
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/483BA89A036911EE96C26D87C4F9AE02.roa
File: 483BA89A036911EE96C26D87C4F9AE02.roa (raw, json)
Hash identifier: TYU8EzFKTPepMuaZsmP0sq88YkgYpaoWKxtKDiv8tVw=
Subject key identifier: 9E:DC:7F:1E:0E:3B:22:8D:0E:F1:ED:83:C7:F4:07:83:AB:F2:6B:25
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EE2E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/483BA89A036911EE96C26D87C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:32:19 +0000
ROA not before: Mon 06 Jul 2026 16:32:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132952
IP address blocks: 103.238.220.0/22 maxlen: 24
103.255.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Jul 2026 11:47:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60974 (0xee2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:32:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd893-e7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:76:e1:bf:ac:d7:c2:da:e4:15:96:e7:39:da:
03:e4:fa:26:30:d4:f7:ba:50:f7:97:24:63:e1:14:
a8:03:e1:a7:ad:f2:7f:db:d2:cc:48:57:2f:2d:06:
f1:85:9f:ce:b1:ad:ec:e5:70:bb:8c:cc:ba:2d:d8:
e5:d2:d6:4d:20:52:bc:e1:6d:2b:3c:00:88:62:50:
3e:95:38:54:5f:26:3a:53:75:e6:8c:da:03:e2:97:
13:c9:69:15:0e:da:03:d0:a1:c8:6f:bb:b1:ae:4c:
06:e3:c6:12:19:6b:7a:49:27:73:b1:0f:2d:f0:25:
81:6b:bf:2c:b4:17:ed:b4:a1:65:07:fc:94:08:d1:
44:c9:9d:bf:4f:eb:cf:ca:06:cd:23:84:90:45:fa:
fb:20:41:57:e6:35:e3:37:26:eb:c1:af:aa:10:a7:
d5:7e:32:19:4f:63:ce:15:dd:91:79:ff:f2:ed:24:
3a:49:83:fc:53:89:ac:92:ab:b4:51:20:42:62:bf:
0c:04:56:eb:0d:2b:f0:22:29:45:02:d2:c1:54:24:
3f:4c:2c:ac:08:7d:55:d6:13:44:41:c0:da:b5:c3:
27:26:53:05:05:b8:a1:49:26:ab:8b:35:ec:8b:1e:
e7:b9:61:f0:67:3d:32:77:98:7b:37:b2:b6:9e:bc:
33:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DC:7F:1E:0E:3B:22:8D:0E:F1:ED:83:C7:F4:07:83:AB:F2:6B:25
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/483BA89A036911EE96C26D87C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.238.220.0/22
103.255.100.0/22
Signature Algorithm: sha256WithRSAEncryption
74:69:2f:a5:93:9f:d6:f2:82:5f:4d:15:95:e3:a7:e5:99:0f:
fe:e5:e7:e2:aa:ff:34:de:ca:20:34:4a:8c:2d:e1:97:58:8c:
30:f6:8c:1c:76:85:9d:fd:66:52:c9:ce:d8:19:4e:c3:e3:31:
01:de:77:ca:47:0b:f2:75:be:47:bc:dc:14:41:aa:56:1d:0c:
c8:30:35:e2:00:11:98:e2:12:6c:54:f0:2c:c0:ab:13:95:21:
62:67:84:1f:73:f4:cd:9f:1e:d6:47:98:c0:da:24:9c:6d:c7:
bd:9a:c3:cc:30:e9:a7:c4:f4:20:81:74:97:d1:d6:14:bf:7e:
3e:e8:c3:c3:b0:de:86:45:9d:25:f3:de:25:f2:a7:31:54:28:
05:03:5c:1c:9e:67:f5:47:4e:50:82:a0:05:ab:aa:ed:58:7a:
e7:19:b2:f4:12:4c:fc:ac:77:cc:d0:fd:ac:69:cf:36:b2:d5:
45:a0:0d:8f:35:ec:d4:06:d3:ea:91:29:31:be:b8:7d:98:cb:
6b:89:80:f6:3e:99:c5:03:8d:26:d1:8f:a1:4c:51:a1:0e:81:
65:46:97:af:9c:c5:26:b7:60:d5:f2:4a:96:80:8d:ef:50:1f:
d3:60:aa:e2:97:01:39:0a:dd:b6:60:73:09:08:08:30:08:c6:
ed:92:9b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 06:42:32 2026 by rpki-client