
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/DB0532B2635411EF8B6D364BC4F9AE02.roa
File: DB0532B2635411EF8B6D364BC4F9AE02.roa (raw, json)
Hash identifier: tAhSuIyDSJRJty/LR3Gan+IY5BTumLjHWNcDHOkE0fI=
Subject key identifier: 05:31:89:1B:44:76:E0:74:9E:9C:7F:63:A4:CE:10:7C:A4:01:8E:09
Certificate issuer: /CN=A918E2A5/serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA
Certificate serial: 01C5
Authority key identifier: 8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/DB0532B2635411EF8B6D364BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:24:47 +0000
ROA not before: Fri 27 Jun 2025 04:22:47 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 134184
IP address blocks: 203.23.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl
rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:05:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E2A5, serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA
Validity
Not Before: Jun 27 04:22:47 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a413ef-863b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:43:42:57:d0:2d:0f:03:f7:6f:6d:74:15:ea:
95:f1:f8:f7:2c:36:9b:d9:5d:7c:7a:60:51:b6:2c:
b9:49:4f:d3:ed:2b:a4:13:47:ac:47:d4:d8:97:7d:
36:c7:79:cd:1c:9f:6b:98:5a:52:4d:c9:21:05:85:
63:6a:7a:fc:7f:67:10:e3:26:79:2e:68:8b:e2:1e:
d3:ab:2e:99:22:af:92:e0:03:72:33:5d:c1:de:a2:
b4:e7:2b:ce:d8:ae:94:df:19:40:a9:22:b5:d2:dc:
74:f7:1b:3b:07:24:c2:ca:e2:af:75:10:13:4a:a9:
bd:00:02:f5:b3:71:c3:45:a8:07:37:6e:cc:df:f8:
b2:1e:c0:a3:86:ad:dc:df:95:6d:d3:d7:69:29:55:
8b:e9:e6:fd:79:e1:f4:dd:d3:de:0c:9c:6b:7f:2c:
f2:a2:dc:fd:d8:cd:f3:c0:19:23:85:11:90:cb:8e:
cd:11:a0:cd:17:ce:8b:8c:10:48:0f:1f:32:db:de:
5e:17:ab:e3:9a:a9:c8:54:ed:65:1d:45:39:65:70:
74:3c:6b:9c:c6:26:fa:ad:51:c0:e5:fc:c2:99:51:
d3:b7:15:f7:7e:03:20:e7:1b:29:e3:54:86:a9:6a:
8d:8a:56:bb:81:39:86:6b:3e:ca:af:eb:10:af:c1:
bd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:31:89:1B:44:76:E0:74:9E:9C:7F:63:A4:CE:10:7C:A4:01:8E:09
X509v3 Authority Key Identifier:
keyid:8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/DB0532B2635411EF8B6D364BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.23.90.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f2:15:40:07:ed:38:e3:14:15:ef:e3:5e:f8:12:bb:df:1c:
38:e2:fd:0d:10:78:5d:1a:0a:58:9a:d9:3a:c6:a9:69:6a:a2:
b5:ee:9c:16:21:78:df:86:5b:64:1d:c4:f0:93:a8:30:1a:5f:
a2:e1:20:c2:91:1b:c6:a8:bf:65:d4:ba:08:eb:6b:76:01:e7:
e2:4c:0c:e8:d1:09:95:14:b8:01:2a:35:05:89:35:3d:a0:ef:
97:42:21:cd:14:00:f0:11:11:4f:e4:e0:16:b9:4d:92:f9:75:
fc:d0:53:39:04:f9:75:9e:02:65:17:30:d3:10:1a:44:9d:fa:
e6:ac:e4:1d:65:45:d3:4f:e8:5d:62:d9:2e:fd:c7:5f:67:99:
fe:6a:3b:ec:69:59:3c:ad:a1:b2:3c:cb:62:43:22:67:55:dc:
d7:54:ab:af:45:9d:13:3b:48:6d:57:61:8a:65:49:5f:a0:d4:
06:e2:e2:ef:ae:ca:59:e0:5a:86:58:3f:fe:74:d7:7c:78:7b:
a4:ee:4d:2a:c9:b1:92:c3:7c:9f:3b:1b:70:1a:92:b5:02:59:
c5:2c:8e:6d:92:61:39:29:2c:60:26:a6:45:1d:cd:a0:96:fa:
15:b9:78:7c:03:a1:37:1d:bf:11:b2:1b:c5:1d:d0:f1:ff:b7:
02:c8:e1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:47 2026 by rpki-client