
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08C677FEA0EB11EB8FF0995BC4F9AE02.roa
File: 08C677FEA0EB11EB8FF0995BC4F9AE02.roa (raw, json)
Hash identifier: 1YIKl1khWuhHVstXCg0SMajhqWMKY5cxds4t+dkz/nY=
Subject key identifier: 54:79:6E:40:2E:6E:AF:32:1B:63:F1:61:F9:D7:19:D5:62:17:5D:DE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F206
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08C677FEA0EB11EB8FF0995BC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:04:27 +0000
ROA not before: Mon 06 Jul 2026 17:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138727
IP address blocks: 103.138.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61958 (0xf206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be01b-5490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d1:c9:6b:57:56:41:a6:d1:20:b3:f3:17:ba:
bc:5d:fd:96:2a:87:81:93:57:48:98:32:43:64:e9:
9b:c5:dc:ab:1d:b1:be:14:23:0f:57:7a:46:49:4a:
58:b3:c0:30:17:a2:36:2b:e5:f6:8d:89:7b:01:0f:
48:75:6d:53:bb:d9:26:5c:48:b4:3d:aa:70:24:f9:
ba:8d:9d:fa:5b:47:4f:3c:95:2f:d2:fe:08:9d:8f:
68:1a:f5:5b:ba:d2:1d:05:44:24:48:3b:f0:48:ea:
c8:56:b3:0b:ee:2c:e8:09:ff:1b:39:7f:12:79:da:
a8:62:11:5e:ac:0e:89:76:74:b5:c5:47:20:c2:b8:
14:c5:82:c0:c3:ef:6a:69:67:33:75:38:b4:82:15:
dd:19:55:6d:9d:63:35:2b:f9:6a:da:f6:54:f5:6c:
d2:cc:14:8f:27:0b:89:c6:c2:72:4e:0a:2f:ce:40:
6e:7b:91:42:68:00:8e:92:66:d7:f7:61:b0:1e:21:
38:60:8a:f0:49:6d:f2:e1:eb:6d:fa:cf:82:c5:0e:
f0:46:30:9b:63:35:73:c2:3c:82:53:2d:ae:93:d5:
71:6a:df:81:15:8e:93:b7:1a:d9:84:18:f9:39:be:
c9:ea:86:fd:48:3e:49:f7:0c:aa:0b:55:3a:4e:4f:
d6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:79:6E:40:2E:6E:AF:32:1B:63:F1:61:F9:D7:19:D5:62:17:5D:DE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08C677FEA0EB11EB8FF0995BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.196.0/22
Signature Algorithm: sha256WithRSAEncryption
08:c5:a5:b9:78:10:bb:1a:49:dd:4f:5f:d8:8e:3f:79:20:46:
f9:d6:59:8c:40:76:6e:a0:9a:08:b6:23:4b:67:32:79:f6:5c:
2a:14:c4:3a:a1:aa:24:a6:47:d6:58:ab:9a:64:79:57:9a:9e:
a2:ed:5b:a2:2b:42:1e:f4:da:2b:75:6b:e8:c3:ee:e5:d4:dd:
c3:a6:a8:2a:3a:4e:b6:61:80:05:1e:9d:df:69:75:95:7e:17:
7d:5d:e8:a3:15:93:78:a6:3e:24:19:5c:e7:14:8d:d5:8a:f3:
0c:88:a7:c6:71:b3:30:5a:14:84:a2:5e:d5:e1:ed:2d:58:e0:
86:9f:02:b7:a0:2f:fb:64:0f:ce:2f:26:96:40:87:c0:b8:3d:
d2:6e:90:44:7c:7d:29:15:d8:bc:a1:dc:f1:0d:dc:6d:8f:13:
51:2b:65:93:bb:62:43:e9:ea:22:ea:8d:0b:c3:c9:1f:a6:ad:
cc:cd:87:f2:3d:37:a0:4f:d4:d9:27:c4:1f:56:d4:79:30:5b:
49:76:5b:4b:95:54:a5:f0:05:e4:bd:42:3b:ce:e7:0e:1b:b3:
9a:69:3c:9c:e9:52:da:b9:64:50:d9:0b:2b:cd:61:d6:1c:8b:
3a:ea:5c:b8:c0:f3:84:a7:55:27:ce:36:39:c8:8c:ee:ce:a9:
14:cd:82:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:43 2026 by rpki-client