
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7DDF3CEE685911F09A046E78C4F9AE02.roa
File: 7DDF3CEE685911F09A046E78C4F9AE02.roa (raw, json)
Hash identifier: wBcJfVWApptJekblxnIgoMq3l0FxdVvaCwJ5HoRaYqE=
Subject key identifier: 33:47:50:95:4A:AE:E3:10:ED:AD:3D:EF:15:DB:3C:EB:80:BB:B8:7F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EF96
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7DDF3CEE685911F09A046E78C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:44:05 +0000
ROA not before: Mon 06 Jul 2026 16:44:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134924
IP address blocks: 103.173.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61334 (0xef96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:44:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdb54-17fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f7:3d:2b:c7:a5:c4:ed:48:8f:f9:fe:64:f9:
34:9d:58:0a:48:be:c8:af:e7:bd:3d:ef:e2:02:3e:
8b:38:12:af:14:78:fc:74:29:8d:c9:a0:14:cb:ca:
dc:37:c8:17:24:a1:a9:c7:45:fc:f6:1b:b7:19:15:
7b:0b:e2:08:24:73:a1:c9:20:bd:e6:2b:f1:ff:e7:
86:b7:97:ec:38:8a:dc:02:e9:11:34:08:94:fb:57:
aa:4b:62:ef:31:6c:bb:b5:60:e3:51:9d:24:7e:a1:
ef:e8:c4:83:2c:a2:40:17:65:02:ec:3e:27:69:11:
fb:0d:b5:8a:29:bf:6b:ff:d0:81:1c:e5:00:48:c6:
92:02:2d:ad:fc:c2:ec:80:31:a6:9c:cc:31:a3:6d:
0e:8b:f7:3c:c8:82:14:85:1d:56:f0:20:6e:34:a6:
f7:df:b0:ab:de:56:7c:06:4e:6a:be:25:af:ab:fe:
3e:2a:ea:ae:8c:e8:d8:c8:29:1b:50:14:24:a7:9f:
6c:44:84:ee:b7:83:69:2d:31:fd:80:9f:b4:75:bb:
6a:a3:19:01:37:94:1a:c5:5c:91:de:7d:5f:c7:3a:
f0:4d:68:c8:30:c0:e7:db:ef:e0:25:da:6b:06:1a:
39:47:55:e0:3f:1d:03:f7:d4:72:23:b1:fa:23:22:
97:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:47:50:95:4A:AE:E3:10:ED:AD:3D:EF:15:DB:3C:EB:80:BB:B8:7F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7DDF3CEE685911F09A046E78C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.173.124.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:e5:4e:bf:a8:54:df:5e:6b:70:30:c7:8f:20:27:86:15:c4:
1c:29:10:80:ce:d9:47:00:64:1e:ee:73:3e:1c:9c:57:43:7f:
1e:a7:91:c2:77:34:a9:c5:f5:70:7a:22:f5:0f:ad:ed:42:03:
0d:04:25:16:fb:c4:94:78:22:28:1f:fc:60:e2:b3:4f:6c:61:
a9:ab:2f:4d:9a:b3:b3:8a:90:ed:65:af:f8:c7:e0:cb:a9:84:
7a:72:95:f8:02:f3:d1:05:e7:3c:4f:13:aa:3c:17:32:98:24:
e5:48:91:e9:b0:c1:9d:d9:1e:be:93:d0:68:e2:69:41:a7:94:
9d:45:98:ab:f7:82:94:46:d2:35:40:f4:d5:47:fc:2f:3a:3a:
15:0a:96:5b:dc:97:63:fb:0e:da:b8:58:32:65:82:48:0e:ac:
ef:06:6b:5a:f2:bb:fc:18:90:79:59:dd:af:c6:1e:fd:81:15:
61:fa:b6:0d:29:2f:e4:04:9b:5e:71:d1:be:0d:03:95:4e:9f:
d5:61:c8:1a:c4:ef:72:0d:33:c5:8e:50:66:5b:42:78:9d:ae:
0f:95:63:d2:86:e8:6e:86:44:c0:b3:b2:d4:4b:09:31:74:6e:
73:9c:25:dd:69:15:52:4b:be:7e:f4:27:c6:bb:99:f9:68:f5:
8c:9b:dd:c3
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAO+WMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2NDQwNVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmRiNTQtMTdmYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOz3PSvHpcTtSI/5/mT5NJ1YCki+yK/nvT3v4gI+izgSrxR4/HQpjcmgFMvK
3DfIFyShqcdF/PYbtxkVewviCCRzockgveYr8f/nhreX7DiK3ALpETQIlPtXqkti
7zFsu7Vg41GdJH6h7+jEgyyiQBdlAuw+J2kR+w21iim/a//QgRzlAEjGkgItrfzC
7IAxppzMMaNtDov3PMiCFIUdVvAgbjSm99+wq95WfAZOar4lr6v+Pirqrozo2Mgp
G1AUJKefbESE7reDaS0x/YCftHW7aqMZATeUGsVckd59X8c68E1oyDDA59vv4CXa
awYaOUdV4D8dA/fUciOx+iMil6UCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQzR1CV
Sq7jEO2tPe8V2zzrgLu4fzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzdEREYzQ0VF
Njg1OTExRjA5QTA0NkU3OEM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWetfDANBgkqhkiG9w0BAQsFAAOCAQEATOVOv6hU315rcDDHjyAn
hhXEHCkQgM7ZRwBkHu5zPhycV0N/HqeRwnc0qcX1cHoi9Q+t7UIDDQQlFvvElHgi
KB/8YOKzT2xhqasvTZqzs4qQ7WWv+Mfgy6mEenKV+ALz0QXnPE8TqjwXMpgk5UiR
6bDBndkevpPQaOJpQaeUnUWYq/eClEbSNUD01Uf8Lzo6FQqWW9yXY/sO2rhYMmWC
SA6s7wZrWvK7/BiQeVndr8Ye/YEVYfq2DSkv5ASbXnHRvg0DlU6f1WHIGsTvcg0z
xY5QZltCeJ2uD5Vj0oboboZEwLOy1EsJMXRuc5wl3WkVUku+fvQnxruZ+Wj1jJvd
ww==
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:44:45 2026 by rpki-client