
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/570677B8625411ECB5151412C4F9AE02.roa
File: 570677B8625411ECB5151412C4F9AE02.roa (raw, json)
Hash identifier: p+N7CdmcvfxcnHDdZj85VTXAvUNluXCO/eFdv+3qoL8=
Subject key identifier: 35:97:26:89:AF:4E:72:07:E0:0C:86:F9:43:89:1C:E2:73:CB:98:BE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F0CE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/570677B8625411ECB5151412C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:54:08 +0000
ROA not before: Mon 06 Jul 2026 16:54:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136625
IP address blocks: 103.98.156.0/22 maxlen: 24
103.177.31.0/24 maxlen: 24
2401:27a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61646 (0xf0ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:54:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bddb0-4451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:25:1c:82:bb:bf:7d:59:54:09:63:d7:df:6c:
16:4e:94:07:6a:c2:ae:bc:cd:b2:5e:ef:c7:31:a4:
3e:0b:01:4c:58:1d:01:60:56:cb:66:42:20:c4:54:
b0:4b:b3:1b:f5:71:a5:27:a4:4b:5e:d0:59:5f:ef:
b3:8f:19:81:5b:01:ea:08:4c:de:21:7b:78:8b:e8:
1f:8d:57:27:87:a1:7f:28:aa:39:fc:2d:f9:ca:76:
01:a7:87:67:ff:e5:4b:2c:a0:d1:dc:6a:09:ae:72:
c1:9b:e6:1c:10:1d:1b:85:dd:c4:2c:e1:a5:6f:7c:
19:b6:f4:e8:b0:15:79:b7:67:40:c3:ab:c8:8e:d5:
15:b4:f1:d6:8b:71:2d:12:12:07:22:6d:87:5d:26:
3e:ab:b0:e8:ff:4e:52:d5:cc:f7:21:d8:20:5d:4a:
8f:b2:ac:ac:13:b6:43:ea:0c:0c:4a:2d:eb:50:70:
35:93:52:11:53:bc:f9:79:9f:9d:83:45:37:8d:2f:
ca:4d:dd:3d:82:82:ea:ac:02:3f:48:fa:3b:e9:35:
20:29:69:8d:6f:e8:b1:90:2d:fc:7c:7e:54:ee:c3:
aa:9d:ed:9e:98:17:ae:d8:f2:05:3f:cc:bc:b8:89:
87:e1:db:51:b1:83:55:81:c9:8f:30:8a:fe:d2:ae:
3e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:97:26:89:AF:4E:72:07:E0:0C:86:F9:43:89:1C:E2:73:CB:98:BE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/570677B8625411ECB5151412C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.98.156.0/22
103.177.31.0/24
IPv6:
2401:27a0::/32
Signature Algorithm: sha256WithRSAEncryption
4e:85:c9:c1:2c:a5:ff:70:b1:dc:12:28:0c:d7:a7:2e:34:fe:
c2:6d:3f:47:c3:75:26:06:73:e5:05:11:8d:77:a9:84:15:fa:
04:e5:f4:ee:7a:ba:d1:79:11:59:b1:f1:9c:e3:3e:40:55:5c:
19:32:df:c3:d7:67:a0:81:40:56:1e:3f:4e:62:1e:c6:3e:df:
bf:11:24:71:51:6f:b7:a9:56:4f:8c:7b:4c:67:2b:dd:7f:4a:
98:77:80:6b:97:84:a4:1b:8a:05:52:b6:01:6f:fc:93:27:bb:
c2:a8:86:d5:bb:1d:19:0d:84:50:fe:f4:e2:c5:80:61:ce:55:
94:e5:32:20:ff:ea:aa:db:6e:ee:d6:ed:d2:f1:b7:1e:c2:94:
64:dc:b2:8a:e1:14:a6:89:de:89:be:e4:5e:1a:e4:1e:93:d7:
ad:08:fe:bc:09:31:fd:e7:a3:61:45:cb:5d:28:37:6d:a5:5b:
cd:1e:94:3d:a1:ee:15:32:ee:70:c9:59:fb:4e:08:38:d6:37:
5f:db:d9:85:48:e1:47:7d:c8:25:3a:86:87:6e:e8:a4:01:e6:
a0:44:d3:4d:34:43:77:74:63:bf:7e:fa:b0:19:25:75:65:f4:
5b:77:48:63:19:1a:26:eb:93:51:a2:04:bc:f3:1f:15:07:9e:
7a:c3:e8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:48:18 2026 by rpki-client