
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0EE1B30C1BB011F1BDD4CED80D3D8C67.roa
File: 0EE1B30C1BB011F1BDD4CED80D3D8C67.roa (raw, json)
Hash identifier: 72sVuTVFNN9cvo3xvmctJIQPmBojTc5Lunbcf2k+CeQ=
Subject key identifier: 57:C1:93:9F:51:CA:6A:BD:6F:08:AA:C0:DE:C2:C0:E9:25:46:0A:CA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DBCA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0EE1B30C1BB011F1BDD4CED80D3D8C67.roa
Signing time: Mon 09 Mar 2026 12:04:00 +0000
ROA not before: Mon 09 Mar 2026 12:04:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138726
IP address blocks: 103.138.104.0/24 maxlen: 24
103.138.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56266 (0xdbca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 9 12:04:00 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69aeb730-c0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:0f:1c:74:ee:94:fe:9b:c0:10:d8:20:6a:f0:
db:41:bb:05:7c:b2:7b:8c:6b:e3:89:92:48:4f:16:
98:44:f2:77:52:47:68:79:0c:c5:10:4e:d6:57:69:
5f:eb:47:ce:2c:33:48:44:bf:08:2b:a6:3a:cd:62:
96:94:ed:d2:4f:fe:a2:90:1a:2f:17:84:ea:d9:0e:
cd:66:23:11:41:95:a7:af:c0:8e:fb:37:87:fc:e2:
fa:56:f8:68:60:6a:d9:07:8a:d0:eb:29:64:0b:59:
05:22:d6:62:bf:71:d6:b9:2d:64:d2:f8:fe:36:31:
16:47:67:e6:36:1a:2d:1e:db:79:4c:66:2d:70:bd:
46:64:c0:96:aa:99:dc:3c:95:4d:be:c8:68:2e:88:
c1:04:a3:91:e2:2f:13:e8:69:a5:87:b3:94:2f:5c:
2b:e1:7a:0d:a0:fa:96:d0:cc:ba:9d:b2:90:a9:0f:
3b:7d:5f:c3:1a:b1:a0:8e:fb:03:3a:3b:4d:55:b0:
ff:1f:72:ea:a1:ae:a4:73:f4:85:c9:0c:dd:a8:6a:
96:56:4f:f9:16:51:c6:99:83:7a:4f:63:ba:8e:fa:
c2:43:ab:1a:e6:69:4f:1c:89:fb:76:5c:74:35:5a:
90:75:d0:65:30:78:36:8e:d8:ac:6c:98:43:b4:3b:
64:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C1:93:9F:51:CA:6A:BD:6F:08:AA:C0:DE:C2:C0:E9:25:46:0A:CA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0EE1B30C1BB011F1BDD4CED80D3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.104.0/23
Signature Algorithm: sha256WithRSAEncryption
77:cc:44:35:a5:99:eb:c7:e1:03:c3:5a:64:6c:f1:53:2f:9b:
41:42:eb:7e:83:ae:98:ba:89:21:9e:32:8f:46:e8:0f:7f:3c:
3e:9c:92:e5:f6:02:69:35:eb:a6:f6:f7:09:49:94:db:e5:fd:
57:57:00:3c:d4:5e:9d:8a:a5:86:2d:cb:33:b6:63:14:2d:0d:
76:e8:ab:23:e9:90:21:39:6b:c3:b3:25:94:b6:c3:51:46:c4:
2c:87:ab:3b:c0:3a:55:59:c1:03:ef:81:27:54:c0:61:b7:dd:
58:88:28:ef:8d:12:4e:5d:f9:8d:58:29:1e:e1:f1:bf:ee:3b:
36:4d:cf:48:89:4f:48:30:bf:ae:e5:b9:e2:fc:ef:2b:43:eb:
e2:23:5d:0a:77:7b:5b:e1:df:b4:fc:ac:07:fb:e0:11:c9:54:
46:7d:04:bf:43:9d:9e:e0:e6:de:56:77:6c:0e:d6:cd:d1:24:
e9:a7:a9:64:71:b1:28:44:62:df:16:0a:ab:2b:09:6f:72:36:
b7:1b:0a:52:3e:6a:1d:0a:b2:f3:27:55:ac:07:75:19:58:b0:
2d:fa:b1:91:d7:aa:c1:2a:f1:a4:3d:85:83:bf:00:28:97:0f:
2e:af:fe:37:ed:93:23:97:2a:dd:68:27:cb:e6:6d:a3:e6:39:
a0:f3:b7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:49:47 2026 by rpki-client