
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66D80248391911EB9D612545C4F9AE02.roa
File: 66D80248391911EB9D612545C4F9AE02.roa (raw, json)
Hash identifier: GhH/Z5uRrqxBJDnG1xPK+wA7OVOHgpWI9QTQbkXS0ig=
Subject key identifier: B8:78:55:53:7E:A7:97:18:9E:BA:51:DF:5B:03:A1:DC:3B:F9:C9:EB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F2E3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66D80248391911EB9D612545C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:11:49 +0000
ROA not before: Mon 06 Jul 2026 17:11:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141270
IP address blocks: 103.159.214.0/24 maxlen: 24
2001:df5:8980::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62179 (0xf2e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:11:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be1d5-b8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:b7:50:74:7c:29:46:0e:ae:8e:0d:9a:e6:
57:f3:e3:0b:ca:e8:03:76:69:50:14:98:bb:14:a3:
16:53:aa:6a:7b:46:91:28:20:4e:ea:79:78:65:3e:
cb:89:7a:e1:e1:62:ba:9a:f2:6e:b3:42:81:a7:cc:
96:1e:0c:60:ef:c2:59:25:be:0a:42:5e:a3:2b:4c:
ed:1e:3c:62:5a:00:09:fe:c7:f9:58:65:6e:26:f1:
7f:d2:b5:46:db:3a:25:84:35:b4:89:12:d3:b6:cc:
ec:fe:72:fe:55:c6:ca:cf:fb:d6:23:b1:d6:07:0e:
42:1e:54:31:24:ff:e2:98:53:ef:24:2e:68:81:30:
1c:e0:71:10:da:88:19:ab:3c:0e:69:ff:32:64:f0:
4c:b6:7c:24:bb:3e:e4:b5:98:5b:5b:44:8c:a2:8c:
37:6b:29:ef:95:e3:11:43:9f:e0:39:66:ed:5d:eb:
65:ff:c9:e7:57:22:54:8e:2c:02:03:14:45:09:4d:
05:b6:4c:e3:8a:ec:f4:63:29:29:34:43:80:9e:15:
ce:7c:22:5b:0e:d7:b5:2e:27:86:14:88:4f:ff:8d:
db:33:8b:95:30:af:a1:f6:c0:54:02:24:b9:7e:fb:
b1:43:a8:f1:f7:4d:c1:2d:27:19:17:09:4f:ca:b2:
c6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:78:55:53:7E:A7:97:18:9E:BA:51:DF:5B:03:A1:DC:3B:F9:C9:EB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66D80248391911EB9D612545C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.159.214.0/24
IPv6:
2001:df5:8980::/48
Signature Algorithm: sha256WithRSAEncryption
6d:1b:65:a8:97:eb:b3:30:aa:fc:7f:82:de:dc:ce:a9:4d:6c:
c5:a8:a5:23:ed:7c:b9:2b:32:d6:e8:df:8c:97:02:1a:c9:bf:
df:30:c9:6a:43:ae:e4:5a:7e:53:7d:37:eb:72:50:3f:59:18:
e0:d9:ae:dd:f1:0d:31:06:59:b8:fd:8e:da:42:88:1b:d0:be:
37:a8:60:9f:3c:a5:f5:7f:dd:1a:f1:a7:72:ac:26:6a:f0:c3:
5b:0a:f6:0f:c0:30:0b:a7:fb:43:8f:db:1a:90:d4:c3:bf:5d:
1c:95:28:a6:01:f8:57:17:6f:2a:f8:81:bc:a9:64:17:5c:7d:
b5:5d:2c:80:32:fc:d2:54:ff:97:2b:d6:5d:40:02:07:2d:2d:
43:79:3f:7a:51:f7:24:e0:6e:da:01:1b:c3:3f:d3:63:b5:38:
09:3e:6d:d2:ea:9e:9c:e1:2c:c5:78:22:52:f5:68:70:78:2d:
f7:76:13:1c:1b:40:a7:4e:eb:43:59:e2:68:93:c5:bb:c8:0b:
f4:63:f4:61:b7:89:2d:7a:56:c2:b8:d3:3e:95:f2:e8:e6:c7:
ce:fc:c8:7d:55:81:e7:79:96:68:51:86:ea:b4:c3:e5:ec:0f:
c2:18:cb:2c:68:80:d9:b0:42:42:e1:58:29:21:e0:f8:a6:2c:
28:06:2e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:55:43 2026 by rpki-client