
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2929BE3419F411EC924CEC3BC4F9AE02.roa
File: 2929BE3419F411EC924CEC3BC4F9AE02.roa (raw, json)
Hash identifier: RUMUr+QqafLf2RYv9Oo7FDAk4DnJp3GcbIHl5CyCtWk=
Subject key identifier: 7C:49:68:87:57:3A:EB:BD:8E:FC:8B:8F:AC:B4:A8:3F:23:37:27:3C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F350
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2929BE3419F411EC924CEC3BC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:15:30 +0000
ROA not before: Mon 06 Jul 2026 17:15:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141556
IP address blocks: 103.172.208.0/23 maxlen: 24
2407:eec0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62288 (0xf350)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:15:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be2b1-80f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:7e:34:e0:9d:22:29:70:18:df:d6:ba:8c:
15:9c:ca:1f:1a:89:3e:8f:c0:01:3f:46:dc:a4:f4:
2f:8d:81:d8:a0:3d:21:46:65:13:45:45:40:d7:1b:
85:9b:8f:ff:1d:c3:67:cd:b9:9b:32:27:d6:79:40:
33:93:1c:bd:34:3d:de:d9:92:3f:64:b3:98:eb:8d:
71:4e:b3:13:90:37:f1:77:7e:29:0d:83:c5:92:1c:
ea:40:30:5c:9e:13:78:ea:5c:ba:8d:3a:a7:19:ec:
b6:48:1c:0d:0e:8c:bb:28:c5:c5:8f:59:17:32:aa:
d7:9e:5c:9e:cb:65:cb:64:a3:17:78:0e:ff:3e:cb:
fa:39:7a:a4:e1:8a:1a:4d:a8:68:15:71:77:36:b1:
b6:16:78:e9:f3:d0:81:c9:d4:55:14:a6:0e:e7:d2:
04:c4:ee:53:36:2a:90:65:24:a0:26:d1:49:a7:7b:
0a:77:36:8f:3e:81:2b:7e:d0:14:14:d7:15:a2:ed:
9a:76:a1:d7:12:58:c7:4c:6e:bd:ce:a2:d5:53:3d:
47:76:cd:f2:d8:33:01:13:59:c8:16:d5:2d:7a:58:
9a:9d:10:47:e3:d9:42:e0:63:ff:d3:ae:ab:02:e2:
5e:24:fa:2a:0c:52:58:60:80:de:d8:d3:1b:ca:0e:
34:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:49:68:87:57:3A:EB:BD:8E:FC:8B:8F:AC:B4:A8:3F:23:37:27:3C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2929BE3419F411EC924CEC3BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.172.208.0/23
IPv6:
2407:eec0::/32
Signature Algorithm: sha256WithRSAEncryption
73:29:87:66:87:05:5e:38:30:14:8d:7c:45:57:f1:89:18:6f:
3b:87:45:1b:76:74:12:65:a6:38:af:53:3f:cb:52:6b:b8:9b:
83:4a:23:b2:43:a0:4c:b2:cf:db:04:4e:43:2d:cb:fa:e6:bf:
c0:62:a0:53:be:87:52:1a:84:e8:35:f9:fa:e2:68:c2:d7:43:
f5:73:ab:50:4f:4a:4b:ff:28:2e:4c:d4:89:43:f6:4c:1b:cf:
8e:da:83:cf:4e:72:44:80:74:49:d2:d6:c4:aa:2f:7d:d4:2d:
1d:f2:f8:45:35:7a:ef:37:e0:15:ca:1e:bd:ec:aa:53:7e:76:
e8:df:2c:e2:49:3f:c6:d8:6b:ed:ce:74:a4:4f:6a:e1:31:a2:
33:a8:5f:ed:ec:60:bf:02:ef:bf:7a:89:b8:e8:a6:95:bb:2f:
50:d5:fb:92:ca:8e:93:9d:f1:1c:ff:9c:53:51:8d:17:a2:29:
e7:55:c6:a6:03:2c:dc:7d:5b:93:4d:4d:9a:c2:90:10:ad:5e:
a1:70:fb:70:c5:47:b3:29:09:77:d3:ec:55:f1:ce:f7:ed:f0:
91:7d:f0:2a:00:97:c0:14:a8:4a:50:e6:4d:c5:87:a0:89:52:
66:67:d8:28:78:20:e5:6d:9d:00:cc:62:1c:40:d1:c3:4d:eb:
44:cd:f9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:16 2026 by rpki-client