
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2788B5627ACA11F18BD90C416FA30FBC.roa
File: 2788B5627ACA11F18BD90C416FA30FBC.roa (raw, json)
Hash identifier: Auxc/TbSu3jPH5tv+v4YY83Lpj6I9Y2V38z1JgyXM4M=
Subject key identifier: C9:EA:B6:83:EF:F2:68:C7:62:4D:F4:19:D5:AC:89:19:7A:C4:D8:BD
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F7F3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2788B5627ACA11F18BD90C416FA30FBC.roa
Signing time: Wed 08 Jul 2026 12:40:09 +0000
ROA not before: Wed 08 Jul 2026 12:40:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146851
IP address blocks: 103.171.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63475 (0xf7f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 8 12:40:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4e4529-5856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:78:39:34:cc:1f:2f:6d:b8:e2:5f:14:c0:3c:
23:a3:73:fd:8e:72:7c:9f:31:e2:74:c3:7d:4d:fb:
85:88:7b:28:c4:2b:2a:8e:9f:9c:bb:21:a6:6a:e8:
c0:2b:1c:44:32:6e:a1:63:b3:90:5b:81:3e:00:cc:
ca:e8:f7:01:98:23:88:52:b4:f4:ea:e3:1c:80:26:
1e:5e:8f:f0:2c:c8:fb:46:a8:bb:17:5e:4c:0e:f9:
35:60:3d:33:5b:6b:86:58:dc:b2:4e:62:97:8f:c1:
c7:53:b3:9b:66:81:7c:0c:4d:48:a7:22:3b:19:42:
24:c8:d1:7e:dc:a2:8a:4e:3d:53:04:7f:00:dd:9e:
b4:5b:a8:8d:34:be:b4:5f:60:7b:93:88:a9:30:10:
20:d8:2d:6a:8d:ef:20:bc:64:6a:83:7e:50:92:6d:
5b:47:12:b5:3b:07:11:b2:a6:28:b1:aa:20:39:46:
95:6b:53:eb:2d:5f:28:8d:d9:79:37:33:2c:82:16:
50:a1:0a:57:96:4a:f3:f4:60:e0:49:b5:6f:e5:48:
8f:fe:db:cb:01:fb:e3:4a:a8:8c:d9:2e:6b:8d:9d:
c2:7b:27:79:d9:40:2e:39:72:fe:60:a5:b0:a4:40:
f3:11:69:28:ab:34:7b:0a:7b:40:27:42:45:2c:87:
1c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EA:B6:83:EF:F2:68:C7:62:4D:F4:19:D5:AC:89:19:7A:C4:D8:BD
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2788B5627ACA11F18BD90C416FA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.171.248.0/24
Signature Algorithm: sha256WithRSAEncryption
67:14:6f:f3:a2:49:f9:03:38:cf:9f:8b:5a:e7:6b:c4:a7:8e:
53:4e:8c:bf:87:b1:61:be:44:04:35:4b:d2:4f:55:65:be:8d:
d0:fb:8b:02:2f:18:52:c9:1a:d7:51:81:dd:aa:13:96:e0:48:
e6:aa:8d:b7:45:f1:a7:46:1a:1f:14:bc:6f:f9:db:a6:cd:1d:
75:64:4f:26:5f:6f:74:ce:25:a1:2d:8b:0a:4a:44:1b:01:4a:
bc:a9:35:4e:87:c0:30:1c:8a:19:59:e1:4f:7b:a1:56:03:79:
ae:b2:5b:31:41:a0:8f:d4:3a:75:6e:69:da:12:11:c5:1c:93:
e3:bc:8a:f3:0c:0c:eb:38:fb:fb:98:6c:fd:5a:3d:e8:f2:f4:
0a:15:86:83:6b:9c:e5:69:69:11:97:f7:9e:34:1d:61:d7:9a:
cd:98:39:5d:83:f2:9e:a5:11:fd:4d:88:50:e7:b2:63:66:c2:
e9:f7:f9:f5:fd:43:93:d6:ed:88:10:ed:a1:66:36:83:b8:0e:
0b:d7:59:a1:1a:38:10:b5:2e:5e:d6:11:c4:f8:42:70:7b:15:
09:1c:78:08:26:d5:fc:9f:8d:d9:c0:21:c7:93:af:40:bf:ca:
df:39:d0:e6:eb:9e:11:dd:a1:f5:e7:da:07:22:21:04:10:01:
7d:2f:b7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:18 2026 by rpki-client