
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/411CA50A4B8B11ED8FB05F7FC4F9AE02.roa
File: 411CA50A4B8B11ED8FB05F7FC4F9AE02.roa (raw, json)
Hash identifier: Q1UTBuGz2BAzs4YNlKQ1HQS63U3g+9MgF7CcSOcgpxE=
Subject key identifier: 52:95:40:3B:51:8F:AB:A0:A2:85:9C:9A:2B:43:D0:4B:40:CC:8D:FD
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F559
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/411CA50A4B8B11ED8FB05F7FC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:32:55 +0000
ROA not before: Mon 06 Jul 2026 17:32:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150094
IP address blocks: 103.68.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62809 (0xf559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:32:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be6c7-90e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:04:32:40:91:30:26:c8:bd:d9:b3:d3:be:
19:2a:ee:f6:5a:20:06:48:e7:ec:66:cf:ec:79:1f:
1f:55:41:e9:9d:19:1f:56:f3:1c:d0:0a:e6:51:f7:
07:9a:6b:b0:59:57:1d:01:07:8d:82:e8:ac:08:3a:
48:92:6e:bc:bc:4f:31:04:fb:9a:2b:ed:8f:92:21:
e0:b5:08:f5:4f:df:0d:31:d0:ef:dd:d8:99:2b:b4:
70:0a:24:f0:ed:49:16:e7:67:63:6e:22:65:9c:1e:
95:fa:ad:32:68:18:0f:3e:02:3f:98:7c:b5:a6:54:
55:3e:5f:3e:36:37:c8:b1:9d:dc:95:ce:d8:a4:34:
cb:04:9b:4c:08:01:4a:d6:f0:88:3c:a8:a9:39:73:
bd:0a:43:31:5f:3a:91:57:38:15:05:08:15:57:55:
c6:12:77:f8:e2:40:81:70:b4:33:8b:8d:e5:fc:a3:
27:45:00:ea:56:9f:99:a4:b5:7e:27:df:0c:c4:d4:
d7:d9:6c:bb:b5:71:ae:97:b4:42:6e:31:c4:e0:31:
14:37:24:f1:3a:15:c5:c2:74:fd:ec:49:a9:8a:c6:
27:39:70:ff:8a:19:0a:95:ea:51:c6:42:8f:10:60:
f6:b1:a6:6b:a2:dd:b6:76:fc:8a:5c:bc:ad:5e:96:
ad:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:95:40:3B:51:8F:AB:A0:A2:85:9C:9A:2B:43:D0:4B:40:CC:8D:FD
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/411CA50A4B8B11ED8FB05F7FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.68.24.0/24
Signature Algorithm: sha256WithRSAEncryption
94:5f:e9:68:e2:b8:cb:4f:c2:f8:58:80:6f:9f:07:1a:82:7e:
3a:4d:f9:12:59:fd:ed:c1:4a:8d:0c:bf:b8:e2:e8:98:3f:c0:
ff:e5:b3:30:16:0b:52:49:dc:93:47:b3:4b:34:8c:e6:30:be:
d9:a0:85:34:fc:2a:ca:2a:b4:f4:e0:12:8c:2a:f9:f1:08:f1:
f6:e6:77:9b:3f:79:d3:5e:26:4e:18:2f:19:e9:7a:2e:45:64:
2b:96:2c:e0:bb:64:0c:bb:48:18:d8:dd:0c:ef:96:fc:99:8e:
f5:87:32:cf:72:5c:25:30:9e:e3:a8:3c:4b:22:50:e0:9c:06:
08:73:8c:e8:1d:e4:0e:66:48:78:59:7e:be:2b:a9:4c:24:96:
75:f5:94:40:a4:7b:46:54:a9:1d:eb:c2:59:c8:8f:ea:46:c6:
b7:22:12:fb:93:3f:a3:ef:f0:44:37:56:8d:72:86:b6:92:4e:
29:e0:e3:ea:fe:69:d3:cd:0e:11:e4:ec:6e:43:d1:d8:09:f1:
f6:0e:59:d2:ac:da:af:73:ab:5b:b7:fb:37:65:57:65:19:3f:
4e:52:8b:f5:31:4c:e9:0a:4a:df:6f:95:b2:97:b2:ca:39:b2:
16:90:03:fb:be:6a:03:fb:52:7d:76:5f:b1:25:b2:7a:88:ce:
04:1a:fa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:48 2026 by rpki-client