
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7DDD9664744D11F0A5EF6979C4F9AE02.roa
File: 7DDD9664744D11F0A5EF6979C4F9AE02.roa (raw, json)
Hash identifier: t+qs1HDKC+yg3g/sklIin0j6/RzS3dWl7qb+BdEL2l4=
Subject key identifier: AC:17:38:9B:0D:31:45:63:4E:A0:83:BC:3D:9B:AB:F4:03:E4:8C:A0
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EE88
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7DDD9664744D11F0A5EF6979C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:35:19 +0000
ROA not before: Mon 06 Jul 2026 16:35:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133300
IP address blocks: 103.72.216.0/22 maxlen: 24
2401:afc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61064 (0xee88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:35:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd947-bfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3a:2c:89:2c:d5:0f:ce:d3:c2:d1:f5:b6:eb:
5a:95:fa:61:62:64:c6:8d:15:86:78:58:30:50:84:
11:96:01:27:76:5e:cf:e4:48:59:c6:22:46:e1:5e:
28:c0:57:a2:25:26:46:8b:2c:24:86:2b:3b:e4:00:
1d:68:e7:c3:00:ee:c8:cc:dd:52:e5:93:df:0e:58:
3e:1d:2a:12:80:c7:02:a8:56:39:31:96:79:2f:2f:
27:e5:e5:c5:91:64:10:cc:7f:18:c2:b2:79:b6:3a:
e1:19:e8:93:7e:df:d9:ef:46:c1:1a:54:df:10:b4:
a5:db:b4:bf:07:ee:bb:e1:d2:25:e3:51:55:25:a2:
3e:e8:c3:b8:d3:86:97:df:a0:f2:38:a5:d9:0c:29:
67:2c:08:75:41:a5:31:51:58:bc:37:52:e2:0a:3d:
36:9d:a9:93:00:ca:7e:b8:9b:f1:c9:87:6e:5f:9b:
3e:9d:58:77:a8:9a:ba:cb:80:f3:60:3f:f7:fb:a5:
16:b5:7c:6a:78:fb:c2:6a:75:fe:5a:0b:41:99:e4:
d7:a6:02:ec:7e:f9:5b:48:aa:15:00:e5:ca:48:64:
29:a4:f5:43:04:8f:ad:bb:bf:8a:2a:a6:62:78:d8:
f5:15:11:ce:4c:9b:62:fe:96:ed:08:7e:49:67:1b:
70:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:17:38:9B:0D:31:45:63:4E:A0:83:BC:3D:9B:AB:F4:03:E4:8C:A0
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7DDD9664744D11F0A5EF6979C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.72.216.0/22
IPv6:
2401:afc0::/32
Signature Algorithm: sha256WithRSAEncryption
6c:fd:d4:73:65:b5:b5:45:80:16:40:61:84:cc:eb:27:76:8b:
26:78:ff:9b:71:59:33:99:a6:85:a9:e1:b2:6d:90:4a:9e:69:
1a:fd:16:a0:05:4f:36:8b:fd:41:56:fd:88:53:c1:ff:97:d9:
ef:8c:06:b1:50:42:fa:82:b2:3e:cc:76:c5:ef:3f:ea:ea:e4:
8a:b3:32:20:63:47:44:b5:91:83:60:f2:c8:09:88:49:13:2f:
58:92:61:ee:7e:ff:dd:91:79:93:2b:2b:47:b8:0b:16:d8:3c:
9c:80:5b:98:04:e8:64:b0:59:52:64:fa:33:90:41:7d:f0:29:
95:1f:fd:c6:37:71:bb:68:ee:5e:c0:d8:67:90:0c:d5:43:6e:
27:06:88:5b:c4:11:f7:c4:08:d0:03:a1:ba:d5:b1:ee:1e:8b:
a0:ce:aa:fb:50:69:66:ae:45:10:ec:b3:7e:26:99:b0:15:85:
dc:89:ab:77:d6:46:5f:38:9c:b8:b1:0b:32:09:f9:40:a0:d3:
6a:b5:8e:dc:5a:ba:0d:20:5d:a5:ce:c4:c9:bb:58:6c:26:53:
eb:23:04:62:75:ff:0d:40:e7:57:36:9d:a5:b5:46:c9:17:8d:
0e:3e:95:8b:30:a1:6e:04:d2:13:09:17:70:86:14:2d:b1:e6:
91:40:de:10
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDAO6IMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2MzUxOVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmQ5NDctYmZlMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKY6LIks1Q/O08LR9bbrWpX6YWJkxo0VhnhYMFCEEZYBJ3Zez+RIWcYiRuFe
KMBXoiUmRossJIYrO+QAHWjnwwDuyMzdUuWT3w5YPh0qEoDHAqhWOTGWeS8vJ+Xl
xZFkEMx/GMKyebY64Rnok37f2e9GwRpU3xC0pdu0vwfuu+HSJeNRVSWiPujDuNOG
l9+g8jil2QwpZywIdUGlMVFYvDdS4go9Np2pkwDKfrib8cmHbl+bPp1Yd6iausuA
82A/9/ulFrV8anj7wmp1/loLQZnk16YC7H75W0iqFQDlykhkKaT1QwSPrbu/iiqm
YnjY9RURzkybYv6W7Qh+SWcbcHcCAwEAAaOCAm8wggJrMB0GA1UdDgQWBBSsFzib
DTFFY06gg7w9m6v0A+SMoDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzdEREQ5NjY0
NzQ0RDExRjBBNUVGNjk3OUM0RjlBRTAyLnJvYTAuBggrBgEFBQcBBwEB/wQfMB0w
DAQCAAEwBgMEAmdI2DANBAIAAjAHAwUAJAGvwDANBgkqhkiG9w0BAQsFAAOCAQEA
bP3Uc2W1tUWAFkBhhMzrJ3aLJnj/m3FZM5mmhanhsm2QSp5pGv0WoAVPNov9QVb9
iFPB/5fZ74wGsVBC+oKyPsx2xe8/6urkirMyIGNHRLWRg2DyyAmISRMvWJJh7n7/
3ZF5kysrR7gLFtg8nIBbmAToZLBZUmT6M5BBffAplR/9xjdxu2juXsDYZ5AM1UNu
JwaIW8QR98QI0AOhutWx7h6LoM6q+1BpZq5FEOyzfiaZsBWF3Imrd9ZGXzicuLEL
Mgn5QKDTarWO3Fq6DSBdpc7EybtYbCZT6yMEYnX/DUDnVzadpbVGyReNDj6VizCh
bgTSEwkXcIYULbHmkUDeEA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:31 2026 by rpki-client