
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74D58188A5D211F0A0F46342C4F9AE02.roa
File: 74D58188A5D211F0A0F46342C4F9AE02.roa (raw, json)
Hash identifier: cOmi3gUY+D8eNLvAIJcYPR31mmmJMhQW0OYbWvr/BMk=
Subject key identifier: 3B:05:D4:FD:4E:7D:F9:0E:14:A6:0D:4E:A2:44:D8:F7:69:D3:CD:26
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F0B2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74D58188A5D211F0A0F46342C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:53:17 +0000
ROA not before: Mon 06 Jul 2026 16:53:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136342
IP address blocks: 103.113.228.0/22 maxlen: 24
103.117.64.0/22 maxlen: 24
103.127.184.0/22 maxlen: 24
103.188.48.0/23 maxlen: 24
2400:80a0::/32 maxlen: 32
2405:b740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61618 (0xf0b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:53:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdd7d-5e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:a4:ec:1e:bd:aa:74:f6:9f:d7:38:b6:00:
b2:aa:bc:f3:90:71:22:4b:65:e4:12:ff:2b:0b:aa:
5c:92:4c:84:27:59:bb:75:24:d3:f6:4d:71:bb:b2:
92:90:52:50:da:9c:e0:f1:1c:05:e7:16:51:d6:ff:
ef:0a:65:c1:b8:c1:25:a9:97:72:23:9d:3f:9c:0d:
ef:23:29:6a:35:ee:df:18:13:9f:0b:8a:f1:44:42:
e9:c4:b8:20:df:fb:ac:40:e9:3b:e1:f6:dd:85:86:
4d:26:0a:2a:c1:f5:dd:a0:9b:4d:91:b2:23:b8:38:
53:64:47:ed:fc:ca:82:80:c3:3a:1a:d9:f7:92:28:
1a:fd:24:6c:d2:3c:46:13:7f:69:81:37:ac:0c:64:
9a:50:57:6a:8b:32:4a:7a:f1:db:c8:f5:71:4c:04:
a2:38:52:9a:fa:2a:6d:d8:2b:36:74:86:cb:77:ac:
75:0d:87:f5:2a:a2:63:b8:d2:cf:ce:99:37:98:5a:
90:8d:4c:d4:37:cb:f4:23:47:b0:50:8e:9c:91:70:
10:66:40:f0:6d:9e:41:ea:ba:a7:9e:a8:95:a8:b2:
26:17:10:ec:ea:b0:b9:aa:32:7a:1f:95:ed:7b:77:
ec:05:34:1e:94:05:69:23:48:ac:fc:2d:00:b3:cf:
1e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:05:D4:FD:4E:7D:F9:0E:14:A6:0D:4E:A2:44:D8:F7:69:D3:CD:26
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74D58188A5D211F0A0F46342C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.113.228.0/22
103.117.64.0/22
103.127.184.0/22
103.188.48.0/23
IPv6:
2400:80a0::/32
2405:b740::/32
Signature Algorithm: sha256WithRSAEncryption
25:ee:57:d7:ba:e6:6c:34:8b:6e:64:ff:44:d6:81:56:de:d4:
ff:9d:c3:2e:ea:2b:49:b1:08:2b:2a:8d:dc:e3:50:7e:e0:61:
e1:64:4a:8f:f3:1a:05:94:f2:3b:21:ea:83:aa:b5:d6:0e:ed:
93:0d:5e:5c:2a:a7:d9:f6:57:5b:a8:82:bc:f7:4e:c9:e2:21:
ca:65:23:20:80:14:12:5e:73:56:5a:bb:37:ba:bc:dd:1d:75:
50:e0:c7:d5:33:50:c2:58:98:71:0c:83:8e:29:7d:9a:c1:e3:
13:20:6f:ac:73:c6:03:94:f9:c0:98:db:42:7b:df:26:e0:45:
be:bd:4c:e8:42:bb:65:46:01:1a:62:92:4e:b7:0e:4a:5b:e8:
12:eb:ba:c3:f1:a3:a5:0b:0c:d4:1d:41:55:e5:6c:68:ce:b6:
f4:82:99:3d:07:0c:93:42:de:4b:cc:59:ae:a4:30:ff:18:fc:
51:aa:f5:fb:21:cf:3f:59:81:82:d8:0d:1a:bd:65:13:c9:ef:
26:1c:8c:07:9d:14:2f:73:de:54:5b:ed:13:19:08:dc:e9:95:
9b:81:35:5f:54:90:71:4a:e2:a6:f2:39:52:e1:d8:ad:fe:17:
b6:22:8d:e6:17:ce:0a:ea:74:f7:4c:da:68:e5:28:01:6c:25:
07:a7:60:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:49 2026 by rpki-client