
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/020A77A4FD9D11EF95DEFC6DC4F9AE02.roa
File: 020A77A4FD9D11EF95DEFC6DC4F9AE02.roa (raw, json)
Hash identifier: BZZ7wfPeM+32y/LLfqkZOTH6QgWHsF1Ikv6pYpehBsg=
Subject key identifier: EF:5A:2C:A6:99:94:E9:36:5E:D2:4A:26:89:72:CD:A7:0D:AB:B1:E2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F564
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/020A77A4FD9D11EF95DEFC6DC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:33:15 +0000
ROA not before: Mon 06 Jul 2026 17:33:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150560
IP address blocks: 103.251.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62820 (0xf564)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:33:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be6db-6df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2f:09:5e:14:3b:81:68:63:0a:c9:08:9b:35:
a2:af:36:60:1d:8b:99:f1:f7:cb:5c:23:a6:f4:92:
17:7c:9c:13:d4:9d:ec:51:bd:86:95:fd:cb:e8:ad:
75:93:e2:a3:79:0c:3f:d6:36:9b:f5:47:b2:e2:1b:
1f:d7:9f:81:f8:0f:f7:88:e8:20:2b:33:fa:a2:9e:
06:93:15:22:77:d4:99:21:7f:0e:b1:40:40:34:47:
5e:95:84:f1:c8:4a:02:47:b1:24:9a:13:99:4f:fb:
10:2d:44:0f:8d:dc:d8:28:c1:f0:ff:63:17:cd:c7:
bf:07:9c:3a:64:ec:26:20:e4:bc:64:91:fc:91:1c:
fc:19:47:d9:8a:4f:92:4e:84:1d:76:14:51:41:8b:
19:dd:00:35:e4:1f:e2:33:ce:7c:7e:d7:b9:00:b6:
0b:24:24:a3:5c:01:4c:17:73:c0:86:85:05:fa:5b:
16:d7:43:99:bb:bf:83:02:b8:17:8c:9d:92:9a:16:
65:ed:a8:58:fd:45:35:9d:10:18:c1:39:41:d3:9a:
58:f5:3e:bf:67:cd:9a:2a:1d:08:87:48:dc:e1:6b:
3a:dc:d4:84:cb:f8:fa:d6:80:50:13:46:65:fb:55:
09:c4:29:4a:12:89:76:85:84:23:65:cc:27:d5:04:
b7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5A:2C:A6:99:94:E9:36:5E:D2:4A:26:89:72:CD:A7:0D:AB:B1:E2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/020A77A4FD9D11EF95DEFC6DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.251.68.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:d5:37:d9:67:2d:e9:4f:71:a6:23:52:b3:c8:15:e1:c9:ff:
c9:f6:53:40:a2:6e:ab:1f:0f:7b:33:c0:c1:ae:04:c5:93:29:
b9:6f:b4:5a:38:09:a8:dd:dc:d9:49:ea:57:0d:fa:ff:c8:0a:
d8:79:72:76:48:ef:f1:52:41:f2:f6:ee:ef:fb:6c:fe:65:0f:
79:fd:1c:f0:4b:37:aa:30:d4:b7:ab:b1:b7:af:d4:6a:38:c2:
99:6c:f3:01:ef:bd:d7:3a:76:61:32:bb:70:ea:ed:1e:b2:64:
45:dc:1a:42:80:cb:9b:a9:a4:42:83:79:70:ee:98:67:86:6c:
2f:ec:8a:0e:69:1e:3d:6e:7d:c4:c3:98:5f:7f:32:f3:a8:b6:
8e:f9:d5:97:21:f4:02:78:7b:e3:55:99:ed:47:ea:c3:98:70:
6a:70:e4:b0:c3:ab:49:8d:d9:b3:b3:41:62:20:40:46:6d:1f:
28:83:c7:e4:59:b5:64:5f:72:22:09:f7:5f:e6:f5:98:7e:22:
a6:ac:64:31:8b:42:b3:f2:7e:03:b8:d8:b1:88:82:6e:8b:f1:
33:58:e9:d1:2c:e4:06:58:3f:4e:a2:ee:38:89:e8:2f:e3:7b:
dd:3b:3e:b4:f7:79:b2:b2:dd:2a:dc:04:0d:ab:45:fb:b8:38:
3a:6f:a6:2a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPVkMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MzMxNVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmU2ZGItNmRmNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKEvCV4UO4FoYwrJCJs1oq82YB2LmfH3y1wjpvSSF3ycE9Sd7FG9hpX9y+it
dZPio3kMP9Y2m/VHsuIbH9efgfgP94joICsz+qKeBpMVInfUmSF/DrFAQDRHXpWE
8chKAkexJJoTmU/7EC1ED43c2CjB8P9jF83HvwecOmTsJiDkvGSR/JEc/BlH2YpP
kk6EHXYUUUGLGd0ANeQf4jPOfH7XuQC2CyQko1wBTBdzwIaFBfpbFtdDmbu/gwK4
F4ydkpoWZe2oWP1FNZ0QGME5QdOaWPU+v2fNmiodCIdI3OFrOtzUhMv4+taAUBNG
ZftVCcQpShKJdoWEI2XMJ9UEt8sCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTvWiym
mZTpNl7SSiaJcs2nDaux4jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzAyMEE3N0E0
RkQ5RDExRUY5NURFRkM2REM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGf7RDANBgkqhkiG9w0BAQsFAAOCAQEAW9U32Wct6U9xpiNSs8gV
4cn/yfZTQKJuqx8PezPAwa4ExZMpuW+0WjgJqN3c2UnqVw36/8gK2Hlydkjv8VJB
8vbu7/ts/mUPef0c8Es3qjDUt6uxt6/UajjCmWzzAe+91zp2YTK7cOrtHrJkRdwa
QoDLm6mkQoN5cO6YZ4ZsL+yKDmkePW59xMOYX38y86i2jvnVlyH0Anh741WZ7Ufq
w5hwanDksMOrSY3Zs7NBYiBARm0fKIPH5Fm1ZF9yIgn3X+b1mH4ipqxkMYtCs/J+
A7jYsYiCbovxM1jp0SzkBlg/TqLuOInoL+N73Ts+tPd5srLdKtwEDatF+7g4Om+m
Kg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:18 2026 by rpki-client