
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52BAA0CEBDCF11EA8755D90DC4F9AE02.roa
File: 52BAA0CEBDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier: GHA3haxUhH9MTQS6/geZnr6eZIzUljF58OBYwnUtl3k=
Subject key identifier: DE:B6:7A:98:DA:4D:5E:AF:46:92:CD:D9:CF:63:7A:16:5A:B9:5A:15
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EECF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52BAA0CEBDCF11EA8755D90DC4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:37:36 +0000
ROA not before: Mon 06 Jul 2026 16:37:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133725
IP address blocks: 103.142.16.0/23 maxlen: 24
2001:df1:2780::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61135 (0xeecf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:37:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd9d0-8df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cb:3d:83:e5:4d:eb:ea:48:1b:b5:23:b6:1d:
cd:ba:8a:a2:bf:dc:da:80:43:f5:81:40:1b:b6:b8:
b8:38:3e:56:71:3f:c9:e0:3c:e6:39:a2:31:ac:37:
86:04:54:ae:8b:2b:12:64:3a:36:ae:de:ee:dd:f8:
3f:92:3a:8d:39:a0:b3:41:2b:f1:57:81:16:ec:cd:
1a:de:c8:1e:d1:87:69:b1:42:ca:3e:51:ca:e4:5d:
ff:4f:8b:60:e3:8e:e5:aa:91:4d:ed:f7:1e:6d:58:
38:2a:7c:a2:5e:28:d3:62:95:d5:e4:f5:7e:bc:c4:
d9:34:d0:6e:b0:8f:d9:76:70:fe:b0:74:c7:ba:51:
6a:d2:0c:e9:db:39:bd:4c:17:14:d0:dc:27:61:86:
bc:84:5c:98:c3:ed:73:b5:bb:21:65:65:12:86:f2:
35:44:c3:5f:ca:a0:bb:45:e5:98:35:69:66:20:d0:
89:28:c4:8e:e7:61:3f:b0:fc:85:19:e4:b3:ea:d7:
4a:c5:3c:63:4c:77:78:b4:09:4f:39:7f:9a:5b:62:
8b:27:5b:b3:ea:bd:97:bf:7a:d6:c3:d3:0c:82:c6:
66:55:ee:2a:39:cc:05:fa:11:8d:9b:fd:f8:69:ca:
29:42:9c:e6:94:f8:62:d7:aa:e6:45:75:f7:f1:95:
84:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B6:7A:98:DA:4D:5E:AF:46:92:CD:D9:CF:63:7A:16:5A:B9:5A:15
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52BAA0CEBDCF11EA8755D90DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.142.16.0/23
IPv6:
2001:df1:2780::/48
Signature Algorithm: sha256WithRSAEncryption
70:04:7e:30:7b:29:cc:29:20:f3:35:51:88:6c:1b:90:81:80:
74:91:85:b0:32:a9:8e:cb:d5:26:08:b6:48:91:15:9e:e7:e9:
e4:4e:ff:02:fc:d1:4c:08:fb:cf:09:53:5e:07:e5:87:3b:e6:
c0:4b:d7:a1:e1:27:9e:dd:0e:5d:b0:47:2f:79:8d:e4:b4:ea:
01:c2:56:14:67:27:0d:10:50:f5:6a:b9:42:34:06:a1:59:08:
af:30:7d:95:a7:c1:e4:3d:3a:0e:aa:66:ee:ae:d1:45:37:e6:
18:9e:de:f0:3a:21:26:8d:ac:92:2f:d6:b8:7a:08:da:59:2d:
10:40:8d:81:7a:54:ee:7b:83:7f:6f:88:fc:70:b8:a0:55:6c:
a8:f7:12:01:80:c0:3a:00:0a:20:2b:85:1c:e7:73:9f:c5:0c:
87:dd:d6:db:90:57:5b:76:7e:8a:81:cd:f5:15:c5:51:f9:aa:
88:9c:a7:13:0d:43:48:9a:b6:c0:c5:5c:52:e9:b2:53:dc:94:
77:a1:7f:06:62:70:5c:ce:7c:e5:fb:2b:a5:6a:47:fc:86:47:
24:42:b7:fc:2d:d4:bf:fb:4f:77:11:5b:6b:5d:11:cd:05:5a:
3e:eb:8b:6a:31:06:eb:9f:eb:1f:c1:44:63:3b:6b:4c:82:37:
d4:55:e4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:29 2026 by rpki-client