDC/iK8zbbGEM1p3MEBvj7zZ4BWvgA=
Subject key identifier: F0:67:F6:F6:72:55:08:C2:AD:BA:EE:03:02:D5:73:60:78:1A:7B:3D
Certificate issuer: /CN=A916879A/serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871
Certificate serial: 0162
Authority key identifier: 39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/74EAEAC41ED211EFA618AB5EC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:14:23 +0000
ROA not before: Wed 24 Sep 2025 01:33:57 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 148968
IP address blocks: 103.118.161.0/24 maxlen: 24
203.25.98.0/24 maxlen: 24
2001:df5:d500::/48 maxlen: 48
2001:df5:d501::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl
rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916879A, serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871
Validity
Not Before: Sep 24 01:33:57 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a59b3f-78c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:75:74:38:98:52:98:ea:ad:5c:b0:ae:95:11:
a6:ca:75:55:d2:c7:ac:15:cd:e0:a9:e6:fc:bb:96:
3e:79:94:86:54:9e:29:e7:7e:b7:97:71:8d:88:e4:
c8:55:76:63:a5:f1:79:7c:6f:97:93:3c:c6:c1:2a:
d5:a2:ca:b9:05:84:d7:c2:83:d3:57:56:83:08:f7:
2a:44:f2:a9:c4:ae:e2:47:40:50:61:61:a9:0d:70:
b9:c5:1b:b3:e3:27:a1:8c:e1:f0:d8:c4:18:be:09:
c6:f0:94:40:9d:da:50:8b:6e:66:8d:cf:42:b1:27:
12:ea:97:67:56:e9:a2:fa:ca:63:94:d7:11:e2:fe:
c9:81:3f:56:b3:a6:46:3c:02:c9:62:ba:05:8d:ac:
5b:66:29:12:2c:e1:3c:cf:35:71:6f:82:e2:af:e4:
d9:30:2e:5c:12:d0:35:bd:57:dd:83:e3:63:6c:18:
85:c3:5c:03:3a:1c:50:b4:f8:bb:b2:99:a0:24:88:
9b:3d:72:78:e5:61:90:2f:5e:2b:45:85:0e:61:59:
0f:44:db:98:10:8b:e3:16:42:c4:1b:ee:7f:6b:58:
94:37:cb:c4:73:86:13:e3:d8:8b:f6:c6:0f:01:6d:
dd:22:8d:8a:db:e9:c7:b9:99:47:4d:af:96:ae:ea:
de:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:67:F6:F6:72:55:08:C2:AD:BA:EE:03:02:D5:73:60:78:1A:7B:3D
X509v3 Authority Key Identifier:
keyid:39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/74EAEAC41ED211EFA618AB5EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.118.161.0/24
203.25.98.0/24
IPv6:
2001:df5:d500::/47
Signature Algorithm: sha256WithRSAEncryption
9b:9d:3d:72:95:1b:33:16:f1:03:fd:f4:e2:64:25:22:73:17:
df:52:b7:3f:44:2f:88:5b:fa:3c:e6:aa:4a:40:05:5f:42:bb:
9c:e5:32:aa:bb:8e:ab:04:5e:91:9d:96:28:30:6d:8f:71:d6:
8f:4a:b9:f5:3b:13:05:96:8f:c4:7e:54:4f:13:3c:95:2c:c7:
4b:5f:42:b1:97:11:b9:22:e2:a4:e4:64:0c:56:3b:38:cf:a8:
b4:6f:f1:00:43:ee:45:63:5d:68:47:8d:cc:33:48:5c:11:ae:
0b:51:7d:9c:86:65:8b:d0:8a:bc:99:ce:e6:72:0e:94:30:2f:
ec:28:c4:30:d1:0c:e5:36:6b:0e:34:bf:0b:d3:13:74:52:1c:
0c:75:94:31:28:a6:bf:ab:c9:b7:6f:18:8b:57:ee:59:61:c4:
51:27:0f:4b:83:c7:61:f4:07:03:15:69:9d:21:78:4b:0a:9e:
ae:be:9f:01:42:95:2d:e7:7e:58:c0:6a:fc:a0:92:82:6c:ad:
d9:3a:6e:f7:7f:e2:03:da:5c:b5:42:88:1b:b6:a7:fc:90:2f:
67:8f:0a:65:98:2a:17:41:e0:8d:5a:cc:4e:6e:ca:cb:c4:c2:
5d:ae:1c:03:09:da:02:11:8d:6d:bd:db:5d:29:ec:05:7b:44:
3e:37:af:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:04:25 2026 by rpki-client