
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/0CD36EF4500B11EC9430721DC4F9AE02.roa
File: 0CD36EF4500B11EC9430721DC4F9AE02.roa (raw, json)
Hash identifier: ecqh96rlJZPd66W+GRhUvcvW/439i3jELOA0IH7jsks=
Subject key identifier: 4F:BE:0F:98:A3:FC:EC:49:C3:19:B3:08:29:B8:03:4F:AD:BF:71:C8
Certificate issuer: /CN=A918BBBA/serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363
Certificate serial: 04F9
Authority key identifier: 2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/0CD36EF4500B11EC9430721DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:46:17 +0000
ROA not before: Wed 26 Nov 2025 22:46:18 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 139922
IP address blocks: 103.174.168.0/23 maxlen: 24
2001:df7:cc80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl
rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:21:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1273 (0x4f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BBBA, serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363
Validity
Not Before: Nov 26 22:46:18 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a43519-b81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3a:70:80:77:bc:b3:54:ae:64:b8:1a:a1:44:
59:58:be:25:02:ea:01:6e:cf:76:e1:54:3d:86:ff:
61:53:42:04:b7:f4:d4:1f:56:b0:93:25:02:8c:12:
c2:ee:db:d6:53:2a:db:44:a0:81:ad:43:23:4b:fe:
79:9a:22:d6:b7:4c:12:09:19:3f:9a:97:ec:42:52:
4a:3c:3b:d9:69:e0:2d:1f:bf:e5:38:50:2a:b9:23:
a6:87:92:fc:25:b4:4d:ed:46:10:b6:cb:94:f6:9c:
9a:09:fe:96:fa:c3:99:0f:c4:f5:06:bf:fa:91:1d:
da:47:57:6c:34:6b:50:cb:3c:6b:38:15:8a:55:a0:
7a:f0:55:81:e4:04:c4:53:a7:8a:78:55:c4:99:b3:
6b:3c:8f:14:98:21:09:0a:a6:1a:b4:ca:33:f1:7f:
57:a7:ce:79:1a:2b:66:6a:e8:ed:e4:8a:76:17:33:
4f:d2:ad:52:bc:98:98:5a:a7:20:0b:73:8a:fe:35:
d7:83:6b:85:99:b9:a9:e4:5e:c5:8b:6a:6c:24:62:
95:0a:02:92:25:b4:64:3d:6f:b2:e8:e6:83:4c:8c:
79:c0:f6:f6:cf:d7:5d:5b:db:37:96:2b:8e:42:fd:
07:a3:d8:04:91:74:c1:9d:91:5b:3c:b4:d9:31:09:
67:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BE:0F:98:A3:FC:EC:49:C3:19:B3:08:29:B8:03:4F:AD:BF:71:C8
X509v3 Authority Key Identifier:
keyid:2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/0CD36EF4500B11EC9430721DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.174.168.0/23
IPv6:
2001:df7:cc80::/48
Signature Algorithm: sha256WithRSAEncryption
c2:93:60:8f:11:f8:c3:5e:f7:4a:4e:ef:75:7d:3b:8a:3e:6d:
9e:67:71:d3:9c:5a:ca:6d:49:e7:13:3d:78:0c:80:97:4d:9b:
f4:6c:86:42:4c:36:9d:34:19:61:3f:11:df:b6:5b:69:cd:3f:
f5:07:67:af:c0:02:19:a4:c6:96:44:b2:31:c7:89:e5:86:7b:
e0:26:d7:6f:ed:7b:3c:cc:19:35:97:fe:75:c5:d6:be:53:4b:
fd:a7:bc:5c:2d:a5:64:64:e8:65:63:b3:d9:30:ae:e2:fb:96:
0f:44:06:d4:68:3c:78:6d:2d:67:bc:54:7f:b1:79:28:31:fc:
36:b3:f9:60:f7:7b:61:c6:3d:bc:19:b2:82:74:ee:9d:68:3b:
8f:b3:65:61:6c:52:c2:0e:cc:e4:56:dd:40:f6:48:29:f4:c5:
8b:90:3e:c2:cd:f8:2a:07:75:67:71:64:54:24:17:4a:84:ff:
87:7a:1c:72:d0:ff:2f:3c:45:32:8c:91:5a:cb:fd:d2:b8:cc:
d0:5f:d1:9f:8b:bf:90:92:06:fa:08:13:57:e2:fc:56:06:b1:
25:0a:8a:b4:80:a1:78:55:38:0a:0e:dd:fc:1a:d4:79:8e:a6:
56:39:6a:ad:89:41:c7:4c:4f:e7:80:58:4b:5a:7d:65:15:61:
8b:97:25:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:49 2026 by rpki-client