
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8152D222387B11EB85E94170C4F9AE02.roa
File: 8152D222387B11EB85E94170C4F9AE02.roa (raw, json)
Hash identifier: cpPXdBv5fJ8VnG+Qw9BlWo44pGOr1gpVSGqqSS2pkkA=
Subject key identifier: E7:B4:09:CD:36:27:41:FC:FE:BF:B4:ED:52:37:61:75:74:71:CA:CB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F146
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8152D222387B11EB85E94170C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:58:05 +0000
ROA not before: Mon 06 Jul 2026 16:58:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137128
IP address blocks: 103.112.106.0/24 maxlen: 24
2001:df1:cec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61766 (0xf146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:58:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bde9d-ad46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:3c:17:27:f3:18:bd:44:32:15:38:94:86:
13:f4:0f:68:01:e9:ef:50:51:48:a6:b2:c8:d0:7b:
ff:48:4c:0d:d7:87:96:6c:6a:6f:c4:86:91:f2:22:
76:d4:a3:ab:f6:1e:aa:69:15:59:35:76:55:fe:98:
12:6e:c3:d7:91:07:5e:53:a5:1c:c5:e7:cb:3c:0e:
02:c8:69:cd:84:73:73:71:5d:b1:15:0e:80:53:5a:
9c:cb:69:c4:00:0b:6b:5a:76:09:62:a2:ba:6b:bf:
be:0f:da:6f:77:e3:0e:ec:f1:89:44:5d:1f:4b:56:
48:a0:1c:28:f9:fd:5e:a1:3e:3b:0b:5f:3a:aa:84:
3c:dc:a5:ba:70:6b:70:4e:50:9b:ff:44:f9:25:24:
1e:6a:56:7e:30:e9:85:2d:de:c9:d2:97:e1:f9:39:
c5:0f:dd:9e:53:0f:a3:c4:02:0b:15:de:f0:66:b8:
27:12:eb:93:f9:fc:e7:c6:92:d4:9c:13:fe:99:a1:
b6:e5:0f:41:b4:31:03:38:9e:0f:fe:58:43:86:3a:
15:f0:bb:56:9e:b4:ca:ff:5e:ed:1f:49:8a:c7:94:
38:1b:48:51:98:5f:0d:23:4a:b2:7a:52:ec:db:d6:
9b:15:5e:ab:ce:a5:5d:e4:4d:f9:f3:1f:1a:84:69:
09:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B4:09:CD:36:27:41:FC:FE:BF:B4:ED:52:37:61:75:74:71:CA:CB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8152D222387B11EB85E94170C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.112.106.0/24
IPv6:
2001:df1:cec0::/48
Signature Algorithm: sha256WithRSAEncryption
88:2c:b7:98:9d:4f:33:d2:51:05:c8:e0:32:ca:f9:53:b4:fb:
c0:8d:2e:f4:c8:66:e0:37:e0:38:9a:40:af:7b:e2:85:b9:65:
a5:42:6c:2a:7f:5b:5b:4d:62:f1:6c:80:08:24:8b:64:86:db:
07:bf:aa:88:67:ae:79:46:27:42:8c:c4:a7:6b:d8:5f:e3:d0:
71:b8:00:ae:dc:25:24:f0:0b:2b:aa:62:df:cc:99:0d:5a:07:
6f:44:55:54:30:b5:c4:01:dc:5d:57:cc:e6:76:49:fd:0c:d4:
c3:d2:6a:54:94:1d:b6:2b:f1:6f:a9:ce:1e:8f:57:58:61:e5:
8d:41:34:b0:ac:e0:03:f6:2a:41:27:73:b3:b9:ed:08:82:69:
14:57:cd:c0:43:aa:58:09:3d:61:36:2c:50:22:32:20:6d:99:
a8:6f:87:24:cb:cc:06:79:86:d7:c0:83:fb:53:39:75:a4:56:
d6:b4:76:75:e9:f7:0f:38:d6:bd:96:df:46:96:ce:07:aa:ab:
32:c7:16:25:cf:e0:cb:4e:ab:a1:e4:35:b3:76:44:79:2e:36:
be:8d:7f:54:f9:a4:16:83:2c:87:4b:55:d1:90:91:f1:8f:b9:
ba:1e:76:d5:d9:17:ab:82:25:3e:6d:c0:66:cd:b2:79:6e:4b:
15:ca:d9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:45 2026 by rpki-client