
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/732F297C151E11ECA422CD83C4F9AE02.roa
File: 732F297C151E11ECA422CD83C4F9AE02.roa (raw, json)
Hash identifier: 1WVLH2HnJ/GxnFfFy9lpJKzmwn0x4j9mmVTzdq/NPIQ=
Subject key identifier: 69:7A:A9:E5:6A:51:3F:44:53:C7:40:26:93:40:B0:6B:04:EE:76:BB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F40E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/732F297C151E11ECA422CD83C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:21:55 +0000
ROA not before: Mon 06 Jul 2026 17:21:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146890
IP address blocks: 103.173.20.0/23 maxlen: 24
2001:df1:cb40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62478 (0xf40e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:21:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be432-cd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:ff:c1:d6:76:59:9a:1a:ae:13:74:55:ef:
90:8b:7b:bb:36:7b:28:ed:6a:90:a9:33:32:32:fa:
ba:10:69:3b:d6:8b:2b:fa:d8:3e:42:00:bf:ad:fc:
74:92:53:2b:49:5b:95:1c:16:52:7f:78:1b:90:fd:
26:76:a4:6a:be:0a:a5:9b:b4:94:ce:7a:0a:d0:1e:
6e:1c:db:00:f5:35:60:e3:dc:9d:f5:e5:aa:5e:8e:
0b:87:f5:e1:fe:9e:a5:d9:0c:58:47:03:1d:f0:21:
7f:32:ab:ee:a9:db:69:96:bc:27:07:aa:02:4b:60:
8e:17:c4:09:13:d1:a9:ee:64:98:dd:8c:13:ef:2e:
8d:b9:4c:cf:74:58:f2:2c:2c:b0:79:b2:f6:55:65:
05:e6:38:12:f2:3e:e8:93:f4:47:90:c3:2e:8a:a1:
5e:fb:b0:6d:fa:a5:46:a9:96:16:a5:2f:1a:2f:41:
2d:5c:4d:54:63:2d:51:f0:d8:d7:1b:dd:63:8f:f8:
79:9e:29:15:3f:6c:6c:fc:bc:43:6f:79:7c:4e:97:
bb:3a:e5:d8:db:97:cf:c6:0b:4a:ba:04:65:fb:fe:
32:0b:23:b5:21:2e:27:82:f5:41:5d:a0:3a:76:c2:
aa:2d:65:5b:91:62:c4:68:e5:97:fa:a8:32:00:9f:
61:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7A:A9:E5:6A:51:3F:44:53:C7:40:26:93:40:B0:6B:04:EE:76:BB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/732F297C151E11ECA422CD83C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.173.20.0/23
IPv6:
2001:df1:cb40::/48
Signature Algorithm: sha256WithRSAEncryption
47:73:8c:68:33:1b:08:03:43:04:e3:89:3d:27:98:9f:c9:99:
20:e4:04:22:a0:df:d9:8a:cc:e5:28:9d:69:43:e0:fb:37:09:
68:bf:4b:a7:9a:3c:bd:8a:a6:c7:4e:8d:7f:43:54:bb:8b:de:
6f:41:a4:e5:17:a3:10:04:17:b1:25:df:8d:4c:57:98:c4:d0:
1b:f0:e4:e2:6b:c2:a6:ea:26:3b:d0:a4:61:26:70:96:d8:c2:
c4:7a:30:9d:ab:e5:fc:4f:f1:bd:e4:d3:f7:de:52:82:0c:c5:
71:e0:54:48:22:d6:24:d2:4d:27:9e:88:d3:8f:9b:5d:1c:16:
40:43:a9:be:6d:83:5c:c2:e5:36:d6:fc:f0:89:06:92:d1:6a:
b1:45:28:23:a1:49:3c:b6:e1:50:db:eb:df:e2:54:55:d0:e7:
2e:ff:ab:9e:a1:db:df:d6:42:b1:83:4a:fb:de:f1:ce:e6:21:
a8:23:5f:10:cd:ce:41:0d:0f:f4:dc:f4:14:41:13:6f:80:f9:
f0:22:af:c2:e7:a5:33:55:8a:b8:cd:72:e5:55:0c:ae:9e:f1:
58:d5:67:64:61:bd:8c:e9:84:41:17:72:f9:66:d8:cd:9f:95:
63:87:ed:06:86:29:12:54:5c:3d:76:9b:69:51:0a:f4:87:d2:
a2:50:6b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:56 2026 by rpki-client