
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F4C7CF88B2411ECB7E39916C4F9AE02.roa
File: 5F4C7CF88B2411ECB7E39916C4F9AE02.roa (raw, json)
Hash identifier: CErkil8kPJ0nSN87xufsXgNBXmuKbszwqdNvcBoLM88=
Subject key identifier: C8:A2:76:05:3C:8C:6D:94:20:6A:45:33:D7:02:1E:60:6C:0F:E5:69
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EEBE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F4C7CF88B2411ECB7E39916C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:37:03 +0000
ROA not before: Mon 06 Jul 2026 16:37:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133705
IP address blocks: 103.181.51.0/24 maxlen: 24
2001:df0:68c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61118 (0xeebe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:37:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd9af-a85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1c:4a:1f:4d:4e:7d:81:b8:a6:65:61:fe:4c:
c8:99:49:b5:25:0d:cc:15:62:a2:48:9b:80:aa:2c:
51:a5:f3:4a:d6:73:9e:37:38:fe:a6:e8:f1:01:fc:
39:62:19:0f:f6:50:67:5e:2c:f3:17:7a:26:c2:1c:
dd:e5:23:29:03:4c:5c:4e:d9:5c:8d:00:c9:f2:36:
96:72:eb:86:4c:80:2f:5b:54:51:01:8e:10:84:98:
c5:c4:da:e2:00:48:b5:74:f2:11:f8:e0:76:4a:85:
6d:ce:38:16:42:d9:95:ce:1f:9b:00:49:48:53:40:
2f:18:dd:9a:3b:8a:d1:c3:5e:0b:1a:2c:48:08:e8:
8a:00:4f:21:94:db:9f:77:5a:a3:f1:09:fe:bb:40:
13:7e:d8:8c:84:bc:e6:1e:b0:6e:34:bb:a2:bf:59:
ab:9a:25:07:0b:b7:36:35:98:00:05:50:1a:f0:d3:
c3:65:95:a7:4c:ec:12:3f:7a:08:26:5d:17:45:60:
fd:a3:29:22:7a:57:e5:a2:d8:2d:b0:aa:1c:f7:93:
fb:4b:3d:77:9e:1d:95:83:31:01:5f:91:ac:d0:2b:
d4:40:cd:4c:75:ec:08:bc:5b:1b:6f:39:a3:c2:e2:
fe:05:f4:5f:d6:7e:aa:c3:6d:31:c2:d2:1d:b8:5a:
d8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A2:76:05:3C:8C:6D:94:20:6A:45:33:D7:02:1E:60:6C:0F:E5:69
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F4C7CF88B2411ECB7E39916C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.181.51.0/24
IPv6:
2001:df0:68c0::/48
Signature Algorithm: sha256WithRSAEncryption
9f:85:cb:f8:c7:d1:87:a1:9d:3b:3c:a5:3f:83:19:55:25:3d:
08:16:b0:fa:e6:3e:0f:d3:71:57:86:9c:51:4d:26:34:c7:15:
0e:80:e9:bb:9d:2f:e1:34:e4:55:62:51:27:d3:b3:94:9b:11:
0d:5e:42:46:bd:d2:ef:40:7d:de:e1:d2:91:a7:32:08:47:40:
44:80:9d:06:65:c4:aa:13:a9:0f:e5:7a:46:d5:4f:5a:07:8e:
c7:ce:f6:cf:75:73:54:44:c2:72:00:bb:4a:52:e3:0a:b9:cb:
f8:4d:c5:cf:a9:98:c4:c2:db:b9:3e:23:70:73:d5:dd:16:c0:
df:29:56:72:48:80:b3:37:b5:66:2f:15:2b:5d:bb:84:6b:42:
c1:66:d4:94:2b:c2:9b:4f:38:83:3e:c9:d8:58:e7:16:e6:4c:
fc:5d:5b:31:e8:e6:ab:2a:aa:dd:39:dd:ac:3e:c4:3e:a0:f9:
22:31:e8:db:61:15:82:89:5d:52:54:cf:72:c9:39:92:fe:02:
f0:fc:7e:94:1f:42:ed:1e:79:7b:3c:4d:cb:4c:7f:a6:09:5c:
4e:b7:d2:d4:3f:61:e7:61:78:29:01:79:9e:85:33:a6:6b:17:
6e:55:6f:6d:cf:ec:88:f5:c8:5e:96:74:a9:42:6c:ce:68:f6:
4d:90:f6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:16 2026 by rpki-client