
$ rpki-client -vvf rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/8EAD1EEE1EC311F183D677F8243D8C67.roa
File: 8EAD1EEE1EC311F183D677F8243D8C67.roa (raw, json)
Hash identifier: DOsChJEuEe0VAUnX2clRsDx3g4TiAhWDNCF2OOQ2WC8=
Subject key identifier: EB:9A:2F:7D:E9:1B:F4:1C:24:4E:11:09:5E:95:63:D7:95:6B:3E:0C
Certificate issuer: /CN=A918767B/serialNumber=C53423288F9FFC1004842BCC40A519238934AA77
Certificate serial: 04AB
Authority key identifier: C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/8EAD1EEE1EC311F183D677F8243D8C67.roa
Signing time: Sat 14 Mar 2026 23:31:52 +0000
ROA not before: Sat 14 Mar 2026 23:31:52 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 133948
IP address blocks: 43.239.232.0/24 maxlen: 24
103.35.122.0/24 maxlen: 24
103.49.126.0/24 maxlen: 24
103.194.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl
rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1195 (0x4ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918767B, serialNumber=C53423288F9FFC1004842BCC40A519238934AA77
Validity
Not Before: Mar 14 23:31:52 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69b5efe8-4bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:df:81:1b:6e:ef:1b:04:c8:24:f0:e5:f1:
6f:0c:aa:41:d7:61:66:d2:af:86:9a:8a:b5:16:88:
7a:d0:1b:90:cc:ac:1b:c1:80:d5:c4:c3:95:2c:fe:
d1:97:56:1b:a9:ce:30:28:6d:99:de:86:c4:dd:22:
cc:09:35:03:c9:08:50:c9:58:70:ce:b5:c6:a5:43:
8b:5c:47:a3:eb:37:a7:62:da:34:16:89:49:60:ff:
f1:6b:43:9f:38:6b:8c:3f:02:ad:28:b3:55:b9:87:
7a:05:42:9f:88:1a:f4:ff:f6:99:ba:60:5a:b3:70:
a9:4c:23:16:0f:de:99:cd:bf:69:75:b3:03:e6:f6:
4a:40:a3:9e:25:9f:0d:24:8f:12:8c:93:e9:51:3f:
42:06:a4:93:08:60:42:31:33:96:6c:7c:61:a8:58:
d5:59:fa:e5:52:57:1b:55:a2:9d:ac:04:16:09:29:
e9:45:83:d8:76:f4:45:ae:4f:8c:d2:b6:68:91:c0:
80:23:2b:4f:bf:47:1b:7f:e9:ab:0d:32:d8:82:16:
5f:1a:55:a8:d5:b4:d1:3c:ae:de:5f:f2:f2:84:13:
f1:a6:0d:3d:c4:bc:07:f0:7a:ab:d7:e9:b9:ba:07:
1f:e0:c5:33:f7:3a:b6:c9:96:64:10:0a:1f:b5:5b:
e0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9A:2F:7D:E9:1B:F4:1C:24:4E:11:09:5E:95:63:D7:95:6B:3E:0C
X509v3 Authority Key Identifier:
keyid:C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/8EAD1EEE1EC311F183D677F8243D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
43.239.232.0/24
103.35.122.0/24
103.49.126.0/24
103.194.212.0/23
Signature Algorithm: sha256WithRSAEncryption
90:da:a8:5d:f0:fa:98:54:19:2c:55:a1:8b:64:67:b4:4b:f8:
59:c5:26:5e:c4:9b:92:72:38:85:c7:21:40:58:42:c6:f5:0c:
18:85:96:bc:0b:f9:75:92:27:d3:83:96:b6:77:7e:05:38:2d:
2b:82:75:3a:27:ad:90:e7:27:45:78:0d:3f:93:45:5e:f5:0b:
db:e4:bc:13:be:ce:a9:f5:4b:4b:b9:75:6f:18:d8:40:76:52:
0a:f9:f3:43:ed:91:ff:6a:dc:19:99:f2:43:3b:d1:82:3a:9a:
de:0d:e2:82:ab:0b:e5:67:46:35:7a:84:5c:36:49:df:fa:9a:
f6:e5:e2:ea:03:98:2d:f8:f3:1d:43:1e:2b:07:65:eb:13:be:
6c:0e:77:04:39:5a:a7:80:c0:4b:76:25:6e:a6:12:42:16:b6:
9a:a6:a4:b3:ac:1e:d7:73:ac:cd:40:75:e5:1c:78:85:1b:8c:
34:bc:d8:34:9d:64:f9:e6:73:12:2b:1f:e2:b5:4d:d2:07:dc:
b8:80:e3:bf:cf:7f:25:67:81:e9:dc:dd:96:07:3b:7b:d6:e1:
99:49:d4:f4:26:3c:3e:91:63:20:df:fb:88:88:72:12:d0:60:
03:91:d9:97:f5:20:b6:2d:fc:cc:9d:2b:a0:af:50:f7:93:f5:
f6:f9:d3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:59:14 2026 by rpki-client