
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7B451DC2871811EB84EC3663C4F9AE02.roa
File: 7B451DC2871811EB84EC3663C4F9AE02.roa (raw, json)
Hash identifier: kPww1F9ehY3c4DKKyGIYkkXfpFQLxyGSJpBWk672ghk=
Subject key identifier: 9C:01:85:B8:3E:48:AC:54:9E:2D:8B:32:E0:B6:1B:2A:BA:AE:CF:F2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F2E6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7B451DC2871811EB84EC3663C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:11:54 +0000
ROA not before: Mon 06 Jul 2026 17:11:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141273
IP address blocks: 103.160.30.0/23 maxlen: 24
2001:df5:9280::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62182 (0xf2e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:11:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be1da-74bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:fb:f0:70:f7:59:f7:7e:c9:7e:6d:40:40:
b1:61:c0:12:d0:ef:db:21:79:72:de:1b:01:2d:09:
91:e9:5d:98:68:07:e0:15:a3:6c:63:63:3e:d2:7d:
36:b0:0f:d5:73:7e:b5:86:01:a3:68:66:7f:35:49:
f4:03:7b:47:19:d4:1b:eb:4e:fc:b7:09:eb:8a:04:
e6:4e:5b:1a:9b:44:29:f3:ce:0d:52:5f:58:bd:c0:
d2:94:d3:1d:34:16:f0:43:bd:53:7b:ad:d2:c3:14:
4b:37:bf:45:10:78:8c:15:ff:ee:11:43:c0:a9:d8:
73:98:53:7f:32:03:00:47:c8:16:89:2c:61:90:92:
6a:f0:cc:3c:ec:e8:c0:08:0a:1d:4e:7f:e0:a8:7d:
d4:c6:2a:12:c4:61:64:18:bc:6b:e8:c3:1a:e7:0f:
9e:5b:26:83:0b:6e:cd:1d:b2:1a:22:be:33:b1:02:
5c:45:3d:07:bb:1a:3e:db:30:b3:89:e1:da:c4:40:
2d:df:01:cf:64:87:45:84:1a:c0:fa:f8:9f:14:99:
bd:d7:69:c7:e5:65:61:a3:da:fe:67:43:59:ae:60:
2f:d4:b9:60:d9:03:64:8f:1f:08:56:38:10:73:2b:
a6:97:0e:1c:26:97:79:7a:06:92:f6:00:19:05:f5:
43:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:01:85:B8:3E:48:AC:54:9E:2D:8B:32:E0:B6:1B:2A:BA:AE:CF:F2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7B451DC2871811EB84EC3663C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.160.30.0/23
IPv6:
2001:df5:9280::/48
Signature Algorithm: sha256WithRSAEncryption
3b:62:2a:d8:a6:be:27:56:6d:d2:14:7a:0d:8a:60:17:ce:5a:
13:b3:a3:06:b6:6c:93:cb:87:b9:91:1a:b6:fd:a5:6d:5f:5c:
c0:93:02:21:04:2f:d3:e3:1d:34:84:bc:b8:f2:e3:e8:64:6a:
a8:67:26:1a:ff:26:4b:1c:b9:4a:e2:02:60:bc:d4:99:d0:8a:
77:e5:87:93:1f:9e:41:4c:da:d9:4e:19:96:2a:92:a4:99:d5:
86:7f:f2:34:b4:b5:02:58:c0:95:b2:3d:9f:bc:1c:13:5f:52:
9e:e0:46:9f:97:e3:ef:15:02:60:09:24:53:fd:13:f3:d6:6f:
b8:88:88:fa:ee:dc:f9:d1:d5:16:18:b6:e9:bf:a8:fc:4e:fa:
97:a2:fc:a5:d3:31:42:65:4d:d9:b3:e3:2c:dc:84:6e:46:73:
a3:4b:f4:3d:da:80:a3:62:ed:09:14:be:f5:1b:6f:11:0b:cc:
25:cc:b4:27:e4:22:e0:44:87:c0:00:42:39:cd:03:da:a7:1a:
40:22:d7:ef:a4:92:0b:c0:41:61:6e:d0:46:09:5b:77:a2:60:
7c:cf:60:5f:45:74:e0:d4:44:e0:99:78:db:0c:ef:f4:06:b4:
19:92:ce:b9:a6:70:69:6f:08:06:9c:6d:3c:58:ad:02:ed:bc:
30:fb:9d:5a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDAPLmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MTE1NFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmUxZGEtNzRiZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMDi+/Bw91n3fsl+bUBAsWHAEtDv2yF5ct4bAS0JkeldmGgH4BWjbGNjPtJ9
NrAP1XN+tYYBo2hmfzVJ9AN7RxnUG+tO/LcJ64oE5k5bGptEKfPODVJfWL3A0pTT
HTQW8EO9U3ut0sMUSze/RRB4jBX/7hFDwKnYc5hTfzIDAEfIFoksYZCSavDMPOzo
wAgKHU5/4Kh91MYqEsRhZBi8a+jDGucPnlsmgwtuzR2yGiK+M7ECXEU9B7saPtsw
s4nh2sRALd8Bz2SHRYQawPr4nxSZvddpx+VlYaPa/mdDWa5gL9S5YNkDZI8fCFY4
EHMrppcOHCaXeXoGkvYAGQX1QyUCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBScAYW4
PkisVJ4tizLgthsquq7P8jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzdCNDUxREMy
ODcxODExRUI4NEVDMzY2M0M0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAWegHjAPBAIAAjAJAwcAIAEN9ZKAMA0GCSqGSIb3DQEBCwUAA4IB
AQA7YirYpr4nVm3SFHoNimAXzloTs6MGtmyTy4e5kRq2/aVtX1zAkwIhBC/T4x00
hLy48uPoZGqoZyYa/yZLHLlK4gJgvNSZ0Ip35YeTH55BTNrZThmWKpKkmdWGf/I0
tLUCWMCVsj2fvBwTX1Ke4Eafl+PvFQJgCSRT/RPz1m+4iIj67tz50dUWGLbpv6j8
TvqXovyl0zFCZU3Zs+Ms3IRuRnOjS/Q92oCjYu0JFL71G28RC8wlzLQn5CLgRIfA
AEI5zQPapxpAItfvpJILwEFhbtBGCVt3omB8z2BfRXTg1ETgmXjbDO/0BrQZks65
pnBpbwgGnG08WK0C7bww+51a
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:21:00 2026 by rpki-client