
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4AD21EE26FAB11ED99881F82C4F9AE02.roa
File: 4AD21EE26FAB11ED99881F82C4F9AE02.roa (raw, json)
Hash identifier: X5SdDcOUh4oucum5f4in6x20aQbKq1URmU85ELy6Ta0=
Subject key identifier: 12:D3:0C:28:51:6D:F1:6E:A8:4E:07:AA:3F:D3:F7:C1:5B:E6:B0:57
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F538
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4AD21EE26FAB11ED99881F82C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:31:49 +0000
ROA not before: Mon 06 Jul 2026 17:31:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150043
IP address blocks: 103.172.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62776 (0xf538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:31:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be685-d65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:24:55:8b:05:b0:ee:b4:c2:94:12:67:b2:8e:
8f:91:e2:6b:02:fe:19:8b:83:9c:37:2f:3f:c2:9d:
95:43:4d:da:6a:ba:ec:15:78:6c:25:81:67:0b:3d:
1c:47:59:b4:c2:2b:64:51:22:a3:a6:e7:fa:a1:af:
68:ab:2b:f8:e6:e9:f7:6c:ec:df:1a:f0:85:bb:d7:
14:18:cd:21:22:b3:04:d5:b1:d7:ca:ae:5d:53:0e:
bd:f0:ef:81:a0:07:ac:3f:01:aa:5a:a1:25:43:42:
53:43:cb:13:24:41:16:41:6b:d2:b0:dc:41:bc:76:
35:02:c5:04:3f:30:02:86:43:e0:f6:d6:b0:ff:57:
59:b8:0b:6c:20:83:b5:8b:08:47:c8:5b:cc:9d:f0:
e2:79:28:e8:3a:3c:16:2b:9f:11:fa:a9:73:b9:03:
34:2e:67:0a:dd:ee:58:e0:d9:31:f0:6a:03:2f:b0:
96:d9:81:f3:cb:06:a4:a1:1c:a0:92:f7:0b:05:da:
ad:6b:a4:46:0b:a8:a7:12:b0:9a:b1:5f:cb:d1:e9:
3b:97:47:e8:51:d7:5a:f6:f9:11:12:66:01:63:68:
4d:2a:54:ab:ba:5b:a7:ce:8d:96:1e:4c:db:f0:02:
51:bf:10:1e:26:01:ed:50:71:d0:29:0e:3c:ca:3c:
bb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D3:0C:28:51:6D:F1:6E:A8:4E:07:AA:3F:D3:F7:C1:5B:E6:B0:57
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4AD21EE26FAB11ED99881F82C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.172.97.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:fd:01:57:28:3f:74:68:2c:4c:c5:84:21:01:ad:d6:2f:87:
71:64:9e:e8:3e:23:bd:58:8c:d6:85:3c:18:83:bb:cf:8f:a0:
d4:58:b9:80:8d:09:93:4c:05:ca:d6:7b:c2:dc:08:a2:25:cd:
cc:65:f1:32:7b:bc:47:30:22:59:29:08:d0:e6:af:2b:ad:25:
84:95:61:d1:10:a4:1e:e8:d1:99:19:15:b8:be:f0:9a:91:24:
04:57:c2:bd:8d:e2:59:04:9c:c7:85:8a:6f:b6:41:54:fe:d0:
9a:38:ac:ec:70:65:52:6b:14:b1:28:11:08:c5:28:1e:4c:de:
18:ef:0a:72:8c:81:6e:0d:77:87:1b:14:41:d5:f3:bf:fa:70:
eb:8d:63:6e:1b:40:48:e9:9a:ec:9e:0d:f4:db:5d:8c:0f:04:
b9:b5:d7:cf:c2:d1:08:df:d0:6b:40:a4:a7:48:36:58:98:44:
a8:7c:e3:4f:3d:b6:5f:ad:ff:2a:a0:eb:80:d3:f8:47:d1:bc:
de:48:32:5e:a9:c3:af:f4:37:39:69:a5:db:91:63:c6:15:e2:
d1:e1:a6:6f:c2:e7:84:77:d7:eb:08:86:2a:90:e0:41:a9:4b:
c8:a3:a8:1e:09:d0:22:03:30:24:1c:55:43:52:04:90:b6:3e:
20:26:8c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:28 2026 by rpki-client