
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/693EEC340FB711ECA0E62853C4F9AE02.roa
File: 693EEC340FB711ECA0E62853C4F9AE02.roa (raw, json)
Hash identifier: YKnEGXKYEmF/4+qlKPupWt+c27o6sx2B7p626ck2dSM=
Subject key identifier: 56:D7:06:D2:A8:A9:F9:8E:86:A7:92:36:F9:A5:EB:FC:45:5E:BC:C3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F3ED
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/693EEC340FB711ECA0E62853C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:20:48 +0000
ROA not before: Mon 06 Jul 2026 17:20:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142533
IP address blocks: 103.169.250.0/24 maxlen: 24
103.169.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62445 (0xf3ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:20:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be3f0-653e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:90:a6:be:ea:3c:43:57:a2:13:20:a1:75:03:
26:34:eb:21:43:5f:2a:b2:b7:83:2d:8a:75:0a:c9:
0a:8f:7b:f9:21:9a:d1:be:7b:e1:96:b0:a4:6b:19:
f4:42:9a:32:aa:73:16:67:0b:c0:22:b8:bf:fb:c5:
65:2d:88:e8:33:27:c4:e3:88:54:c6:d2:81:68:b9:
85:83:bc:4a:23:a7:c7:d1:94:3d:9e:cc:11:c5:5a:
03:87:a3:45:ee:9d:64:ed:45:31:81:cc:e1:b7:18:
e3:55:7f:fb:0d:53:30:dd:d9:cd:0a:b4:05:c8:f0:
f1:23:ce:51:cd:9d:65:b7:73:45:da:23:17:9d:66:
af:cd:a9:30:c9:f2:9d:87:a2:b5:79:19:bf:e2:08:
9a:a1:f4:13:05:e6:45:d2:73:51:3f:87:22:05:ec:
a8:89:5d:90:5a:95:bd:e9:a3:61:61:06:8f:00:71:
92:0d:85:d2:f7:52:31:a3:af:57:03:bb:da:00:62:
24:71:50:7f:10:83:7a:86:e7:30:dc:fe:db:23:7e:
35:e5:b1:a9:cd:42:cc:ca:e6:59:54:94:cd:15:80:
3a:f9:42:a6:de:3c:22:a3:0f:d7:e2:63:ca:7c:89:
91:c7:84:a2:d2:12:d2:74:c5:1a:b4:28:ba:63:69:
14:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D7:06:D2:A8:A9:F9:8E:86:A7:92:36:F9:A5:EB:FC:45:5E:BC:C3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/693EEC340FB711ECA0E62853C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.169.250.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:0e:d6:91:33:d0:07:46:a3:2c:cb:a4:52:07:0a:5f:0e:b2:
5d:99:bf:3b:d2:4f:51:8b:83:e3:f9:74:db:ae:b5:2f:26:72:
d7:d4:57:a9:f0:25:08:31:0c:1d:e7:9e:65:93:cf:05:f3:f9:
55:4c:81:4e:20:02:2c:7a:3b:9d:e1:ea:42:c9:1b:00:ca:30:
0e:7d:cb:60:d2:d2:41:da:0f:22:20:7d:91:7a:fe:1a:43:bb:
4b:47:ab:91:4d:f3:c2:3d:d8:d3:2e:3f:63:a7:3b:9e:7b:f9:
77:b4:60:ee:dc:75:51:07:0c:e6:67:a0:73:4f:35:75:90:01:
77:cd:4b:26:fa:3d:20:d6:d0:fd:f5:02:38:13:9a:b0:39:d2:
73:ca:e2:c2:e9:28:3f:55:de:5d:c4:6e:18:ae:fa:da:20:5a:
65:98:ad:7e:86:fe:4f:46:e2:19:49:d0:25:6d:fa:ca:21:7f:
62:7d:73:49:32:6e:31:b3:95:8b:ca:c1:30:9e:21:e8:8b:46:
46:b3:b8:f6:89:6b:ac:20:71:b1:69:61:2b:c0:af:68:36:a7:
ed:54:a1:dd:09:d2:a7:c8:9a:83:f2:14:81:05:3d:ed:04:ad:
e5:52:bf:a5:4b:29:7c:d1:24:e4:96:da:4f:dd:64:a9:59:0b:
e9:c5:37:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:41 2026 by rpki-client