
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918AB8D/4BBAF622C7CB11F1A6C955C25411F970/B6951EA0C7CB11F195BB113C5511F970.roa
File: B6951EA0C7CB11F195BB113C5511F970.roa (raw, json)
Hash identifier: 7RXvneyB6Vj/2wuSbFdQ4A/VOY3SkBJxlfE4RGsmhrM=
Subject key identifier: 02:AB:D5:76:24:EC:98:C5:D7:6E:8E:3F:ED:B7:2A:7D:44:85:24:17
Certificate issuer: /CN=A918AB8D/serialNumber=D688AE168BCF4D12C4703E2D5129FDFC925F536C
Certificate serial: 07
Authority key identifier: D6:88:AE:16:8B:CF:4D:12:C4:70:3E:2D:51:29:FD:FC:92:5F:53:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1oiuFovPTRLEcD4tUSn9_JJfU2w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AB8D/4BBAF622C7CB11F1A6C955C25411F970/B6951EA0C7CB11F195BB113C5511F970.roa
Signing time: Wed 14 Oct 2026 13:45:02 +0000
ROA not before: Wed 14 Oct 2026 13:45:02 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 132813
IP address blocks: 103.214.140.0/22 maxlen: 22
103.214.140.0/24 maxlen: 24
103.214.141.0/24 maxlen: 24
103.214.142.0/24 maxlen: 24
103.214.143.0/24 maxlen: 24
216.250.104.0/22 maxlen: 22
216.250.104.0/24 maxlen: 24
216.250.105.0/24 maxlen: 24
216.250.106.0/24 maxlen: 24
216.250.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AB8D/4BBAF622C7CB11F1A6C955C25411F970/1oiuFovPTRLEcD4tUSn9_JJfU2w.crl
rsync://rpki.apnic.net/member_repository/A918AB8D/4BBAF622C7CB11F1A6C955C25411F970/1oiuFovPTRLEcD4tUSn9_JJfU2w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1oiuFovPTRLEcD4tUSn9_JJfU2w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 10:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AB8D, serialNumber=D688AE168BCF4D12C4703E2D5129FDFC925F536C
Validity
Not Before: Oct 14 13:45:02 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6acf875e-c066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:78:30:49:ea:e6:48:fa:9a:c0:a5:5a:0a:79:
76:4e:52:59:37:fc:ab:79:0c:80:be:8e:18:11:38:
cd:9c:b0:8f:24:2d:83:10:3a:4c:b7:98:64:c7:19:
d3:b8:fc:92:0c:3d:5d:f8:c7:c6:44:06:ad:51:2d:
f5:cd:18:6d:d7:77:de:a2:19:f8:c9:32:c3:9c:db:
6a:42:d2:90:38:48:10:ca:c3:6a:cf:43:68:66:7a:
93:f2:3a:6a:47:06:04:e5:c3:19:bd:da:fc:46:8c:
2a:84:66:63:9f:cf:0c:63:cf:9f:38:98:0f:53:50:
53:f4:66:bd:ad:88:dd:13:d3:61:1e:8e:12:f2:04:
fa:d5:15:36:5f:87:4d:b4:b8:b8:15:78:47:ed:6e:
42:47:02:a4:37:b1:58:e2:b9:69:b8:51:78:31:c7:
80:20:fe:3c:a4:c1:f7:8b:0e:12:33:8a:9f:d3:3d:
f2:e9:45:a0:1f:e0:e8:e9:c2:18:c8:75:a0:fb:b6:
80:58:e2:ff:b8:7f:8b:6a:7e:fd:e2:eb:cd:3c:13:
fb:cb:ab:a5:4f:20:50:24:e1:76:1f:66:48:5f:31:
52:83:57:32:6f:c2:0f:ad:ac:9b:2e:e7:b4:a1:46:
6d:2d:79:6f:42:8f:00:1f:19:17:f2:80:47:0f:49:
14:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AB:D5:76:24:EC:98:C5:D7:6E:8E:3F:ED:B7:2A:7D:44:85:24:17
X509v3 Authority Key Identifier:
keyid:D6:88:AE:16:8B:CF:4D:12:C4:70:3E:2D:51:29:FD:FC:92:5F:53:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AB8D/4BBAF622C7CB11F1A6C955C25411F970/1oiuFovPTRLEcD4tUSn9_JJfU2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1oiuFovPTRLEcD4tUSn9_JJfU2w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AB8D/4BBAF622C7CB11F1A6C955C25411F970/B6951EA0C7CB11F195BB113C5511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.214.140.0/22
216.250.104.0/22
Signature Algorithm: sha256WithRSAEncryption
68:46:76:f2:32:a9:60:4e:42:76:1f:26:60:46:db:0d:04:90:
b9:72:51:ee:2d:8a:21:0a:5c:7a:76:18:b3:2a:12:5c:73:da:
2e:5d:b7:27:d3:de:4a:33:6e:cc:6d:74:a7:b2:78:3e:d7:b6:
c7:ae:3a:fa:86:f9:9b:49:ce:a2:d8:3e:17:4f:6e:0c:2a:0e:
ef:f6:07:b7:c8:c2:36:19:78:c1:5c:56:6c:4b:8c:47:24:bc:
95:ca:d5:1c:aa:ee:5c:4f:31:42:18:fd:75:82:ec:86:28:42:
f0:1c:49:4c:f2:9e:85:37:c7:1f:09:8d:20:51:06:97:2b:b6:
34:93:83:a0:f9:c6:19:e4:de:39:0a:8f:c3:07:41:66:34:9b:
e7:5b:25:ae:ac:ed:7c:1f:67:51:7f:30:f6:15:2a:7c:56:82:
f4:56:88:a8:ba:bf:be:08:4a:fb:26:c8:f7:e5:8e:f5:e4:3b:
d8:df:9a:a8:57:3d:2b:6c:07:cf:84:7b:d3:72:3e:46:e5:4d:
ca:57:bf:90:f8:54:83:c8:98:8c:14:16:5f:56:3f:3d:af:49:
94:18:12:44:29:e8:a7:e0:96:19:88:02:ca:34:8b:bd:cc:c9:
5e:48:9c:93:da:9c:84:3b:36:22:0b:c7:16:02:c9:94:bc:50:
2b:8c:29:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 08:34:06 2026 by rpki-client