
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C09F55C458F11EEABAEF868C4F9AE02.roa
File: 6C09F55C458F11EEABAEF868C4F9AE02.roa (raw, json)
Hash identifier: qqtDw6K/ecM18cTaUpdguNT545d7Ae4He8BVuYwMx6Q=
Subject key identifier: FA:B2:23:4A:90:02:0F:89:DE:DC:ED:7C:F9:9A:E0:07:3E:D9:F4:D6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F31A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C09F55C458F11EEABAEF868C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:13:39 +0000
ROA not before: Mon 06 Jul 2026 17:13:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141486
IP address blocks: 103.162.124.0/23 maxlen: 24
2407:18c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62234 (0xf31a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:13:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be243-dd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f2:66:00:79:d9:cd:b5:ac:7d:98:a4:c1:d7:
3d:a9:bf:ef:5e:60:6b:a3:bb:ce:8c:11:3d:b9:0f:
96:6a:f4:65:6b:f5:31:f2:8a:56:54:22:36:68:64:
37:8e:92:5f:3d:5a:ff:f5:a3:60:bb:f3:c7:00:e4:
4d:34:9b:49:30:89:82:ea:ca:53:6b:33:90:55:8b:
0d:9c:24:95:98:ad:44:ad:28:c4:04:2d:11:66:fe:
e7:2f:27:da:2a:52:f5:28:a9:6e:26:30:0c:1c:0e:
c6:71:40:47:65:16:ca:37:e8:03:f3:28:8a:73:85:
a8:27:41:a4:13:d0:86:19:6d:37:28:74:78:6e:cc:
b0:2f:60:34:26:ca:67:d9:2c:2c:9f:ab:36:f4:a7:
f6:ca:5a:7a:4c:14:13:95:e3:e3:92:57:e6:72:92:
94:d9:44:5c:67:50:f7:96:76:3a:d2:fb:d2:8e:cb:
4b:4c:10:82:d3:e5:19:c9:af:9a:a5:98:44:db:3e:
3e:44:73:f5:db:85:5a:f0:b4:a5:da:ab:f8:19:41:
a1:a4:bb:5b:8d:04:ce:f0:c3:1b:cf:33:ef:69:a1:
82:ea:8b:3f:73:ba:3b:f6:25:47:01:f7:36:f0:dc:
c6:cb:ee:8a:3f:fb:ce:1e:fc:e6:81:ed:63:8e:65:
c5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B2:23:4A:90:02:0F:89:DE:DC:ED:7C:F9:9A:E0:07:3E:D9:F4:D6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C09F55C458F11EEABAEF868C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.162.124.0/23
IPv6:
2407:18c0::/32
Signature Algorithm: sha256WithRSAEncryption
97:d0:e6:69:fd:03:6c:bb:36:12:6f:4c:7e:a2:5a:5f:b4:52:
b7:aa:04:cf:a1:23:c7:9d:63:b7:99:4e:5d:f0:91:13:93:1d:
b5:6a:13:70:bf:cc:a3:63:c8:5a:d3:65:15:e6:40:f9:7c:2e:
b8:0b:65:e6:7b:6c:ed:11:fe:e3:87:30:78:d5:d0:f7:1c:64:
6d:38:bf:76:f3:f2:b4:11:e1:02:df:96:21:b9:cf:f6:65:a1:
0e:cd:75:5c:db:1c:33:1e:3e:4e:04:3c:f4:b5:99:cb:2a:54:
03:63:bd:44:9d:e4:dc:fc:33:3b:36:63:f6:38:28:25:27:ab:
52:c9:02:55:24:f7:5b:35:46:34:a6:b3:7d:d4:f8:d4:83:8d:
ca:f7:7d:73:dd:fc:b2:ab:af:4c:73:fd:25:a8:7b:2b:b1:32:
4a:5d:2c:be:b6:98:8c:6d:7c:9f:e6:9a:a9:5d:df:dd:cb:0d:
0b:13:65:41:93:4d:75:7e:86:2c:f1:6c:26:9a:d3:c5:1c:f5:
63:71:e1:4d:ca:28:06:bd:46:76:70:4b:12:d4:36:54:0a:7f:
96:9a:a0:3c:5a:cf:33:f1:b3:86:5b:1c:da:ca:8a:13:2b:f4:
a8:17:39:95:29:77:11:cd:3e:ff:c2:bf:78:e0:2f:f0:20:82:
bd:7c:ab:48
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDAPMaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MTMzOVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmUyNDMtZGQ3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANfyZgB52c21rH2YpMHXPam/715ga6O7zowRPbkPlmr0ZWv1MfKKVlQiNmhk
N46SXz1a//WjYLvzxwDkTTSbSTCJgurKU2szkFWLDZwklZitRK0oxAQtEWb+5y8n
2ipS9SipbiYwDBwOxnFAR2UWyjfoA/MoinOFqCdBpBPQhhltNyh0eG7MsC9gNCbK
Z9ksLJ+rNvSn9spaekwUE5Xj45JX5nKSlNlEXGdQ95Z2OtL70o7LS0wQgtPlGcmv
mqWYRNs+PkRz9duFWvC0pdqr+BlBoaS7W40EzvDDG88z72mhguqLP3O6O/YlRwH3
NvDcxsvuij/7zh785oHtY45lxesCAwEAAaOCAm8wggJrMB0GA1UdDgQWBBT6siNK
kAIPid7c7Xz5muAHPtn01jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZDMDlGNTVD
NDU4RjExRUVBQkFFRjg2OEM0RjlBRTAyLnJvYTAuBggrBgEFBQcBBwEB/wQfMB0w
DAQCAAEwBgMEAWeifDANBAIAAjAHAwUAJAcYwDANBgkqhkiG9w0BAQsFAAOCAQEA
l9Dmaf0DbLs2Em9MfqJaX7RSt6oEz6Ejx51jt5lOXfCRE5MdtWoTcL/Mo2PIWtNl
FeZA+XwuuAtl5nts7RH+44cweNXQ9xxkbTi/dvPytBHhAt+WIbnP9mWhDs11XNsc
Mx4+TgQ89LWZyypUA2O9RJ3k3PwzOzZj9jgoJSerUskCVST3WzVGNKazfdT41ION
yvd9c938squvTHP9Jah7K7EySl0svraYjG18n+aaqV3f3csNCxNlQZNNdX6GLPFs
JprTxRz1Y3HhTcooBr1GdnBLEtQ2VAp/lpqgPFrPM/Gzhlsc2sqKEyv0qBc5lSl3
Ec0+/8K/eOAv8CCCvXyrSA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:21:18 2026 by rpki-client