
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7C4E795AF4E911EFA9F2FD1CC4F9AE02.roa
File: 7C4E795AF4E911EFA9F2FD1CC4F9AE02.roa (raw, json)
Hash identifier: LIZoAwVyDMnTRK8IPzgo/n/Nsq4f/5kVMmYDIwXeg6E=
Subject key identifier: 84:B7:6C:28:E4:2E:E8:9A:D9:75:92:3D:6E:2A:65:58:A7:37:CC:80
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F444
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7C4E795AF4E911EFA9F2FD1CC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:23:49 +0000
ROA not before: Mon 06 Jul 2026 17:23:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147212
IP address blocks: 103.97.244.0/23 maxlen: 24
2400:e060::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62532 (0xf444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:23:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be4a5-6e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:f7:ba:8d:38:16:3d:b7:3f:37:39:30:1e:
56:ff:78:d5:f8:7e:9e:b6:e7:61:86:b8:d0:b0:6e:
39:59:4b:af:1d:86:88:36:30:86:c5:8c:a8:76:e3:
99:3c:d9:7c:fe:5a:b5:f9:a0:b9:fb:61:d2:af:35:
3c:a2:6f:94:90:c6:ad:30:51:03:67:58:be:19:71:
29:8f:a4:63:a1:5a:e2:1a:0b:30:9c:1c:97:a1:63:
36:56:df:a8:4b:cd:01:41:72:79:5b:f6:18:27:87:
63:fc:af:b6:24:f2:91:0b:82:bf:2f:69:41:3c:7d:
1b:0a:0b:70:1a:0b:95:6a:82:d2:aa:b2:44:c8:d3:
47:21:93:e0:fb:9d:7b:a0:37:68:09:5b:37:63:3f:
b8:84:83:63:77:84:4b:71:fd:a6:7e:53:a1:88:6b:
5c:5c:9c:af:08:9c:6b:43:83:9d:70:64:ab:32:b6:
b7:c6:bf:09:4c:f5:2f:0a:f8:44:f0:5d:84:8c:40:
aa:d8:16:af:ed:8b:b9:18:1e:43:44:43:b5:d4:b4:
3c:d2:cd:84:70:dd:8a:1c:19:7e:02:56:6c:8e:42:
9b:ba:b7:56:fe:f8:d4:3d:9d:43:fb:6c:8e:6c:54:
30:5d:a0:f0:21:3d:0d:06:cf:15:be:7f:5a:ca:70:
ec:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B7:6C:28:E4:2E:E8:9A:D9:75:92:3D:6E:2A:65:58:A7:37:CC:80
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7C4E795AF4E911EFA9F2FD1CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.97.244.0/23
IPv6:
2400:e060::/32
Signature Algorithm: sha256WithRSAEncryption
30:e8:c5:13:88:b5:59:ae:96:89:d4:6c:28:d7:06:d0:e0:31:
cf:3c:27:4e:b5:c5:13:6f:7d:76:40:23:aa:bd:3e:d1:5a:e2:
b7:ca:42:cd:40:c5:be:f2:1b:ee:ca:a9:8b:08:79:45:ad:fe:
06:50:81:42:39:05:b5:51:c3:74:dc:11:c1:64:3c:5c:68:87:
42:df:7a:7d:9f:dc:6f:a0:6a:5c:ed:85:97:f4:45:3c:d2:f0:
01:a1:0f:d5:e6:5b:38:38:cd:0d:e3:f0:cd:3f:a7:4f:d4:3e:
26:00:3a:d9:07:a1:bd:e9:ac:42:07:b6:fb:c4:81:4a:70:36:
12:34:d9:f4:4b:2e:73:7a:52:05:e1:47:34:cc:ff:6f:bc:71:
6f:1b:45:3b:d4:9c:32:8d:63:51:da:50:08:fd:9c:31:c5:88:
6f:fb:50:e6:eb:39:85:8b:41:f7:5d:8d:d8:fa:11:e2:39:e6:
fe:0d:83:ba:94:a3:2b:42:34:eb:6f:73:a3:62:90:d3:98:dd:
57:4f:4e:01:c8:7e:16:59:6a:97:fb:b4:2a:fd:8f:d9:11:ac:
3f:e9:b6:84:91:ff:8e:05:de:8a:cb:c4:40:6c:57:48:5f:f7:
6e:5d:bf:2e:57:ed:0c:d5:15:6e:75:f0:d9:b3:c4:30:3f:3e:
f0:f1:2b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:45 2026 by rpki-client