
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/412170F09DE711EC9E35515BC4F9AE02.roa
File: 412170F09DE711EC9E35515BC4F9AE02.roa (raw, json)
Hash identifier: YAoGgX/7XWo2ZgfNdQtft6jA89tydz9LtjM3EVO90JE=
Subject key identifier: EB:81:C1:FF:34:5B:2A:DE:3D:81:3A:B7:40:CE:97:C9:EA:E9:6C:E6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F02B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/412170F09DE711EC9E35515BC4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:48:52 +0000
ROA not before: Mon 06 Jul 2026 16:48:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135753
IP address blocks: 103.74.144.0/22 maxlen: 24
2001:df1:5640::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61483 (0xf02b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:48:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdc74-20aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5c:c7:ef:e8:1a:13:2b:e3:64:db:3f:07:86:
22:da:c1:d2:d2:35:1a:32:9b:7e:09:8b:f9:51:bb:
b1:55:74:a7:5f:4e:57:6d:69:dd:b3:e1:78:70:f7:
89:39:31:bd:02:56:7d:52:b5:4f:0a:02:fd:b3:ba:
ad:32:5b:b4:f2:96:d0:0a:69:11:42:25:80:5f:3f:
53:01:7d:f2:b5:79:72:7b:06:a8:d3:d1:0e:89:7a:
61:50:c6:cc:b8:d1:cb:91:ff:be:6d:01:86:8b:72:
f9:a2:73:d8:d1:ea:de:88:5f:61:40:23:8b:cc:05:
96:04:a0:bd:28:43:4f:65:f0:48:b0:35:a9:f9:cf:
c3:8a:f2:a4:9a:ab:e6:c2:d8:3e:be:7d:eb:77:a5:
34:cf:d6:2d:0f:da:fc:65:9c:20:2d:40:ef:b4:f8:
00:a0:ee:3e:aa:05:c0:5f:29:c2:6b:5c:56:53:5e:
4b:bf:f7:cd:5c:8a:b0:e7:bd:08:d9:6b:eb:03:00:
31:00:9e:2b:d4:65:ae:ce:f5:56:2d:6a:41:fd:8b:
2c:93:f3:73:d4:0d:b6:a2:88:fe:78:6b:9a:2f:61:
5d:b1:04:5e:34:65:d9:cf:1c:ef:1f:ef:22:c6:62:
3a:51:51:4f:92:e7:1c:9a:b3:ed:b4:85:f0:73:32:
d6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:81:C1:FF:34:5B:2A:DE:3D:81:3A:B7:40:CE:97:C9:EA:E9:6C:E6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/412170F09DE711EC9E35515BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.74.144.0/22
IPv6:
2001:df1:5640::/48
Signature Algorithm: sha256WithRSAEncryption
a1:f4:66:82:ca:ac:48:43:2e:be:b2:80:fb:d3:6e:72:8b:8e:
f4:9c:fe:05:e6:17:8a:91:eb:6b:4e:2f:d1:e7:77:d2:39:cc:
56:cc:c6:4e:d5:87:60:93:19:d3:fa:0c:90:17:74:25:fe:22:
17:3d:7c:4a:ef:50:e2:f0:91:03:7f:66:19:82:56:e6:a7:79:
3f:eb:9f:10:95:4e:ee:6f:c0:ca:b8:21:0f:1e:a8:64:f9:77:
2f:d5:aa:32:7b:1a:8d:6e:2e:d4:14:8e:46:37:45:8d:f8:35:
dc:e7:73:9a:32:8e:b1:e3:c1:3a:41:31:6b:d4:78:f8:47:d1:
84:2f:bb:18:13:dd:bd:98:38:81:dd:a2:9c:9e:87:e5:75:6b:
b6:e6:b9:50:9c:fc:f6:0a:13:99:f8:c0:11:36:c7:fb:c2:9e:
3d:d6:d0:c8:75:5c:6b:f9:f3:86:36:ad:7e:cf:b7:56:81:ff:
9c:1e:dd:44:6d:a3:bf:15:76:fb:e8:db:d5:eb:8c:a3:9d:6f:
56:68:34:8d:69:c9:ad:0e:28:b5:5c:c3:ce:0b:70:31:9d:b9:
80:37:ae:df:62:7c:71:98:ab:1f:60:0c:aa:ea:1b:5d:6a:c5:
06:e6:b9:f7:97:20:25:0e:9f:08:59:c6:3f:b7:8b:c1:c8:87:
54:4b:db:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:56:27 2026 by rpki-client