
$ rpki-client -vvf rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/7ED42CD6F35111EF8BF19562C4F9AE02.roa
File: 7ED42CD6F35111EF8BF19562C4F9AE02.roa (raw, json)
Hash identifier: U1wbDqDunlaKuYqjqIcFyq/5UG7Pub5IpvN+buNY/uw=
Subject key identifier: 53:A4:0D:3F:13:70:EB:E5:CE:04:A3:49:3B:01:B3:18:93:9A:42:7E
Certificate issuer: /CN=A918ED57/serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Certificate serial: 0813
Authority key identifier: 66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/7ED42CD6F35111EF8BF19562C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:25:29 +0000
ROA not before: Thu 04 Sep 2025 22:02:39 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 19905
IP address blocks: 43.247.168.0/22 maxlen: 24
103.14.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 20:46:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2067 (0x813)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ED57, serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Validity
Not Before: Sep 4 22:02:39 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a43039-56fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:af:a9:8d:5a:12:40:26:c1:a1:df:79:ea:24:
d9:76:34:ab:f2:aa:e2:68:1a:0d:92:3c:77:ec:77:
73:0d:68:5b:5f:5d:00:0f:10:e3:34:96:49:d0:df:
70:b2:b3:25:01:8d:92:e3:79:b9:6b:9f:4c:b0:3f:
d0:92:c6:6e:24:16:8b:43:d1:b2:ce:96:b0:ff:5b:
30:94:9b:8b:86:60:55:eb:db:4d:60:16:c4:d4:d9:
29:84:6f:55:81:7f:f6:ae:27:5d:10:4a:de:47:3e:
a7:26:11:b0:37:2e:0d:48:6c:83:65:38:3f:22:e1:
d7:fe:4f:f0:8a:a1:cb:c7:fc:0d:08:11:39:8a:b4:
24:82:01:95:fe:75:29:7d:87:0b:e0:1d:fc:ab:13:
99:a5:d9:aa:53:bd:7a:9a:76:64:8c:6d:3f:0c:95:
98:25:fb:0b:db:ef:ed:c3:ad:95:ca:0b:27:79:81:
3d:4b:1a:fd:ba:ee:2c:24:8d:22:14:4e:f5:c5:d5:
e1:76:dd:69:d3:4e:dd:f5:a2:9e:7f:b0:f8:5f:de:
11:07:80:e5:25:b2:22:d2:25:72:63:31:d2:9b:a8:
ff:fd:6c:9d:d9:6a:60:4e:d4:67:82:80:7e:ef:9e:
87:71:d8:5d:2f:4a:5b:65:01:31:39:f3:07:32:a7:
54:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A4:0D:3F:13:70:EB:E5:CE:04:A3:49:3B:01:B3:18:93:9A:42:7E
X509v3 Authority Key Identifier:
keyid:66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/7ED42CD6F35111EF8BF19562C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.247.168.0/22
103.14.220.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:15:c9:f3:07:52:ca:5e:c6:f2:74:c5:c3:bf:a0:34:b6:e3:
01:2f:70:c0:91:fd:ce:63:63:bd:1b:e9:7f:2d:6a:1c:8a:04:
c3:ac:f2:6e:8a:d0:ad:08:fc:60:da:26:23:c8:0e:7c:af:3d:
d3:fb:79:f3:37:dd:42:be:bd:3a:85:23:e6:94:44:62:97:61:
45:ce:f7:07:7e:6e:fc:1c:2c:33:fd:aa:7d:b3:00:06:9c:4b:
94:0b:83:33:d3:8c:c9:8f:9b:59:85:fd:e1:eb:5f:98:00:2f:
2f:4c:1c:54:d1:26:51:d5:f7:2f:6e:bb:e9:cc:23:cd:e2:ff:
53:b6:9a:ce:59:72:8e:87:84:a1:b9:ae:4f:06:be:d7:a7:dd:
42:f6:10:6c:1f:71:c7:04:40:36:47:2b:ac:d9:4a:8d:5c:cd:
6d:7e:bc:d4:87:d2:ba:4a:93:82:cb:fd:f8:d3:64:98:12:06:
ef:fd:d5:a0:fd:54:92:5f:f3:28:e9:39:e3:29:22:62:c0:31:
16:51:1d:2b:8b:5e:3c:9d:69:20:9d:a4:72:ec:77:f5:42:d9:
9e:b3:82:7b:7d:9c:6d:07:ec:1a:c4:55:52:2a:bb:69:43:c0:
a1:e8:8f:9b:68:d6:d2:dc:c9:71:1a:83:70:7a:25:be:5d:eb:
e1:e1:bf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:53:56 2026 by rpki-client