
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07117FF4880611EDB97DA24BC4F9AE02.roa
File: 07117FF4880611EDB97DA24BC4F9AE02.roa (raw, json)
Hash identifier: Peu7oLVvCZr7aKXWnHPUIkzQdFZp4ehtFn1uPnmOSZE=
Subject key identifier: C3:58:15:09:D2:07:C8:5F:6E:B7:33:5E:06:4D:B5:EB:EC:89:E9:9F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F578
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07117FF4880611EDB97DA24BC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:33:53 +0000
ROA not before: Mon 06 Jul 2026 17:33:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150586
IP address blocks: 103.49.236.0/23 maxlen: 24
2001:df2:340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62840 (0xf578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:33:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be701-053e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:ad:ff:6d:ce:60:5e:57:63:ee:de:61:b3:
3e:19:46:94:cf:4b:28:e4:75:c8:08:e2:d9:3f:6c:
ff:8f:cf:10:4a:cb:3c:5a:7d:3b:92:47:1d:62:52:
2b:22:3c:cc:59:f5:21:a0:30:26:01:1b:12:4b:73:
ee:cf:b8:4d:20:3a:b6:7b:da:76:cb:b7:69:a0:36:
60:6b:57:da:f3:49:3d:97:03:1c:e7:f8:84:40:05:
f0:1a:02:4c:0b:16:a8:4d:da:b3:02:23:ff:66:fa:
a2:0d:6a:41:a7:c9:e5:7b:b6:8a:a2:d7:fe:bc:08:
44:8f:7b:be:72:2e:b2:61:f4:b0:3e:ff:78:3f:32:
9e:09:5a:e7:a1:6b:0a:e4:2e:eb:94:de:8b:6e:7e:
0a:5c:2e:92:95:63:73:53:c2:42:28:ba:21:63:9f:
32:10:46:d9:e7:c6:b8:fd:73:85:6a:7d:4b:78:bf:
bf:22:07:01:6b:83:53:56:fa:dd:5b:44:b5:72:c8:
78:a5:10:2e:d1:8d:f5:fc:00:96:f5:88:df:ee:8f:
97:de:6b:cc:ab:58:2d:ad:8c:32:fb:3c:61:9b:fc:
7a:38:6a:18:8c:ca:30:53:bc:8a:c7:c5:67:75:8d:
ac:f5:58:34:3c:e5:b1:4e:3a:38:a0:ee:55:c4:d7:
5a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:58:15:09:D2:07:C8:5F:6E:B7:33:5E:06:4D:B5:EB:EC:89:E9:9F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07117FF4880611EDB97DA24BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.49.236.0/23
IPv6:
2001:df2:340::/48
Signature Algorithm: sha256WithRSAEncryption
4f:98:0a:09:aa:55:92:6c:77:86:dc:02:7b:0c:6c:5a:bb:fd:
f9:46:9e:07:7c:49:03:46:3a:ad:89:aa:a2:c2:a8:ec:9b:26:
e8:bf:0f:43:fd:3f:a2:ee:30:d8:ed:f9:d8:7b:17:7c:88:4f:
95:b6:c1:6f:b4:6b:75:5d:f8:2d:11:10:a8:02:fa:f1:81:db:
f6:8c:6f:31:1d:df:b1:d2:d9:a2:c7:6d:11:e6:53:b0:c9:52:
7a:fc:8d:af:91:e6:6e:0b:40:1d:c1:8a:08:90:90:9d:a8:b6:
27:93:b6:8b:b8:23:8e:fb:43:03:4f:53:b8:0e:0d:87:80:88:
a1:b2:b6:8f:e8:88:f4:a2:94:08:e8:0c:04:3b:6d:b6:18:ea:
85:df:66:50:c9:23:06:0f:30:7a:21:3c:c0:e5:5a:7f:e2:8e:
ce:e5:82:b8:3b:8f:cc:8e:a5:d6:10:84:59:5f:ce:2b:01:29:
92:87:3b:18:a5:9d:13:22:c0:a6:e4:7e:a3:f2:12:05:31:51:
18:77:3e:9a:26:a3:6a:c9:53:d2:3d:c8:3c:4c:81:c4:d6:91:
50:6b:6f:33:38:05:44:95:ec:3e:6b:9e:b6:ff:93:26:3d:7e:
7f:be:84:f5:f6:3d:f6:f6:d8:4a:d2:33:53:14:4b:96:69:5c:
27:a2:07:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:34 2026 by rpki-client