
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/65E8AC8C6C6511F0B904CA3AC4F9AE02.roa
File: 65E8AC8C6C6511F0B904CA3AC4F9AE02.roa (raw, json)
Hash identifier: 77rEQQ0+vhvuuPDBd3JYLOGq0r6K8/RMB9rj1dGVjd8=
Subject key identifier: B9:39:6E:3F:F8:BF:C6:60:8B:97:D3:2A:E9:82:3D:1B:EA:94:FB:97
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F200
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/65E8AC8C6C6511F0B904CA3AC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:04:16 +0000
ROA not before: Mon 06 Jul 2026 17:04:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138716
IP address blocks: 103.161.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61952 (0xf200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:04:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be00f-30dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:39:b3:66:46:f2:6d:cf:24:a4:32:4a:bc:8c:
81:a3:c8:62:cf:4f:a8:62:79:1f:5e:13:12:f3:93:
9f:e3:02:eb:28:ce:07:18:f8:79:93:82:16:81:b0:
be:4d:2d:01:c0:8b:85:72:1c:b5:c1:7a:16:9c:f2:
77:a9:fc:64:2d:66:06:a4:76:5c:5c:6d:e3:63:0a:
81:20:47:2e:c3:84:a6:59:90:77:49:eb:ac:48:d6:
63:6e:46:6a:4d:40:5e:c8:de:1a:89:a3:3b:c1:38:
08:71:78:38:06:c5:00:13:f0:06:ed:8d:6a:8f:cf:
1a:41:f0:34:53:08:eb:07:32:ee:c0:6e:50:92:f7:
c8:79:12:96:74:2c:e7:eb:10:47:2d:81:64:00:ac:
26:15:f4:5e:bb:b1:cd:d9:ca:8c:4a:b9:f4:bd:1b:
49:3a:e4:fc:39:82:c2:f1:b5:8c:2b:3c:74:3e:b8:
05:1c:bb:7d:57:e4:b4:63:5a:d1:1e:ce:68:d5:8c:
6e:1f:c1:39:61:68:d3:05:79:c3:08:5e:6b:8b:b9:
c8:b7:c3:ab:6e:d0:6e:88:ef:b8:e4:19:bc:5b:b6:
93:c6:f7:ae:1e:d9:52:8f:67:b5:5b:44:56:78:48:
ea:e5:54:5a:92:29:f0:02:3d:d9:ba:c9:e6:d9:dc:
1c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:39:6E:3F:F8:BF:C6:60:8B:97:D3:2A:E9:82:3D:1B:EA:94:FB:97
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/65E8AC8C6C6511F0B904CA3AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.161.26.0/23
Signature Algorithm: sha256WithRSAEncryption
70:7b:a9:2e:01:08:c2:56:3b:80:97:a7:4f:47:e8:a8:3b:a6:
48:9f:cc:71:69:3e:ed:33:74:51:21:60:31:b0:8b:fc:61:bf:
37:2b:11:9b:9c:2e:fd:b9:b0:b9:26:74:18:8f:61:01:62:89:
89:bb:24:4a:f9:25:71:07:8f:ab:ef:6a:4d:87:fb:1a:8c:b1:
e2:fb:21:6b:c4:7a:c7:d9:8d:f8:9b:f5:e4:1c:cc:d4:fb:74:
f1:72:9c:d0:d9:7a:07:45:d0:3c:95:85:f7:bd:34:b6:d1:3c:
e5:24:3f:77:b4:02:21:ec:fd:7e:0c:79:cd:28:3e:17:56:c5:
96:e2:3d:45:90:49:d8:32:d2:dc:a0:d0:54:89:3a:62:c6:da:
1a:91:28:8d:a1:4c:9e:3f:95:ea:58:90:a5:57:73:cd:3c:01:
88:ef:6e:75:7f:cd:4b:a1:07:7e:36:d5:49:b4:a8:d7:36:53:
1b:05:3e:b2:e9:24:1e:b5:cd:3c:d8:ad:52:61:98:40:55:0a:
af:fa:ba:04:4e:6f:fc:46:56:d1:65:54:7b:b6:ff:3e:92:bb:
ab:09:49:b9:f6:ce:ca:5e:f7:65:d3:81:a2:aa:cf:8c:a0:da:
e2:1c:27:d1:95:19:4b:6c:75:c0:70:73:4a:b6:2a:3d:13:38:
4a:99:55:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:01 2026 by rpki-client