
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0584C194E8FF11EAA215666CC4F9AE02.roa
File: 0584C194E8FF11EAA215666CC4F9AE02.roa (raw, json)
Hash identifier: nRq4IHSLW3VG8R/uOKBgQ+3P9b3N7TAkcHF4FEczI+g=
Subject key identifier: B1:6E:B9:0E:F5:87:04:6D:ED:7E:9D:98:A2:B7:A9:53:85:57:9A:43
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EFA4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0584C194E8FF11EAA215666CC4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:44:32 +0000
ROA not before: Mon 06 Jul 2026 16:44:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134943
IP address blocks: 103.141.115.0/24 maxlen: 24
103.204.184.0/24 maxlen: 24
103.204.185.0/24 maxlen: 24
103.204.186.0/24 maxlen: 24
103.204.187.0/24 maxlen: 24
163.61.32.0/23 maxlen: 24
2404:13c0:1111::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61348 (0xefa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:44:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdb6f-3896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:de:69:8a:4b:ba:6e:c9:a1:72:86:6a:41:
72:12:fb:99:dc:15:90:26:05:91:36:6d:bb:03:0e:
b8:01:4c:d2:15:3f:5e:26:70:34:cc:ed:7c:1c:63:
47:d9:a7:71:03:f7:a3:98:23:42:3c:8b:b6:76:30:
81:3b:a2:06:e7:0b:d0:e5:3b:11:0b:e9:93:61:a7:
2d:ed:96:e4:26:67:cc:9a:3a:b1:94:7e:09:3f:8c:
64:8e:a2:80:a4:20:03:d2:79:d2:d7:7f:70:a7:65:
8a:e4:d3:61:a8:25:f4:3b:eb:19:1d:1e:07:18:91:
a6:dc:59:88:b5:c1:71:45:1d:26:23:a7:1a:71:b7:
b8:45:51:8b:35:6a:f4:3c:b1:28:51:4f:a3:78:c3:
d8:89:c2:ae:90:e3:56:ee:2b:60:e0:15:bc:91:97:
bb:69:2f:f1:09:ee:aa:bb:c8:08:cd:07:c7:6e:3a:
69:56:82:06:e8:5f:87:e7:ff:bb:42:67:1d:43:36:
7d:f4:dc:9d:ab:d6:a1:ef:e7:87:14:1a:eb:89:30:
af:f9:93:23:5e:4b:69:13:fa:07:89:83:d1:9e:0d:
7b:d4:3d:c7:14:91:3f:63:02:1b:50:fa:85:78:2c:
da:ef:63:bb:04:ef:8f:69:3a:1b:43:3f:fb:e2:0e:
07:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6E:B9:0E:F5:87:04:6D:ED:7E:9D:98:A2:B7:A9:53:85:57:9A:43
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0584C194E8FF11EAA215666CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.141.115.0/24
103.204.184.0/22
163.61.32.0/23
IPv6:
2404:13c0:1111::/48
Signature Algorithm: sha256WithRSAEncryption
6e:55:0c:7d:fe:35:2d:14:c2:9e:56:2c:1f:f7:fc:48:de:3a:
58:90:6b:f7:90:c8:94:a1:ef:c5:f3:0f:c2:32:19:cf:1c:ad:
9b:0c:46:17:f7:76:e6:a9:08:8c:4a:5a:e4:5d:58:2a:6c:ce:
70:e5:fb:ca:c6:ca:64:68:88:73:fb:20:fd:4b:de:23:90:e7:
e3:4a:fc:14:15:a2:7e:da:bf:83:8c:63:0c:8c:19:bc:e4:4f:
e8:6f:1c:10:10:59:74:a9:43:32:3d:9e:10:37:cc:33:91:cd:
0a:b5:fc:73:88:ab:a8:20:9b:8e:88:eb:dc:31:2f:98:61:c9:
cc:54:3d:30:b9:d6:55:c6:86:07:79:66:5f:71:4b:15:eb:3d:
71:8b:73:34:e6:c8:9f:21:14:3e:10:63:4d:fb:1c:0e:a6:6e:
49:9c:f4:3d:7d:44:47:ab:b0:f8:c1:5e:17:62:d1:95:9c:2f:
af:c8:0f:ff:2d:bf:ee:86:46:5a:7d:0f:cd:a4:42:97:d7:fe:
a9:74:7a:be:47:d6:d0:1a:12:3a:26:6f:0c:83:7b:21:26:f6:
bc:ee:8a:19:31:cf:91:24:1e:bf:d7:17:1b:ac:50:ce:4d:63:
9d:06:04:93:59:a8:ca:0e:1d:f0:d3:c7:e3:01:d0:54:8b:17:
19:08:20:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:29 2026 by rpki-client