
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87B1C4E2542D11F1950B51CC9D833773.roa
File: 87B1C4E2542D11F1950B51CC9D833773.roa (raw, json)
Hash identifier: qh/9WhB71Bq4ZBy/TyRyoZs8MlmEPxPZ7r6RqhVapq4=
Subject key identifier: DB:BE:9B:71:4D:9B:7C:33:54:BE:C2:4B:00:3C:72:D5:2A:9D:F8:E3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F780
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87B1C4E2542D11F1950B51CC9D833773.roa
Signing time: Mon 06 Jul 2026 17:51:15 +0000
ROA not before: Mon 06 Jul 2026 17:51:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46475
IP address blocks: 103.106.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63360 (0xf780)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:51:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4beb13-b08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:34:de:91:85:0b:45:3e:71:ae:26:e5:83:
d3:27:a8:be:92:ca:0f:65:8c:65:ca:61:d1:cf:ad:
81:aa:5b:66:b5:11:97:0a:0f:5c:ec:1b:63:24:7d:
3e:87:c6:e5:d3:2e:d8:1e:94:00:f1:57:ea:bf:77:
60:c6:10:0c:02:4d:9b:04:bf:83:e5:cf:3f:64:36:
90:a4:a0:2f:87:1b:28:92:8a:78:b7:45:ec:a1:7f:
5b:eb:4f:cc:17:2a:58:6f:df:f3:02:15:9f:dc:f6:
ef:99:34:39:ed:92:c2:ce:4d:6a:f5:e9:37:de:93:
43:95:fd:e3:5f:6b:58:2d:21:23:0e:9b:a5:86:ce:
38:65:b1:ea:0a:d7:0b:54:76:9b:c4:94:9c:ab:bc:
b9:8b:73:bb:3e:74:b1:2f:34:91:b9:7e:c8:68:da:
88:26:d8:c3:97:d2:75:6e:47:70:3f:d5:ac:80:ef:
0a:c8:0a:24:b7:14:dd:62:c1:02:c7:f5:19:bf:04:
17:14:e0:78:2d:0e:ac:4b:43:a3:38:79:4b:57:33:
81:6e:63:c1:f8:bd:6f:0d:d4:ce:99:6b:89:02:51:
7e:01:de:19:40:fe:06:2f:7c:69:7d:df:2e:e6:f7:
99:38:f3:76:ce:45:88:73:3d:a0:55:f3:4b:94:5b:
f6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BE:9B:71:4D:9B:7C:33:54:BE:C2:4B:00:3C:72:D5:2A:9D:F8:E3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87B1C4E2542D11F1950B51CC9D833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.106.66.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:9d:d3:d3:98:b4:66:6a:4e:27:3c:c0:50:67:75:55:36:ac:
79:ce:1d:e4:08:ae:d4:6f:3e:75:5f:7f:3a:fe:36:2d:d7:a1:
b5:1b:95:26:83:e5:00:00:92:02:2c:c7:8d:ed:fa:84:ba:a7:
bd:64:f5:01:8a:54:0b:94:ca:ce:80:90:30:52:7b:88:c5:ec:
99:eb:35:06:eb:d5:b7:ca:ce:02:cb:5c:ff:55:88:f5:b1:43:
f6:38:eb:00:67:08:dc:17:25:aa:bd:eb:9c:ca:44:b3:d1:a3:
8c:ee:8c:15:ef:41:fb:2d:74:27:a0:cc:89:30:8c:e9:a0:b7:
45:34:05:f8:fa:01:d4:23:2b:2e:8c:dd:bb:ff:de:dd:0a:9c:
a8:eb:98:60:aa:95:c8:d1:31:81:d4:3f:61:5b:ae:78:8a:9e:
fd:70:c9:27:c1:30:a4:51:c1:e8:f1:f2:e2:54:ff:47:36:92:
cc:54:b3:35:88:f0:32:84:9f:1b:d0:09:1a:e3:ec:32:ee:27:
45:8f:4a:8e:b5:38:24:dd:63:19:3e:76:98:f8:9c:98:01:81:
53:d8:d5:57:c5:87:ce:60:18:20:f4:8b:d3:0d:69:71:7f:1b:
f2:18:e9:14:54:df:b0:3e:eb:cd:3c:f6:d4:fe:8e:09:b9:19:
3e:a6:08:82
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPeAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3NTExNVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmViMTMtYjA4YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALzFNN6RhQtFPnGuJuWD0yeovpLKD2WMZcph0c+tgapbZrURlwoPXOwbYyR9
PofG5dMu2B6UAPFX6r93YMYQDAJNmwS/g+XPP2Q2kKSgL4cbKJKKeLdF7KF/W+tP
zBcqWG/f8wIVn9z275k0Oe2Sws5NavXpN96TQ5X9419rWC0hIw6bpYbOOGWx6grX
C1R2m8SUnKu8uYtzuz50sS80kbl+yGjaiCbYw5fSdW5HcD/VrIDvCsgKJLcU3WLB
Asf1Gb8EFxTgeC0OrEtDozh5S1czgW5jwfi9bw3UzplriQJRfgHeGUD+Bi98aX3f
Lub3mTjzds5FiHM9oFXzS5Rb9uECAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTbvptx
TZt8M1S+wksAPHLVKp344zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzg3QjFDNEUy
NTQyRDExRjE5NTBCNTFDQzlEODMzNzczLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWdqQjANBgkqhkiG9w0BAQsFAAOCAQEAHZ3T05i0ZmpOJzzAUGd1
VTasec4d5Aiu1G8+dV9/Ov42LdehtRuVJoPlAACSAizHje36hLqnvWT1AYpUC5TK
zoCQMFJ7iMXsmes1BuvVt8rOAstc/1WI9bFD9jjrAGcI3Bclqr3rnMpEs9GjjO6M
Fe9B+y10J6DMiTCM6aC3RTQF+PoB1CMrLozdu//e3QqcqOuYYKqVyNExgdQ/YVuu
eIqe/XDJJ8EwpFHB6PHy4lT/RzaSzFSzNYjwMoSfG9AJGuPsMu4nRY9KjrU4JN1j
GT52mPicmAGBU9jVV8WHzmAYIPSL0w1pcX8b8hjpFFTfsD7rzTz21P6OCbkZPqYI
gg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:56:44 2026 by rpki-client