
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46D6F4EA76ED11EDB8F27034C4F9AE02.roa
File: 46D6F4EA76ED11EDB8F27034C4F9AE02.roa (raw, json)
Hash identifier: sGaJBCstEtLIU0XtkfHx3RjDTpbkKIBYcL4ecSqVans=
Subject key identifier: 06:1A:FD:11:1E:AB:AD:C8:A2:07:93:C4:00:66:D8:94:94:90:00:27
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F56E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46D6F4EA76ED11EDB8F27034C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:33:36 +0000
ROA not before: Mon 06 Jul 2026 17:33:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150573
IP address blocks: 103.42.220.0/23 maxlen: 24
2400:c560::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62830 (0xf56e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:33:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be6f0-9970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:90:3b:93:ac:4d:6d:42:6e:3b:3b:66:f1:
6d:34:a8:94:ec:ec:7a:52:32:87:31:3a:05:7e:f8:
c0:64:9f:06:b1:8e:d6:a9:42:a3:b6:c3:58:60:17:
44:df:cb:50:52:c1:aa:b4:fe:d0:f1:55:cc:31:64:
1b:f1:11:e0:58:69:31:0a:c5:8d:0b:f8:db:c5:11:
90:f2:48:92:42:15:c7:5f:bc:9f:93:c5:ab:38:d8:
bf:0a:17:23:9e:fe:8d:ae:c5:ad:2e:01:98:b1:85:
5f:5d:f5:9d:c2:73:42:8d:76:60:be:a7:ed:c9:44:
40:74:69:01:e6:93:50:96:8f:d1:5d:5a:2b:f6:bb:
ad:3f:93:5c:02:8e:12:b6:af:04:25:08:2b:a2:df:
2e:d4:c8:c5:c2:af:53:78:3f:7a:32:28:72:a7:af:
7f:bc:ce:9a:8c:67:31:0c:e2:3b:a2:2a:89:37:d2:
30:11:81:09:10:7c:77:50:11:a4:e0:da:4b:3e:95:
cd:3e:00:e1:49:ec:2d:27:77:86:ba:2d:88:ed:34:
39:e7:9f:64:2d:bf:69:6f:5a:7c:46:4c:49:e7:19:
58:5b:ea:9e:61:5d:91:9c:c5:b6:41:04:28:20:a1:
e3:d1:87:1b:f1:e4:be:91:da:6a:55:77:ae:f9:6c:
b3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1A:FD:11:1E:AB:AD:C8:A2:07:93:C4:00:66:D8:94:94:90:00:27
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46D6F4EA76ED11EDB8F27034C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.42.220.0/23
IPv6:
2400:c560::/32
Signature Algorithm: sha256WithRSAEncryption
55:a3:53:69:77:af:3d:46:38:68:7b:65:6d:b7:20:ea:7c:23:
f7:dc:e1:fc:59:25:55:d6:e2:c5:17:38:2f:47:01:c6:13:50:
29:9a:33:9b:47:60:ca:2b:8e:56:a5:cd:c5:a3:2d:8a:a8:9c:
83:47:74:79:ba:f7:ee:6a:5c:e9:88:ef:bf:e9:3a:e5:8a:26:
29:97:0e:3b:03:ab:28:6e:2f:ba:06:c1:81:f1:a8:b3:6c:cb:
b6:3a:f0:dc:a9:10:27:5a:b6:1b:1d:67:4c:f8:2b:b1:f5:db:
fe:6a:4e:ea:16:58:cc:f5:cb:18:64:86:a7:bc:b5:7a:d2:79:
0d:f6:76:ee:78:31:a0:a5:dc:70:5b:d2:06:ef:4e:ba:42:f8:
8f:a3:59:f7:86:aa:45:c5:c7:8f:08:f5:87:ff:39:c6:f3:12:
c1:39:92:36:90:a3:90:c6:7f:95:ee:8e:7e:7d:31:71:75:a7:
df:2a:3a:b5:0e:2c:fa:a2:ac:4b:2e:7f:05:fd:05:cd:f6:5b:
f8:0e:f0:11:ad:90:15:d0:53:06:91:59:88:c2:a0:dc:42:04:
76:3e:41:24:8a:b0:81:79:60:3a:fe:09:f2:b7:6f:46:cf:9e:
9d:2f:05:0e:4c:ba:e0:be:36:b0:95:fb:2b:90:be:04:5a:e8:
7e:35:d1:e5
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDAPVuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MzMzNloXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmU2ZjAtOTk3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMeokDuTrE1tQm47O2bxbTSolOzselIyhzE6BX74wGSfBrGO1qlCo7bDWGAX
RN/LUFLBqrT+0PFVzDFkG/ER4FhpMQrFjQv428URkPJIkkIVx1+8n5PFqzjYvwoX
I57+ja7FrS4BmLGFX131ncJzQo12YL6n7clEQHRpAeaTUJaP0V1aK/a7rT+TXAKO
EravBCUIK6LfLtTIxcKvU3g/ejIocqevf7zOmoxnMQziO6IqiTfSMBGBCRB8d1AR
pODaSz6VzT4A4UnsLSd3hrotiO00OeefZC2/aW9afEZMSecZWFvqnmFdkZzFtkEE
KCCh49GHG/HkvpHaalV3rvlss48CAwEAAaOCAm8wggJrMB0GA1UdDgQWBBQGGv0R
HqutyKIHk8QAZtiUlJAAJzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQ2RDZGNEVB
NzZFRDExRURCOEYyNzAzNEM0RjlBRTAyLnJvYTAuBggrBgEFBQcBBwEB/wQfMB0w
DAQCAAEwBgMEAWcq3DANBAIAAjAHAwUAJADFYDANBgkqhkiG9w0BAQsFAAOCAQEA
VaNTaXevPUY4aHtlbbcg6nwj99zh/FklVdbixRc4L0cBxhNQKZozm0dgyiuOVqXN
xaMtiqicg0d0ebr37mpc6Yjvv+k65YomKZcOOwOrKG4vugbBgfGos2zLtjrw3KkQ
J1q2Gx1nTPgrsfXb/mpO6hZYzPXLGGSGp7y1etJ5DfZ27ngxoKXccFvSBu9OukL4
j6NZ94aqRcXHjwj1h/85xvMSwTmSNpCjkMZ/le6Ofn0xcXWn3yo6tQ4s+qKsSy5/
Bf0FzfZb+A7wEa2QFdBTBpFZiMKg3EIEdj5BJIqwgXlgOv4J8rdvRs+enS8FDky6
4L42sJX7K5C+BFrofjXR5Q==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:39 2026 by rpki-client