
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2389EACA44F811F0985D080EC4F9AE02.roa
File: 2389EACA44F811F0985D080EC4F9AE02.roa (raw, json)
Hash identifier: y8DJhQZ6L1VcsJHZQMsfGVJpIRrNUmKD9migtdKO3Gw=
Subject key identifier: 7F:3A:3C:6A:A9:A5:76:2E:C8:BD:5E:E1:F8:F8:95:0C:AC:9E:08:4D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F6D2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2389EACA44F811F0985D080EC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:45:17 +0000
ROA not before: Mon 06 Jul 2026 17:45:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153951
IP address blocks: 103.187.216.0/23 maxlen: 24
2001:df0:c040::/48 maxlen: 48
2001:df0:c041::/48 maxlen: 48
2001:df5:adc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63186 (0xf6d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:45:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be9ac-f8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8f:07:07:57:95:ed:3d:8a:a1:f5:9e:4e:f0:
95:e8:25:ca:45:cc:6b:7a:1e:a0:d6:4a:20:92:2e:
11:1b:d3:f5:3c:7a:7b:04:dc:8e:b7:d9:e4:fb:2f:
d6:8b:44:a3:ff:26:a5:74:62:29:38:fc:5d:38:5a:
40:f1:ee:6d:42:66:ee:0b:66:54:99:f3:97:43:e8:
83:8b:e1:26:08:59:01:50:9c:22:69:ab:c7:4c:c4:
c4:37:4b:89:e6:ee:42:fc:86:41:da:34:54:2b:94:
c4:91:ae:de:5a:14:7d:e2:a3:f8:15:5f:45:c8:b2:
35:fc:9e:d4:5a:c6:f9:6c:e3:b5:f1:8a:8d:6e:90:
22:37:fa:6f:94:7c:93:68:4b:89:17:f4:e9:4b:b1:
62:1f:33:6d:8d:60:30:34:21:9d:ed:e5:08:1a:fd:
9e:72:12:ed:e9:4d:10:0c:f6:ce:9e:76:04:17:22:
12:c6:2a:0a:1f:bb:51:a1:ee:ad:7c:a1:b0:ed:e8:
81:02:56:65:6e:0f:b9:2a:74:fc:fd:51:32:51:ec:
dd:8c:31:08:06:ca:16:30:a2:b3:0a:09:ef:b3:db:
f2:e4:61:d5:33:95:b7:9f:70:44:31:ef:59:62:03:
38:0f:c2:47:e3:3e:3b:0f:76:30:b0:74:bc:92:88:
4a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3A:3C:6A:A9:A5:76:2E:C8:BD:5E:E1:F8:F8:95:0C:AC:9E:08:4D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2389EACA44F811F0985D080EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.187.216.0/23
IPv6:
2001:df0:c040::/47
2001:df5:adc0::/48
Signature Algorithm: sha256WithRSAEncryption
87:c1:cc:4d:45:27:20:8c:d1:16:60:c9:6d:cf:35:53:25:ca:
60:b9:ed:77:1a:32:70:7f:c1:0b:a2:2c:cd:c5:ad:b7:25:22:
30:98:92:8d:b7:60:7c:5a:68:80:c6:20:84:d0:68:30:b1:3f:
cf:17:63:d2:55:cd:1d:58:b9:e8:93:d0:46:bb:f4:5c:af:e7:
28:cf:83:92:f0:b9:24:a2:bf:3c:c8:24:26:c6:83:95:67:13:
11:ee:aa:a1:ab:a4:ed:2a:42:87:c8:ea:53:c4:d6:cd:ec:d2:
1f:5e:10:5c:9d:a9:f6:e1:c3:a8:1f:d8:b5:07:63:c3:73:ec:
ce:ab:a0:a1:9f:19:ef:0f:f3:37:1f:b2:7a:6d:44:5d:e9:61:
1f:18:f7:6d:bf:b8:1a:84:57:df:9d:4a:49:dc:f3:ec:75:48:
2e:6a:2c:24:cb:96:39:0b:1a:a4:d3:c4:66:30:4e:68:16:f0:
7b:54:8e:2c:e1:88:48:a7:06:5b:e4:b1:83:43:39:93:89:1d:
19:e4:45:f6:2e:5b:b5:5b:88:3b:76:d8:88:7a:dc:cf:d7:9a:
f1:4b:40:21:6f:f7:0c:51:9b:f5:3a:e4:95:68:db:94:f4:fb:
37:08:85:24:62:25:8f:33:ad:17:af:8f:89:e5:44:0f:5e:c7:
12:4a:73:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:41 2026 by rpki-client