
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/D97AC950ABDD11EDAE837666C4F9AE02.roa
File: D97AC950ABDD11EDAE837666C4F9AE02.roa (raw, json)
Hash identifier: 3zeR3y4ThnqjrUYK2B2lRbeCm3UuFhf7qDtePwaC2RU=
Subject key identifier: 17:0A:1F:1A:86:43:FE:91:7D:A8:36:A5:55:A3:0B:C4:49:5E:AE:0C
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 0548
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/D97AC950ABDD11EDAE837666C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:34:09 +0000
ROA not before: Thu 05 Jun 2025 01:47:43 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 17819
IP address blocks: 203.32.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Mar 2026 00:20:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1352 (0x548)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Jun 5 01:47:43 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a486a0-fcfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ba:eb:33:e0:03:26:ed:36:33:f8:b7:a8:84:
0d:78:f6:b9:6e:8b:a6:2f:50:f2:ab:75:40:65:6c:
47:c9:2f:1b:5c:a7:8d:1e:55:43:42:c1:51:87:dc:
83:48:2b:7e:e1:75:6a:0d:1e:b0:1e:ea:2e:c9:ec:
09:ea:fb:b0:00:23:9a:9c:e1:1a:c3:24:8b:52:e0:
a0:d8:b0:bf:5b:6b:ad:aa:c5:0e:83:da:a3:a4:b9:
54:04:a8:71:aa:6a:57:22:96:2d:39:b2:84:86:d6:
a8:1f:5e:f0:16:5c:3d:e4:a0:9b:6f:fb:49:2f:d1:
66:35:6e:92:a1:29:1b:2e:10:57:9e:44:ec:a6:bb:
28:0f:11:1f:d7:38:99:64:2f:32:74:95:5f:a7:37:
58:02:2d:14:1c:bf:20:fc:46:4d:c7:ed:ed:cf:89:
d0:50:b6:c9:be:19:62:36:d7:30:69:5c:fb:f6:68:
a3:19:45:77:97:f8:7a:10:6f:30:70:46:41:3b:df:
9b:50:6e:26:c2:39:b9:d7:c5:42:ee:2f:36:76:83:
d8:59:5d:41:5a:97:f9:92:80:5f:60:96:58:bc:74:
8a:00:55:5f:1e:70:0d:3c:8c:5c:0d:42:0b:c1:33:
3b:65:22:b7:3a:f5:1c:c3:03:6d:61:12:65:8c:ba:
5a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0A:1F:1A:86:43:FE:91:7D:A8:36:A5:55:A3:0B:C4:49:5E:AE:0C
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/D97AC950ABDD11EDAE837666C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.32.41.0/24
Signature Algorithm: sha256WithRSAEncryption
69:dd:0d:9e:de:e6:0a:61:0c:29:b0:9f:9b:6c:8a:a2:fc:8d:
29:48:02:71:41:79:0b:46:08:e3:5a:4e:ae:a4:3a:b4:d1:61:
02:53:bd:b6:a9:14:db:de:53:56:b5:37:e1:6b:d4:5d:88:e0:
f2:fc:0a:09:8c:c2:d5:31:76:bc:55:fa:f5:c7:2b:2f:c2:50:
17:bd:7e:ea:b6:2b:ff:9e:07:e8:fb:60:10:02:a1:27:2e:3a:
cd:19:45:23:4a:36:80:30:1e:6e:ab:08:7c:de:ac:9c:74:4b:
82:e5:57:41:a4:7e:4b:fd:eb:02:11:58:36:13:ca:52:bd:e3:
a0:5f:22:8f:e1:95:d1:dd:4d:e1:ea:62:7f:62:20:ef:f9:ff:
05:95:24:32:f1:75:8a:35:98:70:ca:6a:08:b4:77:96:de:ba:
c9:cf:e8:b6:46:70:23:1f:32:22:5f:5a:a3:9c:57:a4:97:59:
f2:d2:bc:5f:80:c4:e6:e5:0b:8d:d4:d7:fe:32:f1:9b:9e:50:
63:61:9f:96:90:6f:32:6e:ad:3d:05:b4:66:ed:e6:61:6c:50:
aa:64:1a:c2:8e:97:f9:1c:92:c0:a8:4e:1c:c6:b4:96:58:7a:
72:fc:65:d4:c1:9e:13:e5:d8:9f:d1:86:89:90:bf:ac:ad:04:
d3:83:04:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 22:17:42 2026 by rpki-client