
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/25ED0B4E3C6511EBAEF57659C4F9AE02.roa
File: 25ED0B4E3C6511EBAEF57659C4F9AE02.roa (raw, json)
Hash identifier: riNC8oNFelkQzN1IMhAGxAnQLKC+LpDnPqHrBa/i1qw=
Subject key identifier: 54:C9:57:6E:D7:9E:DC:E2:79:3F:07:25:77:32:0B:55:8F:F1:41:70
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EE2C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/25ED0B4E3C6511EBAEF57659C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:32:16 +0000
ROA not before: Mon 06 Jul 2026 16:32:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132947
IP address blocks: 103.155.206.0/24 maxlen: 24
103.155.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60972 (0xee2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:32:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd890-45cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:73:7a:dc:a4:2c:92:68:2b:d0:a6:09:ec:06:
ac:c4:ba:e4:54:2c:6c:80:9a:2e:0d:91:e6:7d:67:
2c:42:ad:fb:84:b1:7d:6f:35:0b:85:b9:7d:3f:a8:
77:b5:47:62:0c:b7:04:d8:d9:f4:2c:20:9f:5e:b7:
d1:22:fe:21:17:e0:90:df:30:47:50:e8:7c:4e:85:
3f:79:83:91:e6:0c:d9:a0:1c:3d:d8:4f:ff:db:f6:
32:67:27:91:cd:68:be:80:f6:91:f4:db:3d:54:59:
89:78:08:bf:5a:83:c0:d7:e2:37:fa:7f:c3:55:7d:
b4:96:79:9d:10:e7:9b:a7:7a:e1:ea:c8:ae:6d:81:
3c:a3:f4:53:68:a7:7a:d1:a2:ff:02:5f:ff:01:fb:
9a:f5:ae:60:6e:98:13:f9:77:a2:f5:c7:cc:aa:10:
18:2c:fa:19:d9:23:a9:7b:9b:b0:e1:b7:4b:c0:70:
bb:20:ad:d3:5f:fc:ad:8c:7c:a8:57:61:df:ac:c2:
24:73:7e:30:e5:c8:c1:c5:91:1f:ab:0c:f0:ef:a0:
62:54:e5:a6:16:d4:72:9a:18:c9:6a:30:2a:67:55:
63:d6:88:aa:42:80:5c:22:d9:fb:91:01:6c:ea:0f:
8f:4f:74:02:d0:33:c7:ff:55:16:87:2d:6f:8b:79:
9a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C9:57:6E:D7:9E:DC:E2:79:3F:07:25:77:32:0B:55:8F:F1:41:70
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/25ED0B4E3C6511EBAEF57659C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.155.206.0/23
Signature Algorithm: sha256WithRSAEncryption
94:96:f8:79:ae:bf:c1:d3:9c:d5:e0:22:2f:bb:16:2f:a7:46:
30:b8:21:64:cd:ed:21:85:1f:bb:cf:5e:95:60:3b:f0:0f:46:
2f:e4:93:f0:c8:bf:74:aa:91:ca:3c:b4:ce:3f:7f:04:df:92:
63:65:fd:c4:e7:9f:c1:c2:05:6a:3c:65:bf:34:8e:b1:40:e5:
36:68:d6:fb:b8:32:a5:e7:eb:44:5f:80:bb:d4:f6:83:d7:e9:
31:17:80:74:47:3c:e2:cf:9c:50:54:fd:4d:e6:2c:9f:c1:0a:
2a:d2:36:f0:64:e8:f3:63:68:09:70:8b:f5:01:88:28:18:19:
cb:1c:e9:79:d0:df:96:4d:17:d6:e4:50:09:a9:42:85:e7:b1:
ba:1e:f9:08:23:f7:ef:5c:7a:87:24:25:57:87:1d:ac:88:c0:
f9:24:b3:fc:51:12:ae:04:3d:20:f4:34:5f:f8:52:1a:af:a4:
66:aa:33:9c:64:b9:9c:8f:36:5c:4d:e8:e8:95:25:67:fb:2b:
5d:c9:e3:12:e2:2c:7b:70:23:0f:71:32:b8:c4:01:76:49:bf:
b3:3d:9a:42:34:6c:25:13:0d:70:7f:18:e1:39:56:51:6e:18:
06:43:9b:9b:e0:b6:a4:40:ca:3d:15:11:68:7a:42:d9:e5:dd:
96:6a:13:08
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAO4sMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2MzIxNloXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmQ4OTAtNDVjZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOhzetykLJJoK9CmCewGrMS65FQsbICaLg2R5n1nLEKt+4SxfW81C4W5fT+o
d7VHYgy3BNjZ9Cwgn1630SL+IRfgkN8wR1DofE6FP3mDkeYM2aAcPdhP/9v2Mmcn
kc1ovoD2kfTbPVRZiXgIv1qDwNfiN/p/w1V9tJZ5nRDnm6d64erIrm2BPKP0U2in
etGi/wJf/wH7mvWuYG6YE/l3ovXHzKoQGCz6GdkjqXubsOG3S8BwuyCt01/8rYx8
qFdh36zCJHN+MOXIwcWRH6sM8O+gYlTlphbUcpoYyWowKmdVY9aIqkKAXCLZ+5EB
bOoPj090AtAzx/9VFoctb4t5mq0CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRUyVdu
157c4nk/ByV3MgtVj/FBcDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzI1RUQwQjRF
M0M2NTExRUJBRUY1NzY1OUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWebzjANBgkqhkiG9w0BAQsFAAOCAQEAlJb4ea6/wdOc1eAiL7sW
L6dGMLghZM3tIYUfu89elWA78A9GL+ST8Mi/dKqRyjy0zj9/BN+SY2X9xOefwcIF
ajxlvzSOsUDlNmjW+7gypefrRF+Au9T2g9fpMReAdEc84s+cUFT9TeYsn8EKKtI2
8GTo82NoCXCL9QGIKBgZyxzpedDflk0X1uRQCalCheexuh75CCP371x6hyQlV4cd
rIjA+SSz/FESrgQ9IPQ0X/hSGq+kZqoznGS5nI82XE3o6JUlZ/srXcnjEuIse3Aj
D3EyuMQBdkm/sz2aQjRsJRMNcH8Y4TlWUW4YBkObm+C2pEDKPRURaHpC2eXdlmoT
CA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:42 2026 by rpki-client