
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BCA4E4AB1B811ED8DC4D42EC4F9AE02.roa
File: 6BCA4E4AB1B811ED8DC4D42EC4F9AE02.roa (raw, json)
Hash identifier: blLFKW4K8PvkyTPM8BECI7kfqHnE2rr0/KwllP9iQEE=
Subject key identifier: 74:6C:A6:BB:74:4E:AF:5A:26:34:85:83:0A:FD:5C:4B:28:C1:F6:8B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F1AB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BCA4E4AB1B811ED8DC4D42EC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:01:32 +0000
ROA not before: Mon 06 Jul 2026 17:01:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137672
IP address blocks: 103.116.144.0/24 maxlen: 24
103.116.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61867 (0xf1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:01:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdf6c-698c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:38:db:52:6b:0e:bb:71:6c:33:da:36:7a:49:
91:a6:56:10:14:3a:f4:9b:42:52:08:2f:95:6b:2d:
9c:ac:99:b5:83:c3:4e:7a:23:3e:39:91:7d:16:b4:
5b:54:a6:ae:bb:78:d6:4b:21:e7:71:d1:5b:ff:4d:
56:6b:92:1f:40:26:ff:1d:b3:75:f5:62:6d:03:8b:
bf:44:31:db:7a:96:5a:b7:33:bf:0b:aa:af:a7:79:
66:bd:56:10:7a:73:1f:31:9e:e6:18:fd:b9:e9:6b:
b5:68:5e:bd:c2:a0:07:86:2d:e8:b5:c7:70:5e:43:
71:24:ea:0b:77:7d:3c:3f:39:ff:02:bb:15:55:5c:
e2:23:f5:07:42:e2:79:4c:27:89:51:21:45:06:03:
4c:71:cb:ed:12:21:77:89:dc:53:43:c6:4b:93:fd:
43:b2:41:34:14:b6:e6:01:eb:76:34:0c:63:d7:05:
a4:d9:4e:2f:29:18:c8:68:37:2a:40:e2:bc:22:24:
6a:3e:4d:71:2a:7c:67:f4:9c:ef:22:3d:f6:4f:b0:
fb:f3:24:35:43:29:40:45:89:57:8e:8d:2c:b4:20:
f0:3f:a3:be:db:15:8e:6d:56:4b:7d:32:5a:bc:de:
54:38:41:50:08:df:ea:34:3a:0c:75:5c:55:e9:92:
b4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6C:A6:BB:74:4E:AF:5A:26:34:85:83:0A:FD:5C:4B:28:C1:F6:8B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BCA4E4AB1B811ED8DC4D42EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.116.144.0/23
Signature Algorithm: sha256WithRSAEncryption
05:98:e5:cd:99:52:b7:5d:15:c7:e3:bb:c0:55:73:8f:34:b5:
52:cd:95:03:bf:4c:8f:ad:09:fb:c5:ae:5f:4f:92:f3:a4:c5:
a7:86:68:6c:c1:71:cb:01:07:c0:84:bb:6e:34:d0:41:34:17:
1c:d8:8e:83:6e:a6:c9:d2:f7:c1:03:25:2b:76:96:9b:d4:da:
9d:a0:a2:14:c3:1f:35:58:01:61:5c:46:5e:4d:ab:95:18:22:
40:c2:28:2d:6e:d8:df:44:ae:02:a8:3a:33:bd:47:c9:ca:99:
c7:07:dc:3a:79:37:c8:30:8c:f9:51:a5:15:7c:57:b4:83:98:
0f:19:78:a7:6a:dd:7f:cb:b1:24:01:12:fb:2b:51:d3:41:2d:
3e:d4:06:54:6a:32:ae:76:31:a4:c9:bf:c2:e2:37:e0:fb:85:
ea:5f:99:eb:36:3f:50:20:67:fa:98:03:e5:04:32:13:5e:76:
cb:8a:92:7f:1f:3d:af:74:55:71:2d:c6:31:d0:d6:fa:18:75:
aa:cc:0b:9a:c7:3a:e8:51:b5:48:d8:6e:bf:4b:ee:ec:47:1f:
f5:01:6c:80:99:38:0e:e9:9e:50:9b:26:a0:9c:fe:2a:2d:47:
1e:b5:d5:41:a6:d7:9b:b8:59:f2:b8:05:c6:78:b1:75:4c:5b:
ca:fd:4b:84
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPGrMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MDEzMloXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmRmNmMtNjk4YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANI421JrDrtxbDPaNnpJkaZWEBQ69JtCUggvlWstnKyZtYPDTnojPjmRfRa0
W1Smrrt41ksh53HRW/9NVmuSH0Am/x2zdfVibQOLv0Qx23qWWrczvwuqr6d5Zr1W
EHpzHzGe5hj9uelrtWhevcKgB4Yt6LXHcF5DcSTqC3d9PD85/wK7FVVc4iP1B0Li
eUwniVEhRQYDTHHL7RIhd4ncU0PGS5P9Q7JBNBS25gHrdjQMY9cFpNlOLykYyGg3
KkDivCIkaj5NcSp8Z/Sc7yI99k+w+/MkNUMpQEWJV46NLLQg8D+jvtsVjm1WS30y
WrzeVDhBUAjf6jQ6DHVcVemStFECAwEAAaOCAmAwggJcMB0GA1UdDgQWBBR0bKa7
dE6vWiY0hYMK/VxLKMH2izAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZCQ0E0RTRB
QjFCODExRUQ4REM0RDQyRUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWd0kDANBgkqhkiG9w0BAQsFAAOCAQEABZjlzZlSt10Vx+O7wFVz
jzS1Us2VA79Mj60J+8WuX0+S86TFp4ZobMFxywEHwIS7bjTQQTQXHNiOg26mydL3
wQMlK3aWm9TanaCiFMMfNVgBYVxGXk2rlRgiQMIoLW7Y30SuAqg6M71HycqZxwfc
Onk3yDCM+VGlFXxXtIOYDxl4p2rdf8uxJAES+ytR00EtPtQGVGoyrnYxpMm/wuI3
4PuF6l+Z6zY/UCBn+pgD5QQyE152y4qSfx89r3RVcS3GMdDW+hh1qswLmsc66FG1
SNhuv0vu7Ecf9QFsgJk4DumeUJsmoJz+Ki1HHrXVQabXm7hZ8rgFxnixdUxbyv1L
hA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:45:16 2026 by rpki-client