
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2EB21F60BEBC11EBA276510AC4F9AE02.roa
File: 2EB21F60BEBC11EBA276510AC4F9AE02.roa (raw, json)
Hash identifier: ML0WVg8AOMxvlSpBO1xn93GWz7KuuPx1v3KS14/8D+8=
Subject key identifier: AB:6A:58:B9:EC:A9:7D:EB:8D:64:F1:17:8F:EF:D0:5F:10:57:D9:EB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F393
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2EB21F60BEBC11EBA276510AC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:17:47 +0000
ROA not before: Mon 06 Jul 2026 17:17:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141857
IP address blocks: 103.167.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62355 (0xf393)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be33a-b79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:48:2b:fa:c2:48:a8:61:77:9c:27:58:77:
6d:05:1e:27:3a:00:41:91:7d:7d:50:63:12:18:7d:
f7:e5:84:27:fc:e0:0b:9c:17:f1:98:18:9d:3a:6e:
9b:98:8e:ee:1c:94:1c:08:db:25:9f:27:b6:9e:dc:
f1:55:ca:07:74:93:29:40:a0:3e:1d:f1:ea:45:f5:
7a:b9:37:7c:96:a5:c0:b8:97:c4:fd:bf:ac:31:28:
21:64:f3:01:a0:f2:1d:e8:86:7f:fa:b1:7f:ce:13:
af:29:b2:ac:97:f7:e9:24:37:cf:fe:46:44:2e:e1:
36:b9:74:e1:5d:91:8d:40:76:72:cb:11:d2:5e:56:
17:9d:22:fa:12:fa:40:d8:ff:f4:b0:e5:e2:fc:0f:
aa:52:29:32:d5:42:8a:be:ad:42:ee:74:65:a4:84:
e3:d2:87:36:97:73:5a:4c:14:78:8d:26:34:6e:fe:
a2:64:60:3c:5f:b8:66:4b:12:d9:7b:ed:56:f6:3d:
d6:a6:d8:69:27:28:3e:b4:88:1f:e4:82:85:1a:20:
ba:02:ec:35:76:80:10:74:64:4b:8f:57:9e:e6:e0:
0a:5e:26:3f:4f:2e:18:d6:e1:51:a8:a4:47:a2:72:
be:59:f2:6c:a5:0b:9f:f0:ea:b1:d4:39:ed:1c:96:
13:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6A:58:B9:EC:A9:7D:EB:8D:64:F1:17:8F:EF:D0:5F:10:57:D9:EB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2EB21F60BEBC11EBA276510AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.77.0/24
Signature Algorithm: sha256WithRSAEncryption
10:03:2f:37:89:d0:6c:e5:cb:75:42:a3:81:15:3c:a2:01:dc:
f2:67:8f:a4:f3:22:fe:05:0e:c3:fa:04:e1:04:81:87:8d:4a:
b5:07:b6:be:d1:f8:fe:4a:78:11:09:4c:d2:05:b1:a4:2b:23:
c8:9e:98:f5:8b:c1:4d:aa:fb:df:4a:39:5a:8e:36:d5:1b:ea:
be:45:4f:74:18:ed:7a:fe:f2:4e:d9:c3:3f:cd:dd:dd:30:4d:
5a:11:1b:32:d8:52:85:c7:f2:72:9d:9b:1f:8a:8b:ea:09:0e:
7c:84:48:f5:77:9e:45:7c:22:56:16:a3:18:92:ff:d3:7f:85:
38:54:74:cd:ca:1a:ac:28:e3:77:8d:fa:92:e7:95:aa:c2:c4:
88:d9:15:a7:09:08:62:66:b7:43:f2:8e:a8:1a:3a:31:8f:bc:
cf:44:40:1f:fd:c8:b8:75:e4:4e:06:14:61:86:e1:71:9d:fd:
82:44:5e:a0:59:07:83:2b:b1:31:1f:3f:37:66:ce:64:02:f1:
6f:26:39:b3:11:30:11:46:c3:95:5c:4c:9a:0d:55:ee:67:02:
85:4c:58:23:1c:54:38:3d:fe:8e:35:4e:1a:87:86:6b:2b:c1:
99:63:70:cc:23:bd:ac:16:22:e8:16:df:fc:1b:89:ff:79:93:
6c:18:4e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:04 2026 by rpki-client