
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87539C46B96411EBB7108270C4F9AE02.roa
File: 87539C46B96411EBB7108270C4F9AE02.roa (raw, json)
Hash identifier: FUVA3sP/5roZ/rXnlkQ4yzPCJfnKVX6Jn0BWY+MnAho=
Subject key identifier: 67:CC:7E:38:D8:46:EE:D3:6B:7C:8A:2B:68:07:48:F1:69:BE:52:78
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F010
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87539C46B96411EBB7108270C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:47:59 +0000
ROA not before: Mon 06 Jul 2026 16:47:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135716
IP address blocks: 103.74.88.0/22 maxlen: 24
2407:5540::/32 maxlen: 32
2407:5540::/40 maxlen: 48
2407:5540:100::/40 maxlen: 48
2407:5540:200::/40 maxlen: 48
2407:5540:300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61456 (0xf010)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:47:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdc3e-4fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:4f:05:06:26:1f:85:c7:f9:7d:70:e3:79:
28:a1:60:e8:ea:20:86:95:ae:57:cc:71:d8:48:d7:
ad:7a:eb:56:a1:27:84:61:d0:2e:b6:6d:bf:11:6b:
30:ab:15:6f:7c:22:30:29:09:ef:cf:4f:67:d9:f8:
1f:07:59:0f:94:ef:82:cd:bb:78:ea:cf:cb:c8:49:
f6:42:5a:3c:86:c9:5d:42:78:74:b3:4b:cb:45:de:
f9:25:2c:32:15:e3:98:27:35:5a:8e:be:f4:66:2f:
8a:42:1a:47:7a:eb:67:a2:63:47:ed:88:c2:53:de:
da:0a:6c:52:a2:bd:d5:47:20:75:d7:5e:83:26:be:
a1:3e:99:6f:78:70:90:33:63:d0:71:84:24:d0:08:
6e:d6:49:ec:ed:cb:7c:01:47:78:bc:9d:3c:89:bb:
6e:e4:b7:d3:59:a6:ee:ca:41:0e:0e:20:a8:00:65:
6b:9b:6f:47:4b:ac:a3:7d:2f:e4:8c:03:3d:1c:5a:
3d:9a:e9:d9:85:9b:18:0f:4b:e1:83:23:cc:9b:d7:
2b:78:93:d2:1b:5b:44:14:c4:d0:85:66:b7:3b:f2:
db:8b:38:19:45:ba:be:f7:f1:70:a6:f5:a7:ca:e9:
ee:aa:90:24:06:2e:12:eb:7d:55:ec:25:0b:f9:0f:
16:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CC:7E:38:D8:46:EE:D3:6B:7C:8A:2B:68:07:48:F1:69:BE:52:78
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87539C46B96411EBB7108270C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.74.88.0/22
IPv6:
2407:5540::/32
Signature Algorithm: sha256WithRSAEncryption
84:dc:48:bc:3a:73:a0:96:87:f8:78:74:1b:57:1a:86:ce:b8:
37:56:66:35:db:3a:af:90:25:23:9b:30:7a:63:93:c7:a2:89:
d9:be:3b:64:de:da:b5:0c:4f:00:3d:e3:55:6a:ea:98:ab:71:
df:8d:df:29:79:2a:32:cd:76:27:9a:6b:a3:99:18:c1:4d:94:
01:1f:ce:b3:fb:35:74:34:ca:27:3c:ca:4b:bf:9e:5d:c8:61:
c3:26:74:df:88:2b:42:7d:04:9e:68:cc:a6:32:a7:5c:dc:3a:
65:d0:81:40:de:3a:59:d5:08:f3:a3:27:c6:b9:b0:74:00:0e:
36:66:b7:e0:8b:38:f3:f3:d0:07:46:f2:8a:81:04:98:d9:ef:
03:98:ef:64:4f:40:e4:33:56:5f:ca:4b:2b:67:78:e1:7c:02:
b1:08:fb:0f:23:7a:d9:4c:8e:cf:b5:55:67:d9:60:5e:39:6d:
96:ee:a2:1a:fd:57:f0:8a:93:01:69:e9:de:bf:18:79:5e:5c:
24:ad:1c:15:60:fd:78:7e:5f:ea:61:24:64:24:93:7d:12:d2:
1c:90:cb:ac:75:3e:71:dd:dd:cd:27:ef:80:20:8a:e0:70:a6:
4f:3e:0d:56:e3:61:3b:91:88:52:64:d1:a1:71:24:2d:0a:83:
04:87:3a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:57:10 2026 by rpki-client