
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa
File: D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa (raw, json)
Hash identifier: adNVp+jeKpiI/DZRqFAXkjDO248rnrJta6jKv+gGFM0=
Subject key identifier: CE:3E:FD:1D:C1:BC:A7:D5:E6:AB:04:30:8C:98:F2:8E:A5:74:50:34
Certificate issuer: /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
Certificate serial: 110B
Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:26:40 +0000
ROA not before: Fri 30 Jan 2026 17:15:01 +0000
ROA not after: Tue 02 Jun 2026 00:00:00 +0000
asID: 137955
IP address blocks: 103.103.194.0/24 maxlen: 24
103.116.192.0/24 maxlen: 24
2405:1340::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl
rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4363 (0x110b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D3A9, serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
Validity
Not Before: Jan 30 17:15:01 2026 GMT
Not After : Jun 2 00:00:00 2026 GMT
Subject: CN=69a468c0-2224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:35:c8:ea:bd:a0:82:7d:8e:ec:66:ef:d2:ad:
bf:2c:b2:9e:b1:cd:02:ee:a7:ea:39:9f:35:dd:c2:
99:22:a2:ee:3d:df:6b:ed:b8:03:dd:48:7e:2a:37:
2c:46:cf:4c:6d:ff:21:8d:65:b3:d6:d3:4d:b7:dc:
2a:21:bf:b3:81:b9:c3:c7:6b:fb:2a:34:d0:0b:b6:
0e:df:3b:c6:3a:43:32:f2:34:48:3c:e5:7b:e4:df:
0d:93:93:0a:23:ba:4b:8b:06:e7:ed:79:c4:0f:6e:
87:1e:c1:c4:f6:e1:21:17:44:d1:4b:0e:1b:71:57:
87:29:eb:bd:75:1c:36:95:f2:e4:04:18:40:f9:2a:
ef:9b:4d:22:0f:a8:24:c9:27:1a:a1:7c:d4:a6:be:
13:9a:54:c9:7c:0a:a3:07:37:b1:1c:16:07:b3:10:
a7:c5:d4:f1:2c:6a:95:f8:e0:76:d2:72:3e:e8:36:
26:47:5b:8c:9c:c2:c8:82:0d:e3:69:90:bf:ef:73:
49:f8:ce:83:e4:5c:21:53:5e:c4:ea:25:16:b6:ed:
f9:97:b3:34:2e:b2:84:ff:06:fe:df:21:09:e7:60:
b5:f8:3c:bf:03:15:ec:70:f7:2f:f8:eb:ea:07:bc:
66:b2:fe:8d:f7:34:3b:df:b6:44:14:a3:0a:ad:97:
0e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3E:FD:1D:C1:BC:A7:D5:E6:AB:04:30:8C:98:F2:8E:A5:74:50:34
X509v3 Authority Key Identifier:
keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.103.194.0/24
103.116.192.0/24
IPv6:
2405:1340::/32
Signature Algorithm: sha256WithRSAEncryption
4f:2d:92:f7:2e:5e:6a:9d:49:98:8e:81:b7:39:a5:4a:f7:17:
ff:80:29:a6:e9:7b:69:2c:9b:34:70:03:52:16:69:1a:6e:ff:
48:d9:2c:a4:34:ad:92:f0:a2:45:ad:38:73:d1:21:0c:46:cb:
d4:8f:a0:c5:5e:a5:25:8c:c6:f0:6b:c4:83:ad:4e:dc:50:2b:
d7:ef:90:8c:c2:e8:27:a9:c5:9c:1e:73:1a:60:ad:38:d0:e1:
8a:a5:fc:e5:b0:2c:cf:f8:b3:c9:0c:45:d3:98:c1:6b:c4:c4:
56:10:c8:24:18:eb:8d:45:7a:00:38:05:a0:a0:9c:01:0c:f1:
9c:d6:5a:40:5a:e0:d6:7d:47:9b:ee:fa:1f:dd:44:8a:6c:11:
f8:74:01:d6:a6:99:ec:37:ce:77:de:fe:d2:98:6c:7d:f0:f6:
1b:24:b2:d1:fd:89:2f:06:21:18:b5:13:8e:73:92:c8:7c:53:
e9:39:55:66:d8:eb:23:f8:d4:2a:7e:0f:28:cb:0c:70:5c:3c:
5e:75:4e:59:62:ed:4e:6e:c0:fd:36:7e:96:50:2e:65:71:b5:
f7:3c:97:b7:7a:7a:6d:ef:de:e6:05:f9:e9:60:5b:cf:a8:f3:
3c:63:49:31:2a:55:24:3e:d9:01:fc:0d:5a:e2:a2:44:a9:88:
cc:07:da:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:48 2026 by rpki-client