
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A325C8E8C7411EBAD97854FC4F9AE02.roa
File: 4A325C8E8C7411EBAD97854FC4F9AE02.roa (raw, json)
Hash identifier: A9j+5TqAULJYeHnjlU6QgvETk+/zzeRtYccdRzReTYU=
Subject key identifier: 3A:A4:81:51:DF:C1:03:D6:10:25:4A:7E:31:D9:4E:1A:30:FD:A0:07
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F219
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A325C8E8C7411EBAD97854FC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:05:04 +0000
ROA not before: Mon 06 Jul 2026 17:05:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138756
IP address blocks: 103.140.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61977 (0xf219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:05:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be03f-65c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e0:ba:da:94:ed:ed:f7:94:12:7a:a3:9b:ce:
33:43:0a:12:16:c2:a0:d2:a2:7c:54:d1:42:9d:dc:
e5:f2:a0:4f:ca:38:90:f8:1f:1d:a7:5f:50:0d:15:
15:81:82:b1:82:d9:d7:3f:af:b8:0c:5b:5c:30:16:
a0:7e:34:49:6e:39:3d:aa:b5:30:ab:e5:77:26:f5:
a6:ad:2b:a9:d8:fa:75:46:83:8f:cf:ce:2b:9c:d4:
c0:d7:3a:67:ff:aa:dc:e8:88:d4:b0:f8:4a:26:bb:
46:da:63:cb:05:f3:9a:e1:08:73:ee:61:ca:c5:7a:
99:76:23:35:0f:cf:97:0c:2e:c3:ba:e8:55:48:0b:
8f:7e:e6:36:af:04:75:b4:b9:eb:4a:63:50:e9:27:
45:48:60:5f:10:f7:c0:d9:e3:8b:dd:f7:25:da:c2:
bd:60:6c:1b:d0:29:5d:d5:de:44:6d:a5:12:9c:fe:
f0:11:9f:fc:6a:ab:58:3d:2d:82:fe:cc:a1:e8:26:
31:fd:09:5e:66:8c:42:cf:4a:44:79:de:31:8f:e9:
d4:47:e4:f3:2a:fd:44:56:5c:1d:c7:b1:0b:12:e9:
7d:3d:5c:49:4c:01:bc:c9:ff:2d:d5:9f:05:dd:fa:
65:51:b1:37:cb:19:76:2a:7a:a9:9a:b9:ad:5f:ab:
74:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A4:81:51:DF:C1:03:D6:10:25:4A:7E:31:D9:4E:1A:30:FD:A0:07
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A325C8E8C7411EBAD97854FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.140.50.0/23
Signature Algorithm: sha256WithRSAEncryption
18:57:fa:b1:0e:23:fe:cb:a2:63:de:e3:d0:e5:fd:f7:5e:16:
ac:8b:c8:13:5e:5f:8c:c1:47:62:d6:be:30:7e:bd:db:17:09:
0b:a2:91:55:f4:e1:f3:bc:69:75:42:c4:b4:61:cf:14:06:82:
77:22:f1:4f:75:5f:c4:9b:a4:60:9e:58:91:84:e2:1b:61:d4:
78:ac:2c:be:3b:a9:e2:f7:7a:55:dc:6e:78:1a:0b:63:78:a0:
88:3f:e1:32:14:bd:11:98:33:b7:5f:72:8b:cc:5f:8a:69:6a:
13:a6:5e:60:5c:a5:d9:36:d4:b1:76:ba:98:29:e0:c4:d5:2b:
09:84:cb:fc:24:32:82:85:d0:e4:c4:5d:5c:a9:6e:31:00:9e:
c8:11:3d:88:61:28:bf:0a:25:a4:0b:a1:36:6a:fa:df:94:40:
49:a0:0c:14:fc:a3:f1:d5:d6:f2:07:53:a6:20:de:01:ab:ee:
e7:1c:e5:c3:51:21:46:bc:71:4f:3d:25:12:95:29:a6:87:0d:
02:83:96:b6:a9:42:1c:64:6e:d0:a2:9b:3a:5b:5b:cf:ba:e5:
25:1a:9e:b3:ac:fd:a6:f6:df:15:bd:ae:d2:86:b7:0b:9a:25:
f1:2c:9d:22:22:4d:22:3a:95:86:1d:21:cc:3b:38:be:08:74:
0d:05:db:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:07 2026 by rpki-client