
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A69F2B8A81211EB88AC7830C4F9AE02.roa
File: 7A69F2B8A81211EB88AC7830C4F9AE02.roa (raw, json)
Hash identifier: cgB+DZHR8OU2dBWFLDJA6Dh4dn+EqtHhxc2uw/p1PPA=
Subject key identifier: AA:30:06:4A:7E:89:C9:C1:2A:2C:96:26:3D:F6:04:88:20:3F:4E:ED
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E736
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A69F2B8A81211EB88AC7830C4F9AE02.roa
Signing time: Sun 31 May 2026 17:17:00 +0000
ROA not before: Sun 31 May 2026 17:17:00 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 141565
IP address blocks: 103.162.206.0/23 maxlen: 24
2001:df0:65c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59190 (0xe736)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:17:00 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6d0c-692e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:11:77:52:6f:4f:95:30:b8:9c:20:78:b8:59:
a4:9c:f7:92:28:6e:97:94:21:d1:13:62:73:14:38:
b0:c0:a8:28:87:4e:3b:ec:56:fa:0b:a3:df:e2:91:
9a:08:52:04:bf:bf:a5:05:5e:72:23:76:0e:9f:16:
0d:57:56:aa:53:95:4d:1f:d4:de:e6:62:3f:cf:1b:
00:b4:62:f7:0e:3d:0f:64:8e:e4:6f:30:c1:20:4a:
c5:95:f5:72:24:cc:76:d0:4c:34:6c:f9:f9:31:17:
27:b4:10:79:ca:c7:72:65:38:fd:1a:d3:fa:5f:66:
9d:70:e6:2d:83:09:e7:99:b1:d8:90:b7:5f:98:a9:
89:38:0c:eb:90:46:04:55:09:f2:8d:03:80:c4:af:
80:7c:a7:6f:a5:55:b6:d9:31:f3:e7:88:e2:66:65:
5e:ae:1d:71:41:bd:8d:5f:a8:7e:75:f4:c9:aa:fb:
0c:70:83:98:e0:0e:cf:01:d9:ec:61:72:e5:68:83:
f9:06:2c:26:e1:9c:24:99:21:aa:98:84:63:2c:a8:
e9:f9:79:06:c2:d0:79:db:f9:f4:e8:73:d7:fa:70:
76:72:09:97:2a:cb:e9:ad:51:3b:17:dd:fa:fd:57:
d6:3b:44:95:b3:7d:c0:bd:20:43:5d:4e:ac:37:a7:
3d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:30:06:4A:7E:89:C9:C1:2A:2C:96:26:3D:F6:04:88:20:3F:4E:ED
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A69F2B8A81211EB88AC7830C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.162.206.0/23
IPv6:
2001:df0:65c0::/48
Signature Algorithm: sha256WithRSAEncryption
8c:09:ad:9a:01:f4:5b:4c:8d:e0:d2:11:98:1a:94:64:c8:2a:
22:53:c5:12:ab:19:53:81:f1:69:ea:b8:f9:74:57:a8:79:16:
72:59:b5:eb:32:ca:cf:f8:f9:30:f5:bd:63:97:24:5e:e3:8b:
02:de:26:ff:61:71:60:1d:6a:f7:ae:79:fc:38:ba:81:2d:3f:
d3:e5:ff:6c:7c:e7:a7:1d:c9:f2:3b:02:01:90:36:52:af:34:
df:2e:68:1b:eb:39:0b:81:e2:af:f4:aa:19:f1:78:6c:a3:6e:
f9:09:da:65:ab:ca:95:6c:c7:d6:1b:bd:ce:60:76:b8:d8:59:
db:56:91:82:0d:a4:d9:24:f7:4f:f1:98:92:57:8f:8e:f3:1a:
7b:bf:e8:83:2c:f6:73:4c:d5:e4:33:92:14:cc:a4:b4:e7:fd:
f8:bc:a2:fd:e7:c1:b1:b2:af:be:de:e1:3e:2b:b6:ca:ec:a7:
7c:68:88:e9:d5:a7:a2:58:cb:df:f7:91:88:ec:6a:9e:e3:1d:
58:ad:1e:2f:27:81:43:11:9c:22:32:87:7b:ad:b8:20:ad:1a:
08:a6:c8:32:2c:69:95:4d:c5:8f:61:6b:e8:6d:cb:15:e3:ad:
f4:41:05:e9:52:07:c9:93:d4:35:ba:c1:e5:04:e5:67:b6:d4:
b8:cc:13:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:21 2026 by rpki-client