
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/18C1AED0ABD111F0A1D84812C4F9AE02.roa
File: 18C1AED0ABD111F0A1D84812C4F9AE02.roa (raw, json)
Hash identifier: onsHSEw2gBQvyT6GIE8r+szJ0Eco/4I+9evLtNgxa0M=
Subject key identifier: 5B:66:6F:A5:D8:02:83:94:A8:1A:67:E3:10:25:BB:3A:92:61:5C:3A
Certificate issuer: /CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A
Certificate serial: 013A
Authority key identifier: 02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/18C1AED0ABD111F0A1D84812C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:14:48 +0000
ROA not before: Thu 27 Nov 2025 03:21:58 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 26658
IP address blocks: 103.198.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl
rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 04:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314 (0x13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4690, serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A
Validity
Not Before: Nov 27 03:21:58 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a58d48-c6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:df:06:97:73:21:08:b6:65:52:4e:6e:cb:
d7:d1:38:1d:7d:ec:0d:82:5f:06:e1:a5:12:b2:af:
33:6a:e7:30:2b:a8:1c:35:6b:14:b2:1f:ea:8b:af:
c4:d5:ca:04:15:59:e2:bd:9d:20:51:84:0e:32:fc:
dc:57:95:46:d6:8d:d6:0b:0e:ac:ed:82:76:b9:08:
43:b0:1d:a8:21:be:41:e5:df:ba:ec:5e:f4:af:42:
0b:0d:ca:6a:24:85:d9:35:79:bb:d9:21:54:63:40:
d3:6e:fc:ef:a6:e9:63:4f:a5:9b:30:8f:32:1e:05:
14:b6:fb:f1:37:90:92:97:5a:e8:9b:c2:9b:74:2d:
59:59:ba:99:ea:e4:37:f8:f3:c5:f4:af:88:94:5a:
99:d5:4d:9f:66:7e:70:d3:d7:a9:66:7c:22:d9:9c:
16:2f:2d:37:92:6f:85:72:7d:51:15:88:06:09:55:
26:fd:2b:6b:af:f4:fb:de:83:43:23:3e:09:cd:8d:
ea:12:29:99:e0:ca:d5:28:a8:49:76:5e:d3:e8:e6:
82:77:81:a7:ee:07:63:4b:7e:a6:91:0d:63:d8:e5:
ef:65:6a:7a:27:6e:42:0b:9a:3a:34:15:15:57:ec:
4b:71:76:e1:c2:fa:0d:59:95:b3:43:8a:c6:c3:46:
93:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:66:6F:A5:D8:02:83:94:A8:1A:67:E3:10:25:BB:3A:92:61:5C:3A
X509v3 Authority Key Identifier:
keyid:02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/18C1AED0ABD111F0A1D84812C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.198.204.0/22
Signature Algorithm: sha256WithRSAEncryption
59:06:dc:39:42:f3:64:fe:90:d2:03:7a:34:a5:9c:8e:e2:ce:
11:6b:58:f5:a9:bf:78:93:4f:e8:2e:42:fe:8e:e7:2e:6d:18:
83:2b:8d:ee:a0:aa:91:b7:c1:dc:34:53:06:9d:e3:f4:5d:d7:
02:c5:82:95:ae:db:f5:41:ea:e3:df:6e:ce:8e:6c:26:5c:f4:
28:6b:74:bf:ce:80:24:f2:d2:c3:d1:05:fa:11:74:7a:57:b7:
f8:a8:5b:6a:ee:aa:79:7c:f6:e2:c9:9a:2b:85:87:2f:c1:22:
58:86:19:b4:53:7a:78:ab:14:96:0f:1c:fe:4a:70:64:e3:e0:
1a:d3:55:ca:8e:c7:4c:2c:cf:59:cc:e7:20:71:f3:41:c5:e2:
0b:14:2a:a4:eb:ff:5f:09:fb:38:38:bc:50:0d:c5:28:06:f9:
14:6c:9a:9e:6a:cd:6a:a6:37:68:ac:55:5f:88:75:9f:2a:35:
25:dd:06:e6:c6:68:15:87:70:32:cf:a0:26:b8:79:0d:c4:53:
80:a3:6e:84:62:dc:8b:fc:fa:08:31:2e:42:09:ae:5d:a7:5e:
17:20:ed:f1:ac:c2:4a:36:7e:de:e3:d7:fb:47:3f:e6:2d:b1:
1a:0d:a2:9d:1d:67:15:16:e2:a3:9f:fd:15:2a:3f:5d:07:54:
87:84:c8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:24:45 2026 by rpki-client