
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4FDA156C9ECC11ECBC33EB0CC4F9AE02.roa
File: 4FDA156C9ECC11ECBC33EB0CC4F9AE02.roa (raw, json)
Hash identifier: 9UBttFM6f+ODmDOqlTYDD8ZjSNFSErq6gicj+Py62x0=
Subject key identifier: EB:5B:25:8B:90:EB:63:DB:F1:1A:AC:08:CD:D6:8D:46:99:B5:A5:08
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F4CA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4FDA156C9ECC11ECBC33EB0CC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:28:08 +0000
ROA not before: Mon 06 Jul 2026 17:28:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149525
IP address blocks: 103.182.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62666 (0xf4ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:28:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be5a7-a25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:7f:9c:09:79:67:d9:5d:a0:ba:f5:7c:44:
3c:f5:8c:60:d9:42:21:ed:f7:a8:36:2c:40:72:e8:
ba:cc:d2:68:cd:fb:28:8b:df:5e:cb:a8:53:03:da:
70:51:0c:e9:39:d4:d1:99:29:03:b9:30:91:db:06:
26:0d:a3:6a:ca:e5:c4:a5:16:79:0a:f1:ec:d3:12:
61:f9:b3:12:5a:59:25:91:ce:a5:d5:86:cd:56:08:
cc:83:3c:15:75:b2:81:14:e0:05:46:5f:33:d9:2b:
d8:ea:3a:d2:fb:c5:e4:eb:ae:98:1f:d4:8b:1c:36:
e5:0d:62:ce:47:35:7f:9b:67:a8:da:28:c6:4b:2c:
a8:b1:b4:7e:a1:c8:55:67:57:bf:e4:2f:45:bc:9c:
80:da:d7:5b:d9:f6:0c:fd:26:64:ff:07:0c:25:50:
22:b7:c8:49:34:dc:9d:d9:3d:df:dc:20:28:1b:f8:
f5:bc:bc:98:69:a0:a7:e3:70:02:6a:b5:b1:fb:d8:
48:1d:87:61:15:8c:fd:78:b9:e0:f5:9a:ac:da:5a:
26:f8:ef:1f:17:3e:0b:4b:c5:90:11:ed:ad:6f:94:
ea:8b:78:d4:7d:c8:a8:1e:2c:e7:7a:29:ac:98:2a:
ae:5f:d5:79:36:d2:6b:4c:80:0a:0a:77:28:ad:30:
4b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5B:25:8B:90:EB:63:DB:F1:1A:AC:08:CD:D6:8D:46:99:B5:A5:08
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4FDA156C9ECC11ECBC33EB0CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.182.220.0/23
Signature Algorithm: sha256WithRSAEncryption
83:c2:bb:77:76:bf:ed:26:88:30:5c:41:ff:b8:30:62:68:bd:
ac:c3:01:af:82:73:6b:a9:e0:f0:71:2d:4d:2a:11:ee:88:aa:
a7:86:50:98:fd:eb:d8:68:7b:4a:a1:e4:12:4c:15:2a:28:23:
08:7e:8d:8a:00:a4:42:47:3a:51:9f:be:48:f3:15:ab:58:e2:
1d:a4:07:44:00:9c:1b:17:b7:e5:a6:1a:33:60:f4:1e:cb:e6:
a1:98:3e:d0:51:46:96:01:a8:ed:33:b4:82:30:91:c4:a8:8a:
f4:b8:c7:df:c5:f6:1b:1b:b7:7c:c9:44:28:b3:36:0d:a4:03:
5a:9d:59:5f:44:46:86:2a:b0:f2:de:0a:a7:73:b1:76:5a:a3:
50:8c:f5:3c:08:53:9b:04:77:94:99:65:31:dc:cb:d3:d9:17:
51:2d:39:c3:3a:45:b6:55:9d:7c:74:b7:a8:a7:2f:47:cd:b4:
b4:4d:95:37:99:5f:17:c0:a5:28:20:c6:aa:d1:fa:9d:fb:26:
dc:32:a9:a3:98:9e:4e:3a:2f:b9:17:fd:2a:96:b2:71:d1:1f:
5a:00:13:a1:bb:d7:ee:e8:e6:57:79:d2:e4:2d:b1:e9:5d:31:
bf:86:a1:bf:2b:66:28:5e:ed:90:da:58:13:0e:d4:5d:a7:34:
68:c8:4a:71
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPTKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MjgwOFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmU1YTctYTI1YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALF0f5wJeWfZXaC69XxEPPWMYNlCIe33qDYsQHLouszSaM37KIvfXsuoUwPa
cFEM6TnU0ZkpA7kwkdsGJg2jasrlxKUWeQrx7NMSYfmzElpZJZHOpdWGzVYIzIM8
FXWygRTgBUZfM9kr2Oo60vvF5OuumB/Uixw25Q1izkc1f5tnqNooxkssqLG0fqHI
VWdXv+QvRbycgNrXW9n2DP0mZP8HDCVQIrfISTTcndk939wgKBv49by8mGmgp+Nw
Amq1sfvYSB2HYRWM/Xi54PWarNpaJvjvHxc+C0vFkBHtrW+U6ot41H3IqB4s53op
rJgqrl/VeTbSa0yACgp3KK0wS/MCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTrWyWL
kOtj2/EarAjN1o1GmbWlCDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzRGREExNTZD
OUVDQzExRUNCQzMzRUIwQ0M0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWe23DANBgkqhkiG9w0BAQsFAAOCAQEAg8K7d3a/7SaIMFxB/7gw
Ymi9rMMBr4Jza6ng8HEtTSoR7oiqp4ZQmP3r2Gh7SqHkEkwVKigjCH6NigCkQkc6
UZ++SPMVq1jiHaQHRACcGxe35aYaM2D0HsvmoZg+0FFGlgGo7TO0gjCRxKiK9LjH
38X2Gxu3fMlEKLM2DaQDWp1ZX0RGhiqw8t4Kp3OxdlqjUIz1PAhTmwR3lJllMdzL
09kXUS05wzpFtlWdfHS3qKcvR820tE2VN5lfF8ClKCDGqtH6nfsm3DKpo5ieTjov
uRf9KpaycdEfWgATobvX7ujmV3nS5C2x6V0xv4ahvytmKF7tkNpYEw7UXac0aMhK
cQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:46:13 2026 by rpki-client