
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/45E2931C1B7E11F18CD2F3C0323D8C67.roa
File: 45E2931C1B7E11F18CD2F3C0323D8C67.roa (raw, json)
Hash identifier: ce8DH3QwfNRTcnjrrBZE1VfTPuJM+e92SQ+c2oVor/o=
Subject key identifier: C3:F0:0A:8D:91:DE:8B:76:CB:BA:BB:EE:AD:DE:50:2E:84:88:D2:BA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F055
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/45E2931C1B7E11F18CD2F3C0323D8C67.roa
Signing time: Mon 06 Jul 2026 16:50:12 +0000
ROA not before: Mon 06 Jul 2026 16:50:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135811
IP address blocks: 103.78.20.0/23 maxlen: 24
103.87.64.0/23 maxlen: 24
103.99.48.0/23 maxlen: 24
2001:df3:7dc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61525 (0xf055)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:50:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdcc4-4db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:70:39:07:a9:6d:78:69:3b:5e:06:27:ad:02:
73:9e:63:4f:24:e1:d4:04:ee:c2:64:1d:f4:c4:6d:
2b:c5:30:fb:e1:ff:f1:47:f7:10:e9:04:1d:70:80:
74:fd:55:5d:4e:4d:a8:99:3a:0e:21:5c:3c:5c:78:
e7:28:df:73:dc:df:d2:99:8f:91:b4:39:e2:63:39:
7e:56:35:5d:23:1b:1a:64:8f:c6:5e:ec:a0:a1:e8:
a3:5a:88:78:12:c6:d4:5a:4f:40:c4:a1:89:dc:24:
08:5c:3c:1e:89:dc:f6:d8:2f:76:5a:ab:0d:11:0d:
12:0e:58:1a:2a:cf:f5:07:71:6c:30:72:fc:1c:6f:
4d:1e:f3:17:2d:a9:92:58:22:6b:e2:ff:d2:ab:12:
9e:f8:ea:d3:ee:a0:9f:43:be:92:d3:ea:6f:b8:7d:
79:1d:d9:ab:a0:eb:fe:73:a3:15:52:e8:39:f1:89:
73:2b:52:de:95:14:9b:64:b0:47:18:2b:2d:52:b4:
e4:e6:2b:ef:31:11:c2:95:37:af:f8:1a:d4:98:70:
e5:4c:c4:ad:88:3d:91:8f:58:f3:10:cf:3f:23:6b:
6f:3d:26:e3:f3:5c:9b:e1:3c:68:91:5a:2a:84:ec:
67:a0:d3:8b:bc:a3:f4:90:38:53:4a:dd:25:47:2e:
c1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F0:0A:8D:91:DE:8B:76:CB:BA:BB:EE:AD:DE:50:2E:84:88:D2:BA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/45E2931C1B7E11F18CD2F3C0323D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.78.20.0/23
103.87.64.0/23
103.99.48.0/23
IPv6:
2001:df3:7dc0::/48
Signature Algorithm: sha256WithRSAEncryption
16:e0:a3:c7:c5:58:80:55:55:11:ef:4b:ec:da:ac:14:ee:a4:
ee:b4:ba:3c:4e:39:22:36:7d:3b:b5:65:7d:c4:55:8f:52:62:
51:c8:d2:77:66:de:81:27:84:43:0a:7d:8a:17:68:04:4a:71:
d2:d5:93:e0:33:79:f6:da:0f:c2:d4:b3:ae:c7:3e:9e:43:dd:
cf:e7:bb:eb:da:a4:8f:d4:27:80:d4:d1:e1:b7:df:ef:5b:43:
c3:09:f2:cd:f0:9c:0c:bb:42:51:eb:c0:38:cf:55:b4:06:7a:
c4:59:1e:7e:08:e1:4e:1b:0a:4f:fb:4d:20:20:52:55:91:2e:
35:de:1c:47:10:cc:0f:7b:2c:17:5f:91:31:35:9a:e6:3a:0f:
af:52:b8:6e:0e:24:b9:6b:3d:0a:1d:34:f6:8b:7f:18:56:a0:
c6:5f:e0:32:b8:61:bb:b5:0f:81:a1:e3:88:a6:53:03:da:2a:
39:cc:7b:7c:df:8d:34:a9:75:85:c0:d7:7e:ca:14:94:9d:71:
db:28:31:22:cb:98:02:26:93:f3:87:79:79:4f:1b:aa:54:ba:
ff:3a:66:1e:35:6b:eb:9a:79:7a:86:64:a3:76:af:79:e0:3f:
1b:e2:29:c1:d1:cd:4f:51:60:94:c3:b8:6a:e0:39:8b:c7:d8:
a9:c8:42:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:00 2026 by rpki-client