
$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/0B1E45B49DF711F09C653340C4F9AE02.roa
File: 0B1E45B49DF711F09C653340C4F9AE02.roa (raw, json)
Hash identifier: F/mRA5QQ0siAQOQ57U2MLj6ecj9RaMmwSjmv2OOdiO8=
Subject key identifier: 42:C5:60:59:BA:64:61:0B:15:A2:4B:65:D9:79:69:D7:90:F4:93:51
Certificate issuer: /CN=A918DAF5/serialNumber=8FA864FEA9AF1CC05A89CB10EA2E3731706DF3F5
Certificate serial: A1
Authority key identifier: 8F:A8:64:FE:A9:AF:1C:C0:5A:89:CB:10:EA:2E:37:31:70:6D:F3:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6hk_qmvHMBaicsQ6i43MXBt8_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/0B1E45B49DF711F09C653340C4F9AE02.roa
Signing time: Tue 21 Jul 2026 09:35:39 +0000
ROA not before: Tue 21 Jul 2026 09:35:39 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 141380
IP address blocks: 103.189.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.crl
rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6hk_qmvHMBaicsQ6i43MXBt8_U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 09:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918DAF5, serialNumber=8FA864FEA9AF1CC05A89CB10EA2E3731706DF3F5
Validity
Not Before: Jul 21 09:35:39 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a5f3d6b-3523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:21:32:4e:8f:a7:7b:17:c4:ed:e3:32:38:8a:
ae:f9:67:0e:fb:10:23:dd:eb:da:b7:de:f1:66:80:
76:d2:65:4f:ea:b2:29:d4:7a:a2:cd:5c:5a:d3:a8:
52:36:9c:f9:16:9a:04:14:4b:f9:a6:2c:fe:fd:aa:
74:c9:54:ff:0c:a1:e4:bf:e6:1b:f4:50:b8:ef:2b:
34:95:31:25:e9:63:50:3b:87:ff:93:ec:6c:d9:ab:
38:24:61:31:d8:37:f1:bd:91:c1:14:5e:1c:89:94:
a1:d0:6b:54:cb:b7:2a:17:e3:73:77:44:7f:49:6f:
9a:50:45:bd:68:bd:b8:e9:80:21:3c:46:67:aa:ee:
82:b3:59:7e:52:e3:2c:95:8c:59:75:5b:12:fc:9b:
39:17:ab:9b:4c:0c:d7:fa:34:80:f3:05:d2:3d:91:
ee:9e:6f:04:74:61:9e:3a:ac:57:c0:04:9d:37:83:
4c:24:a6:82:79:52:9b:ea:45:cb:20:b6:6e:2f:5f:
89:45:f0:c8:20:5d:fb:35:8c:54:ee:20:08:fa:b7:
4c:ad:2a:55:64:96:ac:30:26:d7:9b:93:83:83:ab:
31:e5:1e:7a:a0:26:0b:97:56:c0:2b:07:91:c4:4d:
ca:de:3e:eb:36:21:58:dd:62:9e:ef:bb:57:e4:a9:
66:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C5:60:59:BA:64:61:0B:15:A2:4B:65:D9:79:69:D7:90:F4:93:51
X509v3 Authority Key Identifier:
keyid:8F:A8:64:FE:A9:AF:1C:C0:5A:89:CB:10:EA:2E:37:31:70:6D:F3:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6hk_qmvHMBaicsQ6i43MXBt8_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/0B1E45B49DF711F09C653340C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.189.127.0/24
Signature Algorithm: sha256WithRSAEncryption
64:88:dc:01:4e:df:e6:94:4b:2b:c2:0c:d5:5e:28:fa:1a:17:
8c:1b:de:a1:16:fd:50:a6:bf:22:e8:7a:b8:75:07:e6:12:78:
e4:89:69:44:06:45:19:bc:e4:6b:d6:51:12:5e:d9:94:ab:8f:
2a:26:ab:25:e3:28:b0:7e:07:47:64:d6:27:74:c0:0e:b9:98:
a9:75:6c:08:7a:b8:0e:fc:0e:eb:2e:29:ca:1f:82:fa:74:c6:
ae:3d:0f:68:0e:57:16:b1:3f:d8:76:2e:00:e2:87:5c:22:01:
19:cb:b5:33:fa:3d:f0:cc:1f:7d:c0:bb:50:bc:3f:64:16:f1:
6a:4c:ba:b5:31:63:6a:e9:07:31:92:27:fe:bf:f6:c3:43:67:
14:ec:23:19:38:57:35:2e:51:2f:a7:ef:e6:cb:d9:bd:20:08:
de:82:b4:4c:2e:6f:a3:03:ee:41:bf:ac:b9:8c:4c:7f:b6:b8:
9d:2a:16:f5:a9:c7:b5:0e:8b:ae:11:51:ce:47:f0:7b:88:5b:
a4:cb:d1:4b:ca:3a:89:c2:74:0c:bb:c7:68:79:c4:0a:de:16:
48:12:e0:58:63:3d:d7:33:5e:82:e9:3f:61:1a:24:dc:a2:9a:
0f:0a:37:58:09:5a:15:0f:31:5d:50:3b:d8:5f:f1:11:c6:bb:
61:d1:74:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:26:30 2026 by rpki-client