
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/03C21B0E6C7111F0A88D9042C4F9AE02.roa
File: 03C21B0E6C7111F0A88D9042C4F9AE02.roa (raw, json)
Hash identifier: sEzhCDlAMItgNGqVefcRgp0ozkCGAysfuv3qE16JNC4=
Subject key identifier: BB:3C:81:8D:4F:29:13:50:94:2A:F6:A7:50:CD:F3:08:44:E3:DE:F3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EF16
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/03C21B0E6C7111F0A88D9042C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:39:54 +0000
ROA not before: Mon 06 Jul 2026 16:39:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134248
IP address blocks: 103.162.214.0/24 maxlen: 24
103.162.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61206 (0xef16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:39:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bda5a-981b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:0f:22:49:93:b2:c2:ee:c1:46:a8:3b:6c:
ea:1b:4d:d7:a6:fc:88:5d:02:84:bc:4e:d9:d0:6a:
bd:f7:c6:4e:0b:f2:f0:d1:5c:f7:21:c9:f3:13:52:
20:21:be:c1:9c:d6:86:01:2b:2c:84:9f:eb:ca:dd:
af:84:08:15:d8:98:09:01:28:86:e2:d1:49:9c:8d:
ec:66:4c:56:e8:2c:0e:ec:d6:aa:88:e9:8f:f6:81:
4a:bb:f5:18:d2:35:b5:4d:35:69:ec:40:93:f8:b1:
08:72:07:48:6c:10:b8:92:ce:56:38:7f:fd:7f:ed:
4b:99:70:ff:cf:66:49:05:f6:9e:2f:34:f0:a5:25:
b6:c8:72:78:b6:6d:fa:f5:95:18:e0:8e:23:ab:f6:
18:35:75:e0:c1:dc:ad:96:70:60:d7:32:09:1d:25:
66:87:6d:d2:e7:f3:43:90:0c:ba:63:ee:29:84:1c:
48:fd:c7:47:bc:bc:99:2e:a5:6a:18:ed:5c:74:05:
1c:8f:da:6a:90:b7:8f:e6:96:b9:f6:c8:bc:4e:be:
d6:fe:b1:79:34:c0:b9:f3:80:0e:c8:4d:81:ad:7b:
45:d8:ad:b5:bc:30:dd:b1:8d:f4:55:25:f0:62:f7:
44:1c:3c:ae:61:6e:d1:f0:b5:90:51:eb:aa:3a:0f:
d7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3C:81:8D:4F:29:13:50:94:2A:F6:A7:50:CD:F3:08:44:E3:DE:F3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/03C21B0E6C7111F0A88D9042C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.162.214.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:76:7d:c3:5d:35:dc:11:40:74:ba:ba:45:99:76:d8:e2:70:
db:5c:5c:1c:0d:1a:38:dd:a2:e2:f2:a6:28:7a:ee:8e:f9:f3:
fd:82:7a:d6:99:4d:27:d8:87:aa:2f:46:97:24:d6:eb:61:3b:
8b:a4:c8:30:fe:5c:6b:02:05:54:ce:fb:ba:53:e5:53:35:0e:
0a:94:9a:d1:c4:a1:6a:52:e3:10:11:2a:7a:9f:a9:76:54:72:
85:7e:2c:03:ba:c5:15:90:d3:9b:d7:5d:a4:61:b2:44:63:64:
98:fe:a2:8d:a7:0e:fa:4f:0d:1c:a7:f3:b3:40:da:ab:cc:f7:
50:40:ca:22:42:8a:37:53:b8:1c:3e:35:d9:73:97:d7:04:4c:
b2:85:19:ab:26:e5:bb:e4:2a:5a:6a:21:6a:06:ee:52:7c:ad:
85:0c:81:d7:d1:20:61:8b:f5:46:60:5f:f9:a8:ba:e3:f1:aa:
e3:8c:22:9c:18:a6:99:90:a1:a3:30:3c:d1:f3:d0:7c:fe:68:
67:70:cd:44:bf:7c:d2:58:46:90:89:b4:42:72:be:f9:99:12:
0f:63:15:7a:75:df:c3:f6:6b:2c:21:b7:4d:b3:aa:13:c8:d1:
52:ce:56:44:f8:83:bf:33:66:9d:31:9d:3f:e5:dc:eb:79:02:
50:bc:93:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:37 2026 by rpki-client