
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/B56F2E9697B811ECA8AA4230C4F9AE02.roa
File: B56F2E9697B811ECA8AA4230C4F9AE02.roa (raw, json)
Hash identifier: 6ti6FbVvSqGTcr5Mk4sW/mWtZDVZBoCM8zsoDPjRWXs=
Subject key identifier: AB:DE:37:65:29:4D:F2:A4:64:01:7D:B6:84:0C:6B:DF:A0:E9:58:13
Certificate issuer: /CN=A918F20B/serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
Certificate serial: 0450
Authority key identifier: 77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/B56F2E9697B811ECA8AA4230C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:03:05 +0000
ROA not before: Wed 27 Aug 2025 01:06:49 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 139659
IP address blocks: 103.251.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl
rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 23:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1104 (0x450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F20B, serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
Validity
Not Before: Aug 27 01:06:49 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a45529-28a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:41:ad:3f:1e:cb:10:dc:0a:6a:84:de:8c:4f:
f2:b9:7f:38:0f:22:d3:51:20:27:c7:d0:5c:96:83:
60:70:43:e4:2a:a0:84:fc:f9:c5:52:3c:b0:46:89:
94:40:64:15:88:d7:54:19:19:f8:d5:d0:62:ef:80:
0d:45:f8:7a:46:f6:99:94:1e:7e:35:4d:a6:82:17:
f6:00:dc:89:7a:f1:0e:ad:30:ee:5b:87:73:b5:b5:
5e:99:86:47:91:05:8e:6b:1e:c1:90:f1:11:2a:9c:
43:2c:77:1c:11:3f:64:8c:00:0a:5b:b0:f6:47:19:
6b:ad:c9:0f:0f:42:cd:72:f2:b1:30:02:36:13:d9:
6a:00:6a:19:c8:84:03:3e:0c:b6:0d:e0:2b:55:5d:
e9:5c:10:81:d4:97:de:7a:40:eb:b6:be:7f:f9:84:
d7:58:61:77:88:37:b0:a5:be:42:33:42:2f:bf:d7:
c6:e0:a6:2a:b5:08:2a:04:6d:08:d4:4c:f2:3f:04:
f8:ec:3c:1a:c3:a3:c0:59:6c:14:df:78:e8:bb:0b:
4a:4e:cf:a4:16:ca:45:af:ac:1d:0f:c7:4e:53:46:
5d:9d:3e:77:6f:79:08:14:88:64:b0:30:0d:d1:f5:
26:cc:da:12:93:87:e5:29:58:41:cf:eb:22:8f:1a:
6b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DE:37:65:29:4D:F2:A4:64:01:7D:B6:84:0C:6B:DF:A0:E9:58:13
X509v3 Authority Key Identifier:
keyid:77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/B56F2E9697B811ECA8AA4230C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.251.89.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:e5:8f:b5:8c:21:5b:14:a9:8e:92:10:3f:3e:00:2b:e8:7e:
b6:45:f3:a7:74:5d:de:17:28:55:e1:b4:83:96:f2:8f:ac:ac:
0a:2c:8a:5a:81:7a:db:5a:e2:97:16:06:8a:2a:18:dc:b3:c2:
c9:f6:f8:08:a8:9b:13:43:8a:70:0d:50:f9:83:55:79:fd:3f:
87:8b:f1:29:9f:ba:91:14:01:5d:0d:97:f4:26:07:0c:5d:b0:
ea:6e:c5:29:9e:83:70:70:59:95:51:f1:d2:3a:00:04:db:f6:
fe:17:0c:78:7a:01:7f:47:56:74:f4:2d:30:ff:f0:19:11:fa:
93:15:f0:66:a7:33:d4:e0:f3:f6:64:4b:74:8c:2d:72:49:26:
27:34:e1:ee:65:78:c1:64:02:cd:27:35:58:23:24:58:85:35:
e5:7f:e5:5f:7c:dc:24:99:67:9d:cc:87:9d:ce:59:73:c1:ba:
de:f8:d1:a8:49:b9:e1:57:a4:d6:f5:49:bd:a9:d6:ed:1f:2d:
1b:2d:1e:08:45:0b:f9:82:b6:26:fc:a7:d5:5b:2e:aa:dd:9b:
32:9a:19:3f:08:22:52:08:ba:76:70:52:c3:37:23:2c:ca:66:
e9:29:67:9a:86:d7:b0:d6:04:39:81:bf:fb:64:16:7a:1c:01:
95:5a:d5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 10:33:12 2026 by rpki-client