
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/614A9704FA6C11EB8BD15366C4F9AE02.roa
File: 614A9704FA6C11EB8BD15366C4F9AE02.roa (raw, json)
Hash identifier: g0IbTBsrgYK6k6jeQ0zgjsa/wdt7NMsfCC1CHMNk6yI=
Subject key identifier: 26:06:9B:D1:AB:3D:25:E6:74:5A:31:53:87:E8:C7:7B:E1:C8:89:43
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EE77
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/614A9704FA6C11EB8BD15366C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:34:43 +0000
ROA not before: Mon 06 Jul 2026 16:34:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133273
IP address blocks: 103.36.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61047 (0xee77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:34:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd923-fb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:79:b9:d5:b9:bf:7b:ab:17:6f:df:d3:07:b0:
c1:b8:68:ac:31:7b:06:d9:6b:f6:2f:6e:15:fb:7a:
f0:0f:f9:4e:3f:4a:12:cd:38:b4:94:12:24:ff:5b:
00:0b:70:0a:b6:fb:d5:85:1a:f4:d1:5d:32:9d:56:
f6:9c:cc:14:6b:be:0f:ab:e9:fb:67:8e:67:94:80:
e8:53:18:44:4f:e8:cf:60:1a:c3:ad:bf:3b:20:7f:
5e:bc:c8:a4:17:05:91:52:6d:2b:1f:90:b6:73:10:
e6:f1:26:0d:4d:06:9e:9a:9f:37:e7:21:62:9a:50:
71:5f:e9:7c:2b:d1:e0:c4:b9:8a:f5:6c:9f:b5:94:
3a:0f:e0:13:c0:6e:c6:ce:e5:f0:bc:44:68:2f:99:
19:53:33:a2:d8:fe:db:0f:2d:64:79:c7:b6:97:3c:
3b:dc:dc:59:f5:e7:e6:76:27:8a:bb:94:c5:d2:0c:
c3:15:2b:69:ea:de:75:0b:03:b1:bc:67:c4:f1:b5:
c5:8e:a0:87:7a:0d:d5:33:21:77:d4:48:7f:38:80:
af:60:e9:d2:78:44:e1:2a:46:fa:a0:a7:66:48:af:
28:80:a3:09:40:eb:53:1f:04:63:61:45:fb:62:33:
ff:79:dc:d5:0f:dd:c9:52:b2:63:90:f9:cd:df:b1:
26:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:06:9B:D1:AB:3D:25:E6:74:5A:31:53:87:E8:C7:7B:E1:C8:89:43
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/614A9704FA6C11EB8BD15366C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.36.84.0/22
Signature Algorithm: sha256WithRSAEncryption
53:55:c2:e8:04:0a:dd:ab:80:14:9b:38:b3:8e:be:8f:b2:63:
4b:0b:ec:95:10:a2:a7:3c:15:e5:de:87:a3:ee:2c:96:2c:8f:
dc:57:a3:d7:aa:fb:e3:10:94:e5:52:40:21:1f:fa:29:ff:e3:
ea:7d:da:a1:ac:0e:70:81:9a:3d:3b:7c:8b:89:3f:55:fb:31:
64:4a:97:46:65:5d:82:46:6b:7e:98:3b:b9:00:e8:12:8c:80:
f5:f1:a9:1a:e9:45:d9:b4:8e:38:14:ec:17:f7:0c:f6:c9:a1:
3a:85:f0:79:6b:d7:f0:12:56:b1:83:11:04:69:31:7d:44:f5:
3a:4f:64:f8:ad:e9:18:3b:78:78:11:84:f1:28:c1:e8:8f:77:
00:05:3c:ca:56:45:f2:b9:f5:3e:92:0e:8e:c6:23:3e:5c:8f:
41:9e:5d:49:61:48:3c:c8:69:59:b4:c7:ad:5a:94:18:47:53:
3c:34:4b:ed:93:fa:9f:82:85:05:08:17:3e:2d:ff:c1:aa:7d:
e0:5b:6f:8b:ba:f7:cc:0b:45:11:76:40:b8:45:3c:ec:ba:df:
f1:17:eb:84:1d:6e:19:e0:9b:b5:0b:be:e0:15:cb:3a:9f:39:
e1:d6:49:51:c2:19:15:24:de:38:e1:de:a0:33:e0:01:ba:2e:
a9:57:99:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:47:47 2026 by rpki-client