
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12869E78746511EDBE898845C4F9AE02.roa
File: 12869E78746511EDBE898845C4F9AE02.roa (raw, json)
Hash identifier: Cg2MZsto9ws6YGzQrtGq/qPjK/SV0Rk1TSAz8dYRBcE=
Subject key identifier: 01:72:B9:88:69:62:83:04:8A:07:D6:73:7E:E4:70:04:A5:06:19:D9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EFFB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12869E78746511EDBE898845C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:47:18 +0000
ROA not before: Mon 06 Jul 2026 16:47:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135687
IP address blocks: 103.127.130.0/24 maxlen: 24
103.174.243.0/24 maxlen: 24
103.176.16.0/24 maxlen: 24
103.176.17.0/24 maxlen: 24
2001:df7:4c80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61435 (0xeffb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:47:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdc16-64c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:04:d0:d2:90:a5:8f:b9:b7:64:7d:00:3f:e0:
69:ad:85:7b:76:98:9c:2d:cd:52:33:50:0e:1c:a8:
dd:09:05:57:75:9d:cc:8c:63:ec:b3:b9:b4:c4:7c:
dc:52:b3:d2:6d:24:34:f3:1f:5d:bf:99:67:55:51:
2b:82:52:61:70:ec:52:1e:47:d7:11:f7:e3:f0:4c:
84:7b:f3:6a:47:57:ad:58:94:40:0f:ed:42:b5:56:
39:ba:08:0d:c5:71:10:a3:92:e6:28:53:c9:bd:7b:
6a:6e:82:f4:28:80:b9:c8:c3:72:91:0a:af:45:50:
8d:2c:37:ce:15:81:dd:65:21:11:7b:52:2f:84:8f:
07:21:ab:6f:d4:28:f2:b4:a5:b2:dc:0f:be:21:79:
1a:f0:a5:40:4a:19:b5:48:ce:36:e6:4f:89:8c:4b:
7a:19:30:87:34:40:7d:f5:0b:d1:fa:4a:6f:35:ef:
48:bb:1c:fd:ca:44:06:cb:e0:78:7d:90:59:b6:c3:
b0:0f:a1:c5:09:8b:76:6b:8c:72:30:17:da:f4:51:
2f:20:6e:59:59:a1:cc:21:10:30:67:0d:17:30:d3:
b0:b4:77:1f:96:21:7f:bf:28:68:22:49:48:10:e3:
78:de:c2:b6:13:df:b4:29:69:f2:4f:93:82:0f:3f:
86:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:72:B9:88:69:62:83:04:8A:07:D6:73:7E:E4:70:04:A5:06:19:D9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12869E78746511EDBE898845C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.127.130.0/24
103.174.243.0/24
103.176.16.0/23
IPv6:
2001:df7:4c80::/48
Signature Algorithm: sha256WithRSAEncryption
22:d5:d2:03:e9:3e:76:e5:f8:fd:9c:5e:f3:05:1d:34:2e:c0:
1d:67:75:63:86:c3:93:a6:09:ad:6c:64:b3:84:0b:b4:26:2b:
3a:df:74:46:5f:4c:c7:bf:68:eb:42:b2:55:35:7f:46:09:d8:
6c:02:e1:68:6b:97:18:35:af:34:aa:a5:f2:8a:64:68:dc:dd:
e1:80:4d:e0:6d:e9:c7:e8:27:56:2a:d8:fb:bc:3d:e9:c9:1e:
57:a3:e3:1c:d6:38:f7:89:8c:5d:c1:64:9f:e4:0a:c5:ad:93:
da:8b:d2:a9:75:b7:14:87:c9:1c:03:73:a5:0e:1f:0f:e5:dd:
15:a9:8f:16:0c:c3:1f:44:df:5b:07:63:0f:2a:5a:95:97:06:
6b:02:24:d0:48:64:2b:77:f0:37:f4:6a:50:3c:0c:df:1f:5e:
3f:4f:a0:8d:0f:67:8b:9e:9f:9b:a9:b6:b7:40:2c:8e:bf:d9:
6d:4e:78:13:7d:6e:dc:ef:e4:d2:17:e7:bd:60:80:a4:db:2f:
02:15:c0:34:af:a9:c1:b6:c0:71:77:9d:68:6c:fb:72:7f:bf:
a0:d8:50:55:e0:f5:50:17:b4:06:39:3f:f2:8c:ec:98:91:c0:
59:33:2f:90:a0:67:52:e6:66:56:c8:71:d0:46:6f:19:c8:32:
ba:c1:65:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:47:12 2026 by rpki-client