
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FF3EF52333811ECAB1FF315C4F9AE02.roa
File: 2FF3EF52333811ECAB1FF315C4F9AE02.roa (raw, json)
Hash identifier: V7EscuZpwNDZWRI/BjUAu2Gmjptg1K3Y6K7nhcSfZoA=
Subject key identifier: E6:54:82:DD:3D:AC:BF:B6:E5:74:DC:28:B2:3C:D4:49:8C:D4:27:74
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F8E1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FF3EF52333811ECAB1FF315C4F9AE02.roa
Signing time: Mon 20 Jul 2026 05:18:47 +0000
ROA not before: Mon 20 Jul 2026 05:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147193
IP address blocks: 103.61.111.0/24 maxlen: 24
103.174.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63713 (0xf8e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 20 05:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a5dafb7-4d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0a:8a:74:38:a8:cc:22:61:d5:da:d4:e5:de:
54:e4:27:1c:72:9a:99:ce:e6:82:ce:4d:6f:29:63:
a0:07:45:e2:ba:05:e2:38:91:b3:11:22:05:be:19:
f0:25:63:a0:3b:e7:12:dd:cb:e7:a0:eb:b5:24:ed:
80:0b:56:96:41:d6:c1:ba:51:3f:30:54:98:54:45:
e0:f4:5c:63:49:d5:12:eb:64:9a:77:98:cf:c3:b9:
99:79:e8:9f:57:ca:96:b9:7c:e4:b5:1d:29:f1:fc:
38:93:cd:a3:d5:d2:d5:49:4f:e7:e4:23:bd:48:73:
c6:1f:7f:86:4f:47:bc:e8:16:9f:a8:60:d3:f6:8b:
ec:69:25:43:85:73:0e:04:d4:66:a9:a2:d8:6a:0d:
14:b9:a5:af:1b:02:2f:29:dc:13:a3:52:06:b5:b1:
d7:09:03:a7:cd:fa:c6:b5:3d:22:ed:49:08:7d:57:
a5:d3:38:be:57:45:80:ba:18:b3:58:df:95:a1:3b:
ab:e3:b6:14:4a:b9:db:15:97:fe:8e:28:f9:7b:6a:
72:1b:1f:3a:d2:e2:c5:cd:23:05:b2:52:ee:e8:87:
27:c9:68:cd:e0:3e:2f:d4:b2:74:65:b6:b2:64:e4:
f6:fb:c9:b8:b5:c0:e4:44:fc:5b:93:33:d4:cf:a1:
bb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:54:82:DD:3D:AC:BF:B6:E5:74:DC:28:B2:3C:D4:49:8C:D4:27:74
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FF3EF52333811ECAB1FF315C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.61.111.0/24
103.174.118.0/23
Signature Algorithm: sha256WithRSAEncryption
41:b8:ec:09:e4:47:44:65:2c:cc:fc:51:a8:7c:3e:fc:10:77:
19:06:08:bf:f6:18:e8:15:2e:74:1a:71:77:b1:f0:bd:47:df:
b4:a2:dc:3b:78:82:bd:b0:b8:0d:1a:0a:50:51:bc:39:13:06:
cd:3e:62:10:89:44:56:bf:4c:ea:ac:1c:92:e5:4a:19:c8:b1:
0d:27:23:37:0d:05:5a:f6:dd:2b:f9:4f:6c:6c:c3:e9:c9:f3:
66:19:9e:cd:11:52:a4:16:1d:45:a8:cf:24:a9:87:43:46:d3:
3e:94:d4:17:28:10:1e:cd:23:c7:b3:4d:48:b3:61:9f:df:80:
89:52:b1:74:84:30:a8:2d:a3:c2:97:c6:84:cf:8c:c8:f5:3a:
c9:63:5b:c8:e7:87:15:71:59:ea:b9:91:e9:6f:8b:4e:af:0f:
79:59:56:dd:16:40:29:07:f4:78:89:0a:b4:e4:c6:dd:3c:03:
92:56:c9:c7:a2:3b:12:f2:ff:48:56:28:d3:c1:43:6c:10:fb:
b8:8a:65:99:8a:af:c0:79:a9:72:82:76:27:d9:f5:66:86:2d:
d9:4a:6b:96:11:9d:b8:ee:23:b1:1e:20:bc:95:92:74:cd:ac:
93:5c:12:0c:34:63:79:71:3b:6c:58:03:cb:80:85:e7:af:f6:
21:78:39:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:03 2026 by rpki-client