
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/738ED03204F711EE80553644C4F9AE02.roa
File: 738ED03204F711EE80553644C4F9AE02.roa (raw, json)
Hash identifier: ejSB+ZL1n+mHGMZq/sSd9qqhO1KzIq+bX4uPzrUWCZk=
Subject key identifier: 0D:72:BD:DE:ED:04:AE:28:01:EE:A3:F8:A8:92:19:EB:14:9D:F3:32
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F518
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/738ED03204F711EE80553644C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:30:38 +0000
ROA not before: Mon 06 Jul 2026 17:30:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149621
IP address blocks: 103.145.36.0/23 maxlen: 24
103.195.244.0/22 maxlen: 24
2001:df7:c80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62744 (0xf518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:30:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be63e-4677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:89:47:69:4d:32:e9:14:df:19:6f:29:00:82:
7a:70:85:f5:8e:1f:54:d4:e3:88:df:92:b6:0e:a4:
6a:ae:d4:f9:3e:69:9b:c4:c9:a0:70:54:a0:97:78:
21:7f:7d:5a:42:78:0c:d4:ff:df:79:af:c0:b6:8b:
7d:82:6a:bf:00:4b:a0:0a:8b:6d:22:d3:f7:05:f5:
ed:13:76:9f:66:e0:69:5a:76:72:0e:1f:fb:7f:82:
c5:bf:b0:94:bd:09:7c:06:ab:a9:38:61:5e:70:4e:
f6:d6:53:d2:98:7e:e0:40:a9:e1:0a:7b:b0:85:0c:
d0:ba:3f:ba:96:c1:aa:f4:5b:5b:a7:91:1a:a4:49:
74:27:79:e1:f4:b6:86:30:ff:87:a4:6f:94:a1:2f:
e6:40:10:12:33:b4:08:fe:57:93:dd:30:2e:bc:a5:
36:91:db:dd:ca:d7:fe:88:7f:69:a7:bf:0a:7f:87:
63:18:34:b9:0f:00:3e:1a:76:6e:24:34:23:c4:d7:
0a:da:6a:e3:8e:54:52:d2:6a:b9:14:0a:57:c4:b1:
e0:13:f5:36:99:10:0a:a5:7a:9b:84:42:be:59:c9:
5c:7e:47:b7:9d:2a:e5:92:cc:55:28:66:50:56:ab:
49:f9:94:b6:62:37:12:d1:b2:5e:4b:5e:f8:dc:e6:
5a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:72:BD:DE:ED:04:AE:28:01:EE:A3:F8:A8:92:19:EB:14:9D:F3:32
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/738ED03204F711EE80553644C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.145.36.0/23
103.195.244.0/22
IPv6:
2001:df7:c80::/48
Signature Algorithm: sha256WithRSAEncryption
07:bd:2d:15:87:a5:c7:3a:7a:5a:45:ef:cd:1d:bf:48:8f:04:
ca:90:e2:97:98:e1:75:e3:6e:87:18:9b:9c:17:40:d0:95:a1:
fa:34:17:86:ea:db:41:76:e7:9d:5c:01:3b:52:2d:47:c1:31:
b8:4d:e3:33:ed:86:df:49:fb:89:e9:f9:08:c7:08:a8:5f:e6:
8b:91:ed:50:68:06:5c:68:57:c7:59:4d:6d:53:81:69:8b:29:
ed:92:67:28:39:93:b0:7a:8e:60:e9:a7:4d:73:53:1f:b3:8e:
3d:12:e2:da:f8:a3:aa:85:b3:19:80:66:34:fb:2b:24:26:4e:
b5:23:1e:e4:9f:09:a9:65:da:b7:60:63:3c:f8:3f:1f:17:b5:
20:94:ab:52:c9:80:9e:fc:b2:f5:df:85:bb:d6:23:7a:17:ad:
d4:63:b2:8c:22:42:a0:00:f4:87:61:b6:c7:1c:44:ef:39:1b:
da:c3:25:db:d2:9c:99:a1:f4:64:75:cb:53:3a:e5:24:48:65:
64:35:2f:68:1f:7e:27:a6:05:5d:d8:c6:d6:4d:f2:35:b6:4e:
5a:22:57:41:ad:b2:ea:35:8c:76:88:70:1c:ef:b5:2f:05:34:
94:b2:4d:ea:e6:70:88:14:9c:25:63:d4:6b:22:af:f3:d9:cb:
fa:e5:ce:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:33 2026 by rpki-client