
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1A667F98411A11EC841B9420C4F9AE02.roa
File: 1A667F98411A11EC841B9420C4F9AE02.roa (raw, json)
Hash identifier: JmIPYepo/YRv7zQAWUKMBCt1817gzwn/pdU3/Fylrwg=
Subject key identifier: CB:F1:63:66:3D:88:48:BD:25:60:BA:1C:C2:FC:E2:BA:F5:B7:94:98
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F45A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1A667F98411A11EC841B9420C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:24:32 +0000
ROA not before: Mon 06 Jul 2026 17:24:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147240
IP address blocks: 103.83.2.0/23 maxlen: 24
103.115.0.0/23 maxlen: 24
103.175.90.0/23 maxlen: 24
2001:df1:6ec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62554 (0xf45a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:24:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be4d0-e73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:42:bc:0e:22:cb:2a:d4:00:d5:1e:e1:65:f4:
70:fc:c2:2e:1e:05:d6:29:e1:ef:53:cc:fc:9b:dc:
26:4e:81:af:ad:c9:ae:4b:e7:47:df:00:36:6c:b8:
e7:d8:9e:e3:67:aa:54:c8:5e:4a:74:d6:80:23:f3:
f4:43:2d:3e:81:41:fe:c5:01:70:2a:d8:c3:6a:81:
1a:0f:0c:1d:a5:4c:99:ef:64:1e:d9:2c:f9:e0:ae:
e9:ed:6d:8a:42:52:aa:d3:32:e8:93:72:a9:16:7c:
12:fa:21:07:b0:35:f9:1d:80:25:63:d2:18:47:76:
fa:fe:1c:dd:71:cf:f2:a0:55:8d:5e:35:de:b7:5c:
92:04:1c:08:3a:be:97:15:6c:52:b6:a4:fa:15:be:
9e:7b:43:ce:d6:d4:58:ba:be:26:d9:4b:75:f1:49:
5a:7b:e7:a2:f8:9c:eb:68:84:4a:f7:e6:64:5e:e7:
4d:49:48:8d:a7:59:27:2a:9c:5f:c3:83:9b:ce:a8:
bb:46:94:04:82:95:32:3a:61:25:d7:df:f6:13:b6:
6e:74:ac:4e:79:4c:42:d6:23:be:61:17:4e:d1:a0:
7d:73:c5:76:29:e4:a4:24:d1:7f:40:09:2a:99:85:
98:7d:1f:6f:ec:76:13:0e:78:74:7c:09:13:1b:8c:
6f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F1:63:66:3D:88:48:BD:25:60:BA:1C:C2:FC:E2:BA:F5:B7:94:98
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1A667F98411A11EC841B9420C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.83.2.0/23
103.115.0.0/23
103.175.90.0/23
IPv6:
2001:df1:6ec0::/48
Signature Algorithm: sha256WithRSAEncryption
41:25:a6:85:a7:7f:71:53:df:97:a9:36:60:7f:9f:a7:64:4e:
6f:98:de:7c:51:8c:85:4b:a2:41:34:f7:1b:51:90:11:f1:a9:
32:4e:3c:b5:bf:79:c8:e6:d9:e5:51:eb:2f:20:49:07:f6:96:
e9:fe:be:f7:76:eb:b9:e2:b6:fb:dc:ab:0a:55:9e:a2:1e:45:
14:51:f8:06:09:8f:d3:fc:14:fc:98:47:d5:39:7d:cf:e9:c5:
67:ab:fe:e0:28:80:8d:53:87:ee:0f:6a:96:65:3c:83:e4:9b:
d3:4e:ba:a5:58:ba:b2:62:03:5f:06:74:6d:fc:aa:14:ea:2f:
ac:e5:f4:94:1e:4f:e5:23:25:a0:91:dc:24:98:7b:32:79:eb:
1a:ca:7e:3c:67:da:c8:bd:a5:a8:fc:4a:4d:d3:60:6d:08:99:
35:be:67:88:2b:71:5e:3b:54:42:d4:95:76:73:06:97:4e:48:
45:87:e3:99:01:4b:13:76:7e:76:e1:02:b8:27:70:61:7b:36:
e7:f9:da:b1:b8:9a:e4:83:ff:d1:da:87:3f:b2:b5:d3:6e:83:
7f:b1:63:c4:61:3f:71:e2:e9:2b:91:35:9d:c0:98:9a:e3:ac:
6f:01:b4:d6:65:69:90:6d:1a:b5:76:b7:ab:7f:48:6f:6b:27:
13:6d:ad:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:47:51 2026 by rpki-client