
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5BF0F516674111EE9B4C9139C4F9AE02.roa
File: 5BF0F516674111EE9B4C9139C4F9AE02.roa (raw, json)
Hash identifier: SaIDySRLQVBR8yXMpQnYrRLjnDB9LoboTZL4BKK0YIA=
Subject key identifier: F3:4E:21:9D:D0:B2:3F:F0:7C:76:F3:B8:81:57:03:BA:EA:69:F2:6D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F638
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5BF0F516674111EE9B4C9139C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:40:06 +0000
ROA not before: Mon 06 Jul 2026 17:40:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151765
IP address blocks: 103.75.80.0/24 maxlen: 24
103.75.81.0/24 maxlen: 24
2001:df2:ebc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63032 (0xf638)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:40:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be876-cb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c2:4f:37:33:3a:b4:85:85:d5:22:10:ef:92:
4d:75:ff:8f:89:fb:df:84:2d:3c:a3:b1:c5:45:d1:
9e:1e:47:3b:98:fa:a9:22:7f:80:85:de:ee:75:6d:
55:c3:e3:c9:7e:1b:9f:af:32:53:e6:25:9d:f4:5d:
a4:38:e0:cb:d8:e2:46:aa:0f:ea:fb:f0:f6:55:cb:
4d:c8:be:44:74:0b:b4:45:55:b2:87:2b:f6:10:50:
e7:05:cd:52:27:ce:03:62:d8:ff:fc:36:da:6f:7d:
2b:eb:0b:42:4f:57:53:d0:9b:2e:b5:63:b9:b7:f9:
f7:4a:ec:08:59:40:85:78:cc:de:27:cf:a7:87:ea:
73:09:d9:73:e9:b2:71:92:de:51:d5:e5:fd:52:cb:
78:56:47:23:ec:00:0e:76:e8:18:47:df:21:b5:aa:
c9:de:b8:bc:72:f3:ff:95:79:da:c9:17:fe:a2:2b:
08:6a:c9:e5:00:41:a3:25:1a:c1:42:44:4f:74:f4:
32:66:55:18:a3:99:bc:9f:70:de:63:f8:bd:b6:cc:
11:05:0c:78:55:b4:18:bf:dc:60:3d:27:ba:08:62:
6b:32:69:94:b4:4e:2a:37:f2:4f:9a:90:51:79:58:
e2:cc:9d:c2:17:87:62:6f:fa:9e:19:32:54:7d:8a:
19:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4E:21:9D:D0:B2:3F:F0:7C:76:F3:B8:81:57:03:BA:EA:69:F2:6D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5BF0F516674111EE9B4C9139C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.75.80.0/23
IPv6:
2001:df2:ebc0::/48
Signature Algorithm: sha256WithRSAEncryption
17:fe:e6:fa:4a:74:05:71:6f:e3:d6:6e:2e:bf:70:f8:dc:2a:
4e:0a:69:20:80:47:49:8d:43:fd:d3:c8:4c:33:86:c5:f6:ea:
a2:09:09:29:93:22:42:49:27:e4:0f:e3:49:ed:c5:ec:99:69:
ae:55:8a:4b:08:41:a9:78:ea:08:91:ad:bb:74:40:b9:7f:40:
65:64:b9:23:d2:af:fe:39:0b:6e:a2:1c:5b:3d:97:07:4f:12:
02:4e:52:1a:cc:d4:d7:5e:d8:9e:43:a1:71:41:f0:16:11:b8:
08:b1:e5:8e:35:6d:6f:89:d7:97:31:ea:74:a5:69:93:6a:db:
83:a5:c4:83:0a:ba:c4:3f:df:bd:73:9b:23:1e:8c:65:68:85:
53:19:33:b9:d3:33:1b:4c:4b:97:04:aa:a0:bf:66:83:3b:63:
2e:b1:bf:74:e1:c8:a1:02:28:30:1f:41:37:d5:89:b9:71:6b:
d5:bb:f7:dd:4b:81:ec:a4:73:8f:b7:0a:55:12:c4:15:55:96:
97:5c:5a:36:70:bb:bc:46:5c:62:46:fc:52:b5:61:76:74:e7:
9b:05:44:17:c4:b8:ca:10:7e:78:67:a1:25:ee:90:3c:fe:67:
8b:e0:c3:a0:39:f4:a2:51:f9:b3:e1:ed:21:1b:8c:f2:7f:cd:
d3:88:64:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:47:46 2026 by rpki-client