
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/44E0552EC3DC11F19934FFFE5E11F970.roa
File: 44E0552EC3DC11F19934FFFE5E11F970.roa (raw, json)
Hash identifier: G2a3njml4GI82V8O21fYAr9qyh3iH78gWpKnds3ykao=
Subject key identifier: 55:9E:E2:1A:1A:B5:E2:04:F0:E6:0D:94:51:D1:69:0E:AB:13:F2:1B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FE0B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/44E0552EC3DC11F19934FFFE5E11F970.roa
Signing time: Fri 09 Oct 2026 12:23:44 +0000
ROA not before: Fri 09 Oct 2026 12:23:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150593
IP address blocks: 103.17.12.0/23 maxlen: 24
103.85.180.0/23 maxlen: 24
103.137.48.0/22 maxlen: 24
103.182.113.0/24 maxlen: 24
202.66.186.0/23 maxlen: 24
2001:df2:7240::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65035 (0xfe0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Oct 9 12:23:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ac8dcd0-0331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:a4:29:e1:c9:3e:2c:e2:29:0f:b8:a0:43:
13:43:c6:6c:1d:0f:96:b1:fd:86:3d:33:44:0a:18:
7c:da:30:8b:03:c9:65:6b:36:13:8f:48:7f:bf:05:
b0:19:4a:c4:e8:c8:c7:3a:f7:85:c6:43:a8:fc:fd:
d1:a1:05:10:6e:ca:ae:5a:eb:cb:a0:d0:d6:9f:f6:
09:83:fa:99:28:2a:c2:5b:80:ac:25:7e:f4:b7:49:
74:da:b5:d7:d5:15:77:92:b4:bf:72:8a:74:40:d5:
65:e1:80:65:4b:3a:38:53:2a:bf:e2:3d:1a:9a:0f:
14:90:8d:94:f0:28:96:e2:e3:9c:8b:58:2e:c3:15:
a1:3b:b8:32:e0:dd:da:36:08:23:47:10:f5:db:9d:
09:93:1a:8b:9e:ea:12:68:90:90:16:6c:72:cb:cb:
c2:17:51:f3:80:44:d9:8c:36:0e:a2:08:02:5c:67:
05:67:a6:6d:27:53:57:f0:85:c0:ef:42:69:70:55:
61:f7:c6:6b:df:d8:ff:3c:e8:fc:03:64:60:95:15:
b4:ea:0b:8b:d4:ad:23:77:60:97:be:14:bf:e3:bf:
9a:2e:1c:0e:3f:20:7c:39:d1:bd:6c:e3:63:33:1f:
99:54:b3:45:06:74:4a:57:6e:d6:72:5e:90:f8:c8:
ce:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9E:E2:1A:1A:B5:E2:04:F0:E6:0D:94:51:D1:69:0E:AB:13:F2:1B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/44E0552EC3DC11F19934FFFE5E11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.17.12.0/23
103.85.180.0/23
103.137.48.0/22
103.182.113.0/24
202.66.186.0/23
IPv6:
2001:df2:7240::/48
Signature Algorithm: sha256WithRSAEncryption
9e:28:8a:9c:fc:44:f3:0b:cb:fc:7b:30:73:26:40:53:ef:53:
48:e6:65:a6:2b:e7:94:0a:bd:c8:a9:62:7f:d7:76:0c:70:bb:
be:c6:fe:94:2b:f9:e0:49:96:33:a2:25:0f:ed:1f:bd:6f:76:
03:68:58:f3:61:1a:19:81:89:c4:a4:a4:d5:48:df:d9:7f:9b:
66:6d:56:74:ec:8d:7f:13:ef:79:c5:56:29:d8:a3:25:64:40:
7e:0b:0f:dc:03:7d:f3:cf:91:a6:b8:06:c9:6f:25:7c:f9:ad:
30:eb:2f:90:4d:e5:4d:bb:9d:29:05:ea:9d:ae:f5:ae:fe:94:
d3:77:a3:29:8f:ff:3e:09:04:50:ae:23:65:86:28:fd:37:c6:
91:ea:be:7d:48:0c:85:f9:87:ff:0b:ce:3b:06:e9:24:fc:3c:
9e:47:2e:a2:00:17:44:ec:5a:df:74:60:e3:c4:2f:bc:78:17:
07:aa:b8:a1:1e:90:08:ba:c9:ed:82:8e:eb:f9:93:c8:98:ff:
08:3b:3b:10:0b:6d:c1:51:4f:56:5d:bf:81:4c:b7:c4:34:53:
9d:10:65:15:66:29:fb:97:d8:c4:c9:30:2f:b1:86:a5:c4:bf:
35:d3:77:6f:30:7a:bc:17:6e:df:1e:4d:7c:7d:1d:19:aa:ed:
b6:54:bb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:43:53 2026 by rpki-client