
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1C522E3C44D811EFA66FAF17C4F9AE02.roa
File: 1C522E3C44D811EFA66FAF17C4F9AE02.roa (raw, json)
Hash identifier: Y7M1l1WHpUzGOD9w+ba6NRakvNV+ViwSv70XTj5nwhg=
Subject key identifier: 6F:6C:37:1B:98:F2:81:76:86:5C:08:7E:72:8B:F3:1B:FA:7D:ED:99
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F284
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1C522E3C44D811EFA66FAF17C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:08:41 +0000
ROA not before: Mon 06 Jul 2026 17:08:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140033
IP address blocks: 103.147.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62084 (0xf284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:08:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be119-c1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:96:82:46:e8:39:03:36:67:94:b5:3c:03:36:
c7:d6:0c:d4:33:a7:d7:77:7d:c1:c2:c4:20:a7:7d:
d5:65:c1:95:40:13:a9:65:bc:4a:22:a3:e6:2b:cc:
1e:19:6e:bb:92:62:d6:d5:44:96:da:d6:ee:e4:05:
7a:e2:78:f7:26:7d:34:5e:08:a8:76:75:9f:6e:db:
89:53:e5:fd:ac:74:8b:fc:b1:29:8e:8f:1f:9b:b1:
6e:c8:c7:57:22:1f:07:40:9d:6a:8e:6e:c1:3f:91:
24:ca:c7:d8:45:a5:6e:98:4b:d2:71:36:c0:66:cd:
6b:db:33:8d:60:47:4e:e2:13:05:51:e8:02:c7:f0:
00:99:44:23:d3:90:33:90:5a:6f:ea:3b:4b:c3:ef:
51:47:75:c1:97:f4:10:e5:7e:4b:72:ff:64:ad:22:
20:28:f1:62:18:e0:ef:6c:e7:5a:27:98:f9:c2:66:
61:a5:77:d7:09:5f:a4:47:b7:fd:dd:68:27:0a:69:
6f:27:3b:fc:3b:ac:e8:89:31:0c:32:29:19:87:d4:
4a:7a:d9:08:f3:04:0e:0c:a0:2b:70:a7:a0:d9:e1:
63:18:7e:3b:be:b8:8c:30:f9:5b:fe:c5:19:60:74:
04:1d:cc:7e:c3:ac:5d:1e:aa:e2:93:f0:f2:0c:d9:
7a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6C:37:1B:98:F2:81:76:86:5C:08:7E:72:8B:F3:1B:FA:7D:ED:99
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1C522E3C44D811EFA66FAF17C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.147.138.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ea:62:37:b3:e8:24:bd:a5:a9:94:3c:48:4a:94:7f:f3:64:
e9:58:6a:e2:26:72:76:08:82:7f:21:cf:2d:37:02:90:ad:f0:
63:30:ce:01:c8:22:ec:de:14:a6:33:fe:e5:76:fb:b8:45:2b:
75:ac:37:f2:3e:d7:89:f8:60:37:6a:cb:9a:82:c1:3a:00:d2:
9d:f6:90:86:e0:f0:83:ff:b3:4d:9b:a8:b7:32:34:df:ce:5a:
81:ee:bb:9d:1d:0f:9a:07:cb:60:9b:e8:bc:78:54:59:20:c8:
7e:fe:f8:a5:0e:d7:62:3c:f0:bb:c6:54:39:ed:bd:a8:6b:d7:
80:63:92:5c:9f:7d:54:4c:70:ad:4c:c8:89:7e:7e:c0:0f:8f:
15:c8:c9:09:b6:ef:cf:cf:0f:c3:88:e1:8a:4a:e3:ba:f2:c0:
f0:ea:a5:ff:5f:44:b4:dc:2a:69:aa:d8:50:e7:5b:46:fa:12:
3d:71:f2:48:19:3c:74:69:9d:12:05:07:d8:97:60:62:be:f1:
cb:16:3e:0c:cd:5b:3c:fc:df:5f:02:7e:f6:35:72:3e:6a:92:
6f:84:b7:d6:ec:5f:4d:40:a3:3c:8c:f6:cd:1e:29:82:b5:ba:
29:aa:8f:bd:0e:65:6c:1c:14:e1:52:ad:91:76:61:c5:fa:61:
51:1a:62:85
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPKEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MDg0MVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmUxMTktYzFlMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJeWgkboOQM2Z5S1PAM2x9YM1DOn13d9wcLEIKd91WXBlUATqWW8SiKj5ivM
Hhluu5Ji1tVEltrW7uQFeuJ49yZ9NF4IqHZ1n27biVPl/ax0i/yxKY6PH5uxbsjH
VyIfB0Cdao5uwT+RJMrH2EWlbphL0nE2wGbNa9szjWBHTuITBVHoAsfwAJlEI9OQ
M5Bab+o7S8PvUUd1wZf0EOV+S3L/ZK0iICjxYhjg72znWieY+cJmYaV31wlfpEe3
/d1oJwppbyc7/Dus6IkxDDIpGYfUSnrZCPMEDgygK3CnoNnhYxh+O764jDD5W/7F
GWB0BB3MfsOsXR6q4pPw8gzZegkCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRvbDcb
mPKBdoZcCH5yi/Mb+n3tmTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzFDNTIyRTND
NDREODExRUZBNjZGQUYxN0M0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGeTijANBgkqhkiG9w0BAQsFAAOCAQEATepiN7PoJL2lqZQ8SEqU
f/Nk6Vhq4iZydgiCfyHPLTcCkK3wYzDOAcgi7N4UpjP+5Xb7uEUrdaw38j7Xifhg
N2rLmoLBOgDSnfaQhuDwg/+zTZuotzI0385age67nR0PmgfLYJvovHhUWSDIfv74
pQ7XYjzwu8ZUOe29qGvXgGOSXJ99VExwrUzIiX5+wA+PFcjJCbbvz88Pw4jhikrj
uvLA8Oql/19EtNwqaarYUOdbRvoSPXHySBk8dGmdEgUH2JdgYr7xyxY+DM1bPPzf
XwJ+9jVyPmqSb4S31uxfTUCjPIz2zR4pgrW6KaqPvQ5lbBwU4VKtkXZhxfphURpi
hQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:47:51 2026 by rpki-client