
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4C80A6EE0A1E11EC95C8817EC4F9AE02.roa
File: 4C80A6EE0A1E11EC95C8817EC4F9AE02.roa (raw, json)
Hash identifier: QCjVn+kz360BA6n8cfoD0jJIAd7uOXeGki/fZEVsmjg=
Subject key identifier: B5:FC:79:E7:B0:B2:66:9E:43:69:C6:F2:C9:8C:89:14:63:FA:80:F7
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F3F6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4C80A6EE0A1E11EC95C8817EC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:21:06 +0000
ROA not before: Mon 06 Jul 2026 17:21:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146852
IP address blocks: 103.171.72.0/23 maxlen: 24
2001:df7:3d80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62454 (0xf3f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:21:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be402-c4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:82:2e:b5:76:32:5d:50:1c:9e:cf:af:c6:f2:
ba:96:9b:5d:1d:c8:20:3e:71:b5:a9:c4:27:6f:b7:
7b:e3:13:a7:c4:df:30:35:d6:1e:94:8a:4f:17:e7:
7f:27:5c:31:86:88:7a:e2:4d:45:22:73:57:31:61:
2b:ec:98:86:f6:c1:2e:92:22:64:ff:37:ac:79:b0:
52:fe:65:38:2a:b7:9d:93:49:d9:1a:9c:6d:f4:15:
12:56:cd:67:3d:4b:8e:fb:8a:75:e6:b7:75:f4:a7:
d1:55:cb:47:1c:34:ed:fb:77:6e:51:e6:b4:de:bc:
be:df:47:2d:8c:c6:4d:89:8c:9e:88:19:98:41:3e:
e4:62:8e:d0:62:99:27:34:1f:42:7f:a2:9e:83:7e:
78:df:3e:90:43:eb:3e:ea:1f:9e:ee:9d:80:21:66:
0d:18:04:94:48:6c:0b:3d:01:b3:99:cd:8a:f9:bb:
94:d3:aa:91:b7:7c:7b:72:7c:a8:90:e4:c4:33:92:
c5:97:2a:c8:9c:fd:8e:a3:93:e2:30:6c:44:a2:ed:
ba:7f:e8:30:46:8f:d2:c4:74:a8:a7:84:77:fc:b4:
96:93:a3:c9:e4:c1:f3:21:e8:1b:55:2e:bd:0c:da:
0c:88:b0:e2:97:bd:25:f4:89:f2:29:b5:0b:61:d7:
be:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FC:79:E7:B0:B2:66:9E:43:69:C6:F2:C9:8C:89:14:63:FA:80:F7
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4C80A6EE0A1E11EC95C8817EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.171.72.0/23
IPv6:
2001:df7:3d80::/48
Signature Algorithm: sha256WithRSAEncryption
ae:20:23:a0:75:ce:6b:d1:3a:6b:a7:74:f3:15:5e:f9:46:12:
0a:ad:f9:c0:9c:67:b4:86:7d:97:d9:7a:62:96:ff:f8:ba:1c:
da:9c:cc:9a:cc:dc:96:7c:44:a0:cd:bf:68:ca:3e:fc:31:b6:
20:6a:9a:25:0d:09:1c:50:47:31:3e:88:a9:4d:89:0f:81:8d:
63:f8:41:01:78:51:19:97:0b:43:1f:37:d5:bf:fe:62:9e:0c:
e8:52:98:f4:5f:10:f9:9d:7c:bd:c9:cc:36:f0:f4:76:29:56:
d2:11:28:72:b6:2b:1b:48:66:4e:2e:35:7b:ff:03:e2:91:41:
58:93:18:87:2f:fd:13:a9:26:e6:8f:39:e7:f7:f3:a3:d7:2d:
b9:89:41:d1:82:b7:4a:87:54:db:06:3d:f6:bc:be:b6:c2:23:
0b:1c:0f:bc:0a:22:be:3c:f0:92:cd:e8:2b:6f:18:20:8f:04:
05:3f:97:ad:cd:a6:38:53:d6:d2:0b:41:b0:4a:f0:e2:21:c5:
7e:ab:ab:fa:4d:5d:5b:0e:c8:e9:f8:1e:d6:5f:e6:01:fe:be:
e5:cd:45:fa:da:16:32:e8:99:00:73:8b:c5:cd:b2:5a:35:83:
fe:7c:cc:37:41:94:97:0e:10:6f:29:84:ea:f4:b3:01:be:c7:
2a:34:ff:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:35 2026 by rpki-client