
$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/18F4FD76918111EC93DCA42AC4F9AE02.roa
File: 18F4FD76918111EC93DCA42AC4F9AE02.roa (raw, json)
Hash identifier: aZB+rnqYjRl4Uc+17dt2ByemLhQ+5bYKCdCl9y70GQM=
Subject key identifier: B2:0B:51:40:8E:DC:7C:F8:BB:12:47:B0:BE:7B:C5:52:39:BF:76:D3
Certificate issuer: /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Certificate serial: 37F0
Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/18F4FD76918111EC93DCA42AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:18:04 +0000
ROA not before: Tue 30 Dec 2025 15:10:44 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 38282
IP address blocks: 125.22.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl
rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 14:24:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14320 (0x37f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91964B3, serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Validity
Not Before: Dec 30 15:10:44 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a490ec-8147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:55:9a:81:ab:46:1b:3d:84:d5:d1:68:9a:09:
14:f4:81:60:e4:a1:97:81:d4:fa:c9:c6:b6:3f:97:
2b:d2:08:81:ea:08:f0:f0:4a:ff:51:96:04:f2:ad:
c8:58:cf:0f:bc:d2:23:64:55:e4:4d:bb:62:0e:87:
7b:55:77:0a:54:0e:8d:8b:f3:a9:dd:cb:1e:51:f7:
d4:54:8a:28:b6:93:18:24:1f:95:30:cb:77:4d:4b:
93:23:a7:ec:29:d5:cd:8f:71:89:fc:3e:7e:6f:2b:
8c:45:aa:9b:f6:86:ac:cd:d9:93:0a:aa:d8:f7:c9:
f8:fe:7b:37:ef:8c:94:76:f2:84:df:04:b0:2e:0d:
84:85:bb:1f:46:a4:e3:0c:fe:e0:29:37:7d:f3:f4:
70:c8:4e:50:8d:cc:52:37:b4:28:82:bc:aa:ac:16:
a3:80:6a:aa:35:b6:1f:69:c7:fb:86:46:fe:93:84:
a1:18:6d:d2:f1:66:4d:7b:e6:c9:06:ad:31:05:a0:
55:ab:83:99:fa:50:af:70:5f:8e:d5:a8:9c:d4:b9:
8c:13:43:2b:95:ad:ae:77:a3:0d:4a:70:d0:e9:9d:
43:72:18:c7:a0:8b:f0:5a:ff:fe:2d:88:49:cf:6b:
74:c1:7f:e5:73:af:9d:ab:47:2c:1e:e3:7d:8d:19:
e9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0B:51:40:8E:DC:7C:F8:BB:12:47:B0:BE:7B:C5:52:39:BF:76:D3
X509v3 Authority Key Identifier:
keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/18F4FD76918111EC93DCA42AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
125.22.120.0/24
Signature Algorithm: sha256WithRSAEncryption
20:c0:53:2d:67:16:ff:e0:f3:43:70:1f:1c:e5:1d:87:3f:10:
92:e6:89:d2:d4:85:c2:0c:56:21:78:47:87:f4:ee:b7:0d:fc:
a3:a7:39:9e:4a:a1:3a:b9:a5:01:93:aa:75:75:0c:24:2a:04:
d6:f1:eb:f1:3f:2e:83:ec:e5:f5:0f:09:b1:89:16:f1:15:4e:
8d:f5:c6:e2:67:0e:df:9e:6c:b4:95:16:cd:5a:90:68:17:12:
c7:b4:b3:e0:49:16:b5:24:b8:32:a3:f9:f5:e2:a0:9e:91:aa:
94:bf:d6:17:75:55:da:61:80:da:e0:c4:1e:e0:5c:92:0e:ba:
a2:7a:5a:29:96:2d:4e:eb:97:16:a1:07:56:5b:c4:d6:45:16:
f0:1e:ea:ac:71:fb:82:36:69:ef:a2:25:8b:4a:92:d0:2f:45:
99:fa:a5:7a:7b:73:6a:cf:2b:a8:4b:6b:75:4b:cd:65:f1:a4:
4d:b4:e8:7c:ac:62:98:a9:e9:14:84:41:1b:c5:e2:85:d3:cb:
ea:20:d5:64:01:2a:16:31:06:9c:25:7d:64:8d:b2:a7:fa:17:
3b:d1:cf:a0:f9:8a:71:75:d5:b5:c1:7c:1c:54:5d:67:b9:e5:
f7:38:cf:ae:b1:d4:a7:f2:2e:8b:12:1b:c5:53:a8:29:e8:3c:
bb:18:3a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 23:16:47 2026 by rpki-client