
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/D865F69A233111EE813C5D26C4F9AE02.roa
File: D865F69A233111EE813C5D26C4F9AE02.roa (raw, json)
Hash identifier: i4fkr2yi7rKl11iHs6wQVlIoLCufxpnrDVj0EZBu5xg=
Subject key identifier: 5A:F8:AF:E9:6A:EE:80:F8:F3:E3:79:8D:A1:81:BE:E2:45:98:45:65
Certificate issuer: /CN=A918E293/serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849
Certificate serial: 021E
Authority key identifier: B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/D865F69A233111EE813C5D26C4F9AE02.roa
Signing time: Sat 25 Apr 2026 03:35:51 +0000
ROA not before: Sat 25 Apr 2026 03:35:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151076
IP address blocks: 103.129.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl
rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542 (0x21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E293, serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849
Validity
Not Before: Apr 25 03:35:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69ec3697-3992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f0:51:35:55:06:f1:01:a7:80:97:ae:98:6a:
ae:84:01:2a:ae:d4:fd:7e:b0:5a:eb:5a:ee:04:92:
2e:31:16:51:96:d1:cd:a1:62:9e:98:7d:ac:de:0d:
c8:72:6e:38:e5:72:b3:55:b6:d9:6d:7e:79:7f:37:
cd:3f:59:dc:31:c8:fc:54:67:89:a7:ba:e6:07:b4:
06:d4:7a:0d:0e:19:1c:a2:31:ba:5d:74:99:30:39:
e3:fb:0e:4c:9b:2f:e2:3b:2e:7e:58:a7:29:02:5d:
4d:62:6f:cc:13:e9:15:c7:06:7a:44:2f:4e:a6:f3:
b9:e7:17:16:df:51:79:50:a5:94:70:fd:96:ea:f2:
62:94:b1:ac:e5:9c:02:e6:8b:e3:db:16:aa:93:f0:
5c:b6:c2:8e:41:8a:a5:74:f5:e2:cd:f6:05:b5:29:
d6:58:65:56:33:d9:8f:fd:60:d6:d5:e0:3e:57:7d:
f7:11:3b:fb:64:1f:b4:10:ce:02:dd:54:1f:25:76:
80:f9:0e:6a:45:7b:d6:a3:ec:0e:bd:65:98:6c:50:
39:17:2f:6f:eb:e2:72:c4:dc:a5:69:3d:63:de:ec:
d7:6c:9a:b0:8e:3b:35:48:01:32:62:41:ae:06:2c:
2a:3e:97:9b:74:40:15:fb:16:9c:ee:8a:92:09:fd:
18:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F8:AF:E9:6A:EE:80:F8:F3:E3:79:8D:A1:81:BE:E2:45:98:45:65
X509v3 Authority Key Identifier:
keyid:B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/D865F69A233111EE813C5D26C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.129.18.0/23
Signature Algorithm: sha256WithRSAEncryption
91:3c:82:75:d4:b2:d9:a8:4a:fa:05:da:6e:e6:7a:da:4a:a3:
56:ef:94:2c:90:c9:d0:ff:06:4c:2a:24:d5:ae:42:76:a1:a6:
93:bd:ca:c0:4f:1e:fa:25:fe:f3:f0:66:f0:a5:f7:5b:ea:24:
bc:dc:12:43:17:e4:6d:96:df:10:cd:92:47:72:66:cc:2a:d1:
79:21:48:12:7f:9a:33:77:56:5e:25:4f:2b:8e:2d:50:95:ef:
53:97:86:3e:50:bd:d0:da:4a:85:e0:65:8c:fe:0b:40:24:cc:
aa:09:d8:dc:24:a0:19:64:21:57:6a:06:9f:61:94:ea:21:8a:
19:61:9e:4f:71:38:82:3c:60:80:ac:5d:c9:29:1f:d3:a9:9c:
50:e5:e9:68:86:3d:50:0d:49:81:e5:2b:94:99:75:4e:dc:4c:
0a:2d:c4:9f:bb:ff:c4:bd:a2:bb:07:35:1b:2f:03:ac:26:bd:
73:29:dc:b2:01:c2:3d:c7:70:0b:3a:5c:b8:eb:0e:30:17:c3:
6a:68:5b:67:82:30:af:b1:d9:b8:95:52:2e:69:92:a4:b4:ef:
14:5e:74:73:b1:c7:99:0e:0e:c5:8d:53:42:30:cd:f2:82:24:
70:52:7d:21:62:d9:e9:5d:85:bc:da:94:b9:a5:5e:86:14:20:
03:e3:4b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:06:38 2026 by rpki-client