
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1FE5F600D02311F092D11068C4F9AE02.roa
File: 1FE5F600D02311F092D11068C4F9AE02.roa (raw, json)
Hash identifier: n+mBGqhV9eLNoQLYaxCErtx+wmP1hDHSe9YUvG903l4=
Subject key identifier: 3D:4D:27:AE:32:73:D2:DE:F6:C5:04:05:E4:83:84:2A:37:49:7F:13
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F1E5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1FE5F600D02311F092D11068C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:03:24 +0000
ROA not before: Mon 06 Jul 2026 17:03:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138290
IP address blocks: 103.123.44.0/22 maxlen: 24
103.211.40.0/22 maxlen: 24
2402:2f20::/36 maxlen: 36
2402:2f20:1000::/36 maxlen: 36
2402:2f20:2000::/36 maxlen: 36
2402:2f20:3000::/36 maxlen: 36
2402:2f20:4000::/36 maxlen: 36
2402:2f20:5000::/36 maxlen: 36
2402:2f20:6000::/36 maxlen: 36
2402:2f20:7000::/36 maxlen: 36
2402:2f20:8000::/36 maxlen: 36
2402:2f20:9000::/36 maxlen: 36
2402:2f20:a000::/36 maxlen: 36
2402:2f20:b000::/36 maxlen: 36
2402:2f20:c000::/36 maxlen: 36
2402:2f20:d000::/36 maxlen: 36
2402:2f20:e000::/36 maxlen: 36
2402:2f20:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61925 (0xf1e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:03:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdfdc-d5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2e:ce:ed:08:56:9a:7f:04:0e:38:9e:6f:a8:
3d:84:8c:1d:02:4d:7f:54:b7:0b:ec:1a:6b:f9:a3:
e2:68:2c:2c:92:82:6d:dd:01:34:50:96:54:9f:36:
23:31:68:ba:60:6b:02:33:29:10:6f:c6:6e:e9:ca:
af:cb:16:22:29:05:77:92:6f:ec:37:34:cd:b8:8a:
f3:4e:c0:92:aa:a5:56:c6:cb:7d:4f:40:e4:cf:ab:
cf:df:07:9f:88:e8:70:5a:16:30:4e:78:df:13:21:
9e:06:27:08:7f:b2:ee:01:46:c5:df:6d:c0:1c:79:
02:74:04:b0:72:ed:a9:0f:23:06:fc:b7:92:b1:82:
63:2f:c4:57:d1:df:aa:43:01:c0:56:d7:3e:d6:50:
4c:dc:3f:b7:04:17:c5:b4:ea:cf:81:68:b5:8d:3a:
04:4b:f9:f7:17:b3:56:21:98:f9:f7:ab:08:14:2a:
df:77:37:96:35:75:60:fb:ab:00:6e:6f:09:1d:6d:
e4:ef:b3:86:aa:5b:04:ae:df:8d:af:58:4c:4b:93:
7e:00:20:c5:19:59:e7:59:81:8b:00:43:94:4f:a1:
64:8c:d7:69:09:aa:e5:60:31:b3:1b:dd:77:40:fc:
83:99:6c:3b:98:04:27:bd:93:f5:ed:71:09:30:bf:
9e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4D:27:AE:32:73:D2:DE:F6:C5:04:05:E4:83:84:2A:37:49:7F:13
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1FE5F600D02311F092D11068C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.123.44.0/22
103.211.40.0/22
IPv6:
2402:2f20::/32
Signature Algorithm: sha256WithRSAEncryption
57:a1:19:7e:98:1d:38:da:d8:1b:86:c9:ac:4a:7d:46:57:94:
6b:69:b0:72:a6:32:23:2d:02:b6:5e:2e:d8:dc:63:29:1e:a6:
90:c6:7f:82:f8:7d:bd:3b:7e:7e:8d:0f:ee:38:ff:4d:64:e0:
c8:08:c4:e9:fd:bc:36:69:66:cb:6f:dd:e5:cc:17:fa:4e:df:
f0:b9:ca:79:31:02:42:0d:d8:3c:68:1b:d2:54:07:b0:be:21:
4d:e8:87:12:14:31:88:8e:de:00:da:c6:24:53:31:e7:6c:71:
6e:d3:7d:2f:90:28:35:50:76:47:04:0c:57:3a:f4:d4:be:3a:
7d:4a:bb:64:b6:ff:97:b6:af:94:31:89:dd:05:cb:88:68:88:
66:5c:cc:3f:cf:59:87:4d:fa:f2:a2:9c:78:3a:3c:8a:a2:42:
cf:8e:a1:d9:d9:9d:f9:5c:ec:ca:58:58:67:be:18:33:34:41:
1a:64:f5:c3:cf:a5:bb:25:6b:09:05:7a:36:4e:21:59:d5:72:
4e:9b:31:2e:89:97:23:2a:50:c4:0f:8e:5f:d0:43:05:af:ca:
c2:63:c8:03:8b:65:81:a9:1b:aa:05:ef:b5:8c:df:07:45:be:
ee:99:ba:b5:bb:67:b6:48:9a:7d:2e:44:a6:ce:80:5b:bf:56:
38:22:52:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:38 2026 by rpki-client