
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E38BBD2DEC511EFB1659B18C4F9AE02.roa
File: 4E38BBD2DEC511EFB1659B18C4F9AE02.roa (raw, json)
Hash identifier: syNl55zfrxuV708SvPJW1otKvgSsQObPgHh/YGRmDSA=
Subject key identifier: B0:8F:E2:BB:EC:F4:6C:1F:2D:3A:7F:8F:ED:13:BD:FD:4E:87:5A:FF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EF91
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E38BBD2DEC511EFB1659B18C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:43:54 +0000
ROA not before: Mon 06 Jul 2026 16:43:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134914
IP address blocks: 103.141.240.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61329 (0xef91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:43:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdb4a-8258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:6f:08:64:eb:a1:6b:ca:d5:28:0e:0e:1b:
13:06:1e:83:de:99:68:8a:6b:61:d2:e7:66:2e:7f:
e2:c6:f3:19:8b:48:86:c9:12:a4:de:f9:06:0b:34:
7c:fc:43:eb:79:fc:c2:13:8c:95:fa:6e:a0:4f:a1:
4f:ef:58:2d:be:ff:f2:90:12:70:17:cf:67:d2:ba:
c3:41:27:92:a9:d5:4d:01:0e:64:fe:6c:b4:9b:df:
c4:98:30:81:04:ea:15:0c:c1:d3:9b:0f:81:c0:04:
62:36:16:d3:e8:e0:cc:0c:03:ab:49:d7:5c:4f:53:
9d:7c:a1:2d:c6:cd:6d:68:27:d7:bd:f3:6e:4d:ad:
37:63:13:9a:0b:d9:bc:cc:db:8f:a2:d7:a7:7a:d1:
46:fb:b8:d3:96:05:e4:8b:23:f4:9f:e5:43:c2:3c:
d0:f5:68:41:48:40:d4:09:f4:3a:9e:8c:90:11:ad:
52:89:40:a4:da:40:4d:74:0a:55:09:56:34:76:57:
c7:a6:fa:d6:49:fc:fb:9f:15:e1:15:58:75:02:6d:
ce:37:f3:d1:6c:d0:3f:c2:0b:78:dd:24:e1:22:5c:
47:4c:90:70:5b:63:1a:96:9a:30:45:88:aa:3c:fb:
ce:0e:fa:14:72:af:3b:cd:aa:e5:74:25:fa:af:94:
41:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8F:E2:BB:EC:F4:6C:1F:2D:3A:7F:8F:ED:13:BD:FD:4E:87:5A:FF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E38BBD2DEC511EFB1659B18C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.141.240.0/23
Signature Algorithm: sha256WithRSAEncryption
17:75:2e:e2:27:37:dc:2d:be:6b:30:d7:a1:ca:5b:b9:fd:7e:
48:72:fd:18:16:a4:00:a8:77:eb:ae:c4:98:a3:a6:11:74:15:
c3:42:af:fd:d1:3f:f3:b8:f1:2c:97:13:45:bf:59:b9:3e:ac:
e0:41:2d:cc:ca:d1:e9:54:fa:a6:d4:c3:5c:6e:30:77:a7:24:
2a:1e:37:c2:4a:64:5f:9d:7a:8f:53:4f:f4:86:32:8a:76:7d:
bf:d2:01:1f:a2:12:d4:e8:e7:d5:68:b9:1b:e7:68:78:84:81:
2b:d6:51:b4:47:33:96:d5:e2:4e:c7:e5:e4:50:ef:6d:f8:7c:
e9:ba:b5:83:e6:c7:8c:bb:2b:5d:6a:ce:72:28:6d:a1:5b:e9:
96:9f:73:5d:42:be:4c:70:1d:d5:c6:14:c8:4b:ff:cf:6c:c8:
1d:81:d6:44:00:5b:03:51:fa:46:31:46:f7:58:89:66:07:c9:
fc:99:c6:88:63:21:91:2b:6f:65:f2:5b:73:23:80:15:77:cb:
72:c6:b2:e5:b1:e0:c7:24:00:4c:ce:ce:75:24:1b:f5:c9:29:
25:45:f4:60:f7:0a:fa:f8:1f:99:eb:af:b7:16:ec:17:b6:c0:
4a:45:86:61:2b:44:e0:52:fa:94:93:43:a3:27:71:60:c7:0f:
f0:26:32:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:40 2026 by rpki-client