
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7CBF7E8E72B011EC964C6B3CC4F9AE02.roa
File: 7CBF7E8E72B011EC964C6B3CC4F9AE02.roa (raw, json)
Hash identifier: J7wO4/pyuJ1IzRXqtCWyN1Nz1jAowrA6+Oibz2Y3wDk=
Subject key identifier: 85:59:6A:77:BA:77:FB:A1:FC:D9:D8:29:70:C6:4B:5E:51:ED:42:C3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F198
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7CBF7E8E72B011EC964C6B3CC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:00:47 +0000
ROA not before: Mon 06 Jul 2026 17:00:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137646
IP address blocks: 103.118.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61848 (0xf198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:00:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdf3e-6030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d8:0c:4c:92:62:8f:b1:0d:23:9f:2e:ab:b5:
53:1f:a2:e9:67:c9:79:9a:d1:46:6f:05:b1:3f:9e:
fe:87:9b:48:a3:08:e4:2f:fb:12:9e:7f:1d:15:1d:
9f:36:a8:70:2a:1f:8b:f5:f6:bb:9e:b9:3d:65:99:
f7:69:2f:5b:a3:e4:1d:a4:44:31:e8:31:65:ad:bd:
3c:4b:91:b3:d7:24:24:59:bd:2f:ce:0a:cd:c9:36:
dc:7f:c7:e6:48:97:7b:93:6a:d7:95:1e:05:6a:ee:
3e:24:d7:82:c6:5e:70:7d:75:c0:07:34:81:44:7a:
0d:6c:bb:3f:68:fb:1c:01:60:20:a4:83:a1:a8:4a:
b9:e0:b4:3b:d9:3e:94:30:3c:8a:21:a2:26:ce:19:
ed:81:44:c3:03:5c:d8:66:46:62:f7:a7:81:14:3c:
7f:d8:f9:d4:08:a5:b2:82:d7:57:84:2a:da:26:1d:
3b:fc:42:0f:2a:3b:cf:6a:7a:da:73:d4:78:17:87:
f8:d8:77:ca:f4:ec:53:3a:49:77:6e:c8:65:2c:b7:
f6:ad:d4:b7:5b:71:7c:63:42:e5:f2:b8:ac:4e:ac:
cc:72:1d:a1:a4:8d:84:73:ae:0e:6e:c6:e5:d2:05:
7d:9e:7c:6e:5a:c8:ab:3d:49:35:88:a9:27:f1:62:
ab:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:59:6A:77:BA:77:FB:A1:FC:D9:D8:29:70:C6:4B:5E:51:ED:42:C3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7CBF7E8E72B011EC964C6B3CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.118.160.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e2:29:67:31:d6:a0:c4:ac:27:f8:8a:3a:af:07:79:e6:62:
7a:08:ed:87:fe:41:f5:32:fc:a5:50:bf:2b:e1:a4:09:9c:1c:
d8:11:f0:bd:fc:aa:3b:78:ac:24:f9:58:bc:c3:dd:b0:cc:1c:
6e:9c:35:8b:24:16:e3:f4:33:1b:d7:60:af:b6:cc:41:62:98:
86:8b:98:e5:87:74:32:5c:b4:b1:f9:8b:b4:f3:f1:2d:5d:29:
b9:27:7d:88:c4:53:1b:cd:68:14:aa:46:88:5c:51:2b:44:c5:
a6:dd:1c:cc:b6:28:49:31:7b:fa:17:6c:22:eb:6e:12:7b:44:
e7:b5:db:e0:ab:0e:5a:bb:f6:a5:8c:35:1f:14:3d:5b:1d:e3:
ac:f1:b8:2d:db:3d:c9:e3:a8:55:05:91:71:33:21:b1:06:fe:
33:2d:f5:cf:62:bb:d6:b6:6e:b4:f0:49:86:c2:88:55:8c:6e:
11:78:ef:60:a2:92:75:cf:f6:ad:f5:75:47:f4:af:02:be:72:
e1:16:d4:f0:9e:47:2b:68:79:81:5d:76:64:c7:da:42:79:55:
b2:ee:b2:86:d7:4f:a0:0e:f8:4b:6f:13:a1:91:e4:73:17:30:
bd:f1:21:39:4a:ea:61:67:64:00:fe:0c:00:47:c0:33:6d:07:
f2:dd:bc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:41 2026 by rpki-client