
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7494BE70EEAF11EB9FF10D4FC4F9AE02.roa
File: 7494BE70EEAF11EB9FF10D4FC4F9AE02.roa (raw, json)
Hash identifier: eBH8ta03ny6Fwd0IMDvdp1PmO1Yj0FIx1p/yqzIVCdA=
Subject key identifier: E1:20:6B:43:37:91:6A:07:7B:E8:86:68:97:56:F8:0C:0F:D0:49:26
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F3D8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7494BE70EEAF11EB9FF10D4FC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:20:06 +0000
ROA not before: Mon 06 Jul 2026 17:20:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142504
IP address blocks: 103.170.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62424 (0xf3d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:20:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be3c6-bccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:0a:2e:89:1c:a6:2c:d0:6e:c8:8b:84:65:
9c:c7:3a:e4:ec:78:c8:f6:10:f7:b3:ee:49:90:73:
46:3d:9a:d4:0e:54:bd:2f:f2:51:89:94:af:1a:75:
37:73:d6:72:5a:85:5c:a0:27:9a:ef:6d:dd:fb:39:
e5:ec:33:f1:d8:20:40:b6:64:65:f7:e2:2a:a3:ba:
18:86:89:03:62:b1:df:c7:46:89:7c:86:76:6f:14:
9f:cb:f8:fa:a6:66:cd:40:53:50:04:5b:d7:20:45:
53:40:88:7c:6f:f2:9e:37:78:59:05:d7:33:40:7c:
dc:c6:4c:cf:60:cf:af:57:0f:0d:73:fc:56:ab:0f:
e1:3a:82:66:38:46:f6:ca:07:cd:70:6f:a4:a5:1f:
13:6b:09:64:ba:dc:41:c6:ac:e4:0e:3b:f0:f3:4a:
85:78:f3:e0:3c:20:54:da:f5:ab:87:d7:eb:84:66:
f1:5d:ab:a9:28:e9:62:4b:e1:c8:77:c5:c6:bf:38:
69:5f:b4:01:84:10:61:24:3e:b8:60:6f:bd:5d:1c:
f5:e2:0c:ed:03:19:c6:af:ce:1c:a7:79:b4:68:e8:
59:bb:68:7d:46:9a:cc:95:81:22:64:4b:40:8e:8d:
79:2d:45:c8:b1:ac:b8:39:74:2a:10:cb:c7:14:82:
64:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:20:6B:43:37:91:6A:07:7B:E8:86:68:97:56:F8:0C:0F:D0:49:26
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7494BE70EEAF11EB9FF10D4FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.170.40.0/24
Signature Algorithm: sha256WithRSAEncryption
25:b7:9b:5e:14:ec:eb:98:8e:82:3d:2b:81:82:2b:57:33:c0:
f5:ca:40:8c:56:22:3e:00:a9:a0:ae:c1:28:a6:89:22:b7:36:
d1:e1:ba:46:5c:67:53:8c:b1:88:62:28:b3:4f:f9:78:a5:ef:
e7:7d:59:7d:bc:3a:35:cc:70:20:4a:ae:45:e0:ec:bb:ff:f9:
60:2a:b5:80:84:7c:b0:89:6b:7e:ea:e4:b9:f6:48:ae:93:5f:
f9:a8:44:ab:f1:53:76:12:3c:a1:11:8d:68:a8:35:58:0e:76:
32:cc:22:05:9c:83:c6:0f:ac:c0:92:e7:b4:37:69:e0:06:0b:
16:a3:3e:9f:8f:52:14:d7:03:f5:22:1c:98:b3:cc:8c:4a:3a:
e5:ef:57:81:d0:44:9a:54:c2:c2:27:2d:5c:9f:63:66:4f:f4:
cd:b1:58:e9:e0:19:31:ba:f4:e3:f9:e5:20:c7:e3:77:d9:a6:
83:26:92:ef:14:18:6e:27:09:dd:72:57:5a:9e:c8:56:1f:8c:
25:10:d1:2a:21:51:c7:0d:d0:5c:a4:ae:7f:e8:b2:3c:37:1d:
67:60:3a:57:6f:f6:b2:95:49:ee:e1:85:a7:37:fa:01:83:c8:
14:48:64:00:6d:6b:a6:66:b5:5a:a4:14:8e:78:0a:43:71:31:
65:d3:e5:1b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPPYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MjAwNloXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmUzYzYtYmNjYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMYTCi6JHKYs0G7Ii4RlnMc65Ox4yPYQ97PuSZBzRj2a1A5UvS/yUYmUrxp1
N3PWclqFXKAnmu9t3fs55ewz8dggQLZkZffiKqO6GIaJA2Kx38dGiXyGdm8Un8v4
+qZmzUBTUARb1yBFU0CIfG/ynjd4WQXXM0B83MZMz2DPr1cPDXP8VqsP4TqCZjhG
9soHzXBvpKUfE2sJZLrcQcas5A478PNKhXjz4DwgVNr1q4fX64Rm8V2rqSjpYkvh
yHfFxr84aV+0AYQQYSQ+uGBvvV0c9eIM7QMZxq/OHKd5tGjoWbtofUaazJWBImRL
QI6NeS1FyLGsuDl0KhDLxxSCZNUCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBThIGtD
N5FqB3vohmiXVvgMD9BJJjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzc0OTRCRTcw
RUVBRjExRUI5RkYxMEQ0RkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGeqKDANBgkqhkiG9w0BAQsFAAOCAQEAJbebXhTs65iOgj0rgYIr
VzPA9cpAjFYiPgCpoK7BKKaJIrc20eG6RlxnU4yxiGIos0/5eKXv531Zfbw6Ncxw
IEquReDsu//5YCq1gIR8sIlrfurkufZIrpNf+ahEq/FTdhI8oRGNaKg1WA52Mswi
BZyDxg+swJLntDdp4AYLFqM+n49SFNcD9SIcmLPMjEo65e9XgdBEmlTCwictXJ9j
Zk/0zbFY6eAZMbr04/nlIMfjd9mmgyaS7xQYbicJ3XJXWp7IVh+MJRDRKiFRxw3Q
XKSuf+iyPDcdZ2A6V2/2spVJ7uGFpzf6AYPIFEhkAG1rpma1WqQUjngKQ3ExZdPl
Gw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:47 2026 by rpki-client