
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A4EB/482A045CBE3F11F19C133B646311F970/21547604BE4011F184EF778E6311F970.roa
File: 21547604BE4011F184EF778E6311F970.roa (raw, json)
Hash identifier: YyygBP+xNQBLAlad23GYTZN1kNgULgxg/g9lTOaruc4=
Subject key identifier: 24:77:36:51:EF:A4:93:82:BA:72:6A:C3:53:86:84:13:EC:E2:CC:A7
Certificate issuer: /CN=A918A4EB/serialNumber=7A8F06917AE16F12A9DBC39E9A453E2888A6FEA3
Certificate serial: 02
Authority key identifier: 7A:8F:06:91:7A:E1:6F:12:A9:DB:C3:9E:9A:45:3E:28:88:A6:FE:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo8GkXrhbxKp28OemkU-KIim_qM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A4EB/482A045CBE3F11F19C133B646311F970/21547604BE4011F184EF778E6311F970.roa
Signing time: Fri 02 Oct 2026 09:03:27 +0000
ROA not before: Fri 02 Oct 2026 09:03:27 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 103.231.152.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A4EB/482A045CBE3F11F19C133B646311F970/eo8GkXrhbxKp28OemkU-KIim_qM.crl
rsync://rpki.apnic.net/member_repository/A918A4EB/482A045CBE3F11F19C133B646311F970/eo8GkXrhbxKp28OemkU-KIim_qM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo8GkXrhbxKp28OemkU-KIim_qM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 09:46:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A4EB, serialNumber=7A8F06917AE16F12A9DBC39E9A453E2888A6FEA3
Validity
Not Before: Oct 2 09:03:27 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6abf735f-3ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a1:11:4e:22:0f:9e:31:fa:03:d1:3b:b7:5f:
01:39:b6:d5:52:de:8d:b8:f9:72:2e:ce:71:87:b3:
1b:5e:b6:f4:7c:5e:39:b6:5d:90:97:35:db:fa:ea:
d1:a0:e6:75:28:d0:04:8c:61:42:ce:a9:e1:0b:22:
f1:29:6e:2b:53:a1:04:8b:4a:73:18:29:34:d8:9b:
48:87:d8:82:e8:b4:a1:47:d9:63:0f:8a:da:7a:cc:
9f:d3:64:1e:f7:72:7b:4b:24:94:a2:04:63:e1:8b:
c5:62:c7:61:7f:ce:2a:a7:db:eb:24:31:76:ef:c2:
e7:87:d8:10:f7:d8:7d:ee:57:e3:28:d2:25:a5:c0:
e2:ab:7d:94:7f:4f:31:66:76:52:37:91:07:5a:93:
2f:a1:07:0e:aa:4f:94:8c:09:fa:1e:f8:c6:72:1e:
f3:a2:8f:5b:f7:e2:2d:e0:a9:8c:45:89:92:d2:b9:
a0:a8:32:e3:ad:00:4e:e1:68:e3:72:7a:b3:b6:79:
46:8d:da:ab:e5:ab:53:bf:25:bc:ee:4a:b6:56:b2:
47:23:b7:4b:c9:fd:a9:35:23:8a:e7:ee:32:33:af:
50:43:bc:6a:32:e4:6f:be:2a:3e:79:15:28:be:3c:
e6:eb:62:19:56:eb:40:b2:05:9e:44:3b:4f:1d:6a:
94:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:77:36:51:EF:A4:93:82:BA:72:6A:C3:53:86:84:13:EC:E2:CC:A7
X509v3 Authority Key Identifier:
keyid:7A:8F:06:91:7A:E1:6F:12:A9:DB:C3:9E:9A:45:3E:28:88:A6:FE:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A4EB/482A045CBE3F11F19C133B646311F970/eo8GkXrhbxKp28OemkU-KIim_qM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo8GkXrhbxKp28OemkU-KIim_qM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A4EB/482A045CBE3F11F19C133B646311F970/21547604BE4011F184EF778E6311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.231.152.0/22
Signature Algorithm: sha256WithRSAEncryption
58:bc:f2:5c:16:6f:51:df:f1:37:08:26:5b:15:fa:dd:6b:18:
c1:cc:dd:c3:c1:60:ef:ff:a9:85:35:6b:6f:e9:78:4e:a3:b4:
67:ef:40:4d:bc:ba:be:30:aa:82:00:6c:ae:d7:b3:aa:38:14:
98:81:03:11:cc:cc:e5:01:80:69:8e:26:0e:e1:fc:db:a5:b6:
e7:6c:76:bc:8c:04:d9:e5:a2:7f:29:31:d4:1e:b1:dd:52:2e:
05:dd:f0:08:ac:18:b4:a8:7c:37:11:b7:ed:7e:ea:31:70:a9:
6e:99:c8:80:ba:99:97:4c:98:06:bf:e9:66:96:e5:a3:2e:ac:
a3:9e:37:a2:e5:da:ac:39:d9:b0:59:49:e5:80:86:8f:f0:62:
b1:35:cb:1a:1c:a0:a1:61:8c:50:c7:49:7e:5a:d0:68:41:b5:
6a:88:8a:f2:a5:a5:6c:fe:82:e5:72:26:4d:d5:da:c3:cf:35:
71:2b:b3:57:76:2f:23:6b:45:67:a3:73:7d:55:a5:9e:ba:ba:
ae:2b:41:c8:47:2d:9a:b7:e2:6f:21:04:89:4d:eb:00:9d:e0:
08:f6:94:c6:32:ac:3b:86:06:8e:be:74:d4:00:dd:67:9a:61:
01:96:e4:67:4e:19:60:c7:fc:fd:ea:d2:aa:b1:7d:58:28:23:
ba:89:23:7b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 7 07:50:35 2026 by rpki-client