
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/18B7AAD4C84611EBAEB6C550C4F9AE02.roa
File: 18B7AAD4C84611EBAEB6C550C4F9AE02.roa (raw, json)
Hash identifier: v78yLLSx6V46Cm9eSGpmJhYmJ4zVFME0VsJVTlcSEig=
Subject key identifier: D9:D2:FE:90:17:C1:5D:02:42:BE:E7:20:D4:7F:71:EE:92:CB:96:63
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FAB7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/18B7AAD4C84611EBAEB6C550C4F9AE02.roa
Signing time: Mon 17 Aug 2026 11:58:09 +0000
ROA not before: Mon 17 Aug 2026 11:58:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137165
IP address blocks: 103.105.44.0/22 maxlen: 24
103.167.48.0/23 maxlen: 24
103.174.128.0/23 maxlen: 24
103.175.4.0/23 maxlen: 24
103.175.6.0/23 maxlen: 24
103.176.132.0/23 maxlen: 24
2001:df0:fc0::/48 maxlen: 48
2001:df7:c680::/48 maxlen: 48
2001:df7:e080::/48 maxlen: 48
2001:df7:e180::/48 maxlen: 48
2407:3e40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64183 (0xfab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 17 11:58:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a82f751-be9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:04:10:09:a5:7b:6f:0b:2b:d5:86:39:77:3d:
2d:6a:33:75:51:b1:07:1a:4d:dd:fc:73:08:73:f2:
4a:53:8a:51:be:64:47:bb:3f:07:b4:be:10:61:fa:
b1:83:c9:d3:04:99:b6:34:bd:fa:7a:64:18:02:c3:
22:55:63:6d:ea:04:69:ee:32:e7:a0:36:e0:bb:02:
be:4a:d9:61:51:1c:d7:7e:68:4c:90:64:82:80:a6:
15:bc:f4:e9:21:c4:5d:fa:eb:8c:d4:aa:e5:2c:9c:
24:51:13:68:02:f8:13:58:87:80:3c:dd:1c:25:ae:
c5:6e:52:dd:f3:d9:74:78:6e:88:6e:bc:85:e4:96:
62:0d:23:36:04:3b:09:21:9d:01:5b:45:91:2d:37:
44:64:c5:10:d0:0c:01:fb:89:1d:86:93:50:17:86:
6f:af:8d:4a:44:93:c2:65:62:cd:ed:d7:5b:2f:d6:
fa:59:2d:aa:f4:89:e6:3b:8b:48:27:5d:6b:9a:0a:
fa:fd:5d:3a:ed:ca:a2:c0:03:c8:33:90:72:ba:34:
7a:36:d6:1c:17:82:20:1e:f3:22:74:79:ce:eb:dd:
5a:ef:c1:bb:2e:53:bd:6f:46:9c:11:37:87:8f:18:
2b:89:a8:ae:b0:61:65:af:6a:8d:ab:03:a0:81:31:
a2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D2:FE:90:17:C1:5D:02:42:BE:E7:20:D4:7F:71:EE:92:CB:96:63
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/18B7AAD4C84611EBAEB6C550C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.105.44.0/22
103.167.48.0/23
103.174.128.0/23
103.175.4.0/22
103.176.132.0/23
IPv6:
2001:df0:fc0::/48
2001:df7:c680::/48
2001:df7:e080::/48
2001:df7:e180::/48
2407:3e40::/32
Signature Algorithm: sha256WithRSAEncryption
24:25:5d:43:68:48:b4:92:33:14:87:8e:47:76:49:94:c2:cc:
00:d7:a9:48:57:62:85:79:09:5f:77:c1:19:40:80:34:45:44:
33:39:40:0f:80:9f:a9:a0:b3:cf:58:f6:06:ad:72:5d:55:e0:
56:4e:8d:9e:63:a6:4b:a7:5c:e9:ff:a3:23:8f:42:d8:de:3d:
c3:c5:68:06:91:98:95:5f:90:e3:d4:9a:7c:3a:bf:be:45:53:
53:46:28:1a:4b:23:8b:58:3f:a3:75:42:c6:48:e5:5d:90:12:
ee:d3:6b:ab:2d:0e:81:0d:69:4d:98:4d:37:a5:bd:4d:eb:11:
f2:88:c4:5a:40:ad:69:84:aa:db:ce:d4:1a:f2:c0:c7:44:91:
d8:fe:ce:7c:1d:ef:97:a5:02:1f:25:0c:d0:b7:ba:63:ef:99:
9a:36:bd:e0:38:47:40:60:54:67:ab:49:8c:e5:ab:7a:76:23:
f5:0e:d2:d3:49:d6:4e:8c:a2:5a:13:f6:62:87:51:39:97:f8:
02:14:e3:18:f8:bc:72:3b:02:a6:5b:c8:25:26:a6:5e:af:1f:
12:34:fb:86:8b:dd:a1:88:4d:d1:cb:82:85:71:be:7d:8f:fb:
9b:4f:1d:5b:6e:ff:75:b0:c1:58:ca:4d:5e:21:e3:4b:b3:62:
a1:b7:3c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:59:26 2026 by rpki-client