
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/129A734CF63911EE8A0DEF82C4F9AE02.roa
File: 129A734CF63911EE8A0DEF82C4F9AE02.roa (raw, json)
Hash identifier: vPHyPRYquGRslY5ll73df33MJPmxjQ/UlW4y1CaqPDI=
Subject key identifier: 37:9B:5E:57:0B:62:69:9C:55:69:B5:F7:0A:B8:FA:DB:B6:8D:A7:9C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F1F3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/129A734CF63911EE8A0DEF82C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:03:51 +0000
ROA not before: Mon 06 Jul 2026 17:03:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138317
IP address blocks: 103.132.196.0/24 maxlen: 24
103.132.197.0/24 maxlen: 24
103.132.198.0/24 maxlen: 24
103.132.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61939 (0xf1f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:03:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdff7-43c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e4:70:26:f3:2c:8f:a7:74:d9:0f:54:8c:29:
a9:05:f0:57:6d:fe:cc:1f:3e:2d:3b:88:5e:45:eb:
98:1c:19:7d:95:25:5f:9a:e9:3b:b4:30:b1:4d:fd:
c9:a6:f3:7d:42:7e:41:eb:f9:a8:de:03:da:0a:5a:
49:d5:13:08:69:51:3b:85:ce:e3:d4:d3:65:05:cc:
a7:a4:a6:df:1d:2a:7a:1e:c0:70:cd:1a:ea:93:c3:
c3:6b:02:8d:33:03:4d:b3:1e:44:96:0a:ea:cb:de:
a4:46:b8:db:36:be:17:5c:fb:ff:f3:79:70:1c:94:
17:a4:37:b0:4c:4d:ee:a3:c5:60:b7:83:f5:3b:5d:
b9:68:85:a4:47:fc:4e:8e:31:cd:f8:f3:dc:58:dc:
3b:47:b2:c6:a7:44:c0:ab:95:ce:9c:82:2d:f9:3e:
26:e2:c4:19:2b:78:87:ad:23:69:b9:33:33:b6:e7:
d2:29:a6:53:8b:02:5a:f3:e2:86:0b:26:b1:b7:b8:
cd:44:7c:d1:71:30:8e:01:8a:15:ac:cd:94:e4:f7:
48:e8:23:ac:60:b4:a7:14:6b:ab:9b:f9:0d:1c:0a:
f5:0e:b2:19:0b:6a:19:9d:39:8f:05:b8:7e:37:fb:
73:ca:70:e5:22:37:56:a8:6b:8c:eb:81:9f:a0:06:
b0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9B:5E:57:0B:62:69:9C:55:69:B5:F7:0A:B8:FA:DB:B6:8D:A7:9C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/129A734CF63911EE8A0DEF82C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.132.196.0/22
Signature Algorithm: sha256WithRSAEncryption
17:24:3c:fd:e9:17:16:a7:db:cd:01:a9:eb:60:6b:84:c7:3d:
5a:18:09:0f:07:ca:99:5c:ad:cc:8b:f7:06:15:9c:50:8e:5a:
3f:02:15:3a:10:80:0d:20:21:17:f4:9d:21:56:a2:ba:0e:fc:
71:d7:4e:65:3f:e1:1d:dc:27:b0:b0:21:ff:53:cc:16:e4:29:
35:72:d1:f3:a2:23:2c:d7:e2:3a:42:ed:59:71:80:1c:d5:5f:
1f:93:b9:64:30:a3:47:56:9c:ab:08:ee:31:84:ee:b0:49:3f:
7e:0c:ce:33:8b:d7:f7:b3:85:fe:b5:f8:9e:b2:70:ef:7f:1e:
fa:2f:9d:b8:f1:5a:8f:29:31:23:47:5c:40:65:31:09:f2:5e:
d7:17:30:6c:cb:b8:7e:f4:67:a5:a8:d5:07:82:94:6a:eb:16:
e0:41:8f:f1:e6:5a:4d:fa:49:72:f2:04:39:b4:e8:4d:36:44:
d2:90:e7:3d:5e:20:ab:8d:f0:19:90:52:05:78:f2:99:0e:85:
40:08:34:c2:3d:d1:29:37:1d:75:eb:94:a1:dd:f2:c1:fb:5d:
a4:73:d8:cd:40:ec:9c:4e:ca:05:81:55:dc:e4:c6:c4:48:19:
22:98:ca:b2:bd:ff:70:b3:93:ae:49:30:68:e1:c2:df:6c:fa:
bf:21:23:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:05 2026 by rpki-client