
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8892F972445A11F18C6F017390833773.roa
File: 8892F972445A11F18C6F017390833773.roa (raw, json)
Hash identifier: uMT9l7TFGZMG/PSVht8xChLGBHfNvWJq4AzyVYEZkEM=
Subject key identifier: A7:52:58:87:6F:1C:F9:32:09:67:AA:E9:22:01:31:5D:BC:1E:6A:8D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EDEC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8892F972445A11F18C6F017390833773.roa
Signing time: Mon 06 Jul 2026 16:30:00 +0000
ROA not before: Mon 06 Jul 2026 16:30:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132420
IP address blocks: 103.59.180.0/23 maxlen: 24
103.65.20.0/23 maxlen: 24
103.171.44.0/24 maxlen: 24
103.171.45.0/24 maxlen: 24
103.175.22.0/24 maxlen: 24
103.175.163.0/24 maxlen: 24
103.178.248.0/24 maxlen: 24
103.185.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 13:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60908 (0xedec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:30:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd808-b12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c7:ce:7d:de:4b:75:70:24:e7:42:f8:e6:0a:
c1:4e:98:1c:bd:15:6d:69:6e:85:ca:11:8e:ef:66:
ee:1e:9c:f1:4c:54:73:0c:ec:6a:b9:03:45:8f:9d:
63:69:1f:b5:3c:31:6d:cc:8b:99:cc:cd:29:70:a7:
57:a6:27:f4:25:c5:e5:2a:9b:7b:63:ed:b5:04:7e:
a1:42:48:e1:a7:20:8f:bd:d6:8d:29:f4:68:3d:60:
a8:56:e2:a4:95:7f:0b:27:ea:20:37:13:7e:50:25:
13:ff:ef:d1:a2:0b:59:66:b5:03:12:fa:ea:e6:a1:
b8:b0:41:7f:8d:bb:56:89:7d:db:08:b8:0b:00:c7:
0e:47:ae:7c:ee:19:71:93:64:0d:41:b4:9e:02:e5:
cb:c5:de:a4:98:c3:4d:94:68:43:54:b0:2d:97:9f:
ef:af:2e:97:37:f5:cf:71:2f:79:4d:8d:2a:45:61:
34:3e:eb:bb:b1:48:d1:17:34:bf:86:a2:49:3a:5c:
58:dc:51:82:80:af:e0:e5:89:c2:7f:38:c0:2c:b6:
78:b8:92:72:8c:d3:63:54:a0:8f:ff:f5:11:e7:98:
82:9c:fe:9e:09:b4:a4:26:1a:d1:66:9f:5e:93:68:
60:c0:21:66:47:23:89:8e:45:68:19:95:77:38:c2:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:52:58:87:6F:1C:F9:32:09:67:AA:E9:22:01:31:5D:BC:1E:6A:8D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8892F972445A11F18C6F017390833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.59.180.0/23
103.65.20.0/23
103.171.44.0/23
103.175.22.0/24
103.175.163.0/24
103.178.248.0/24
103.185.212.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:58:c5:45:ac:28:1c:6a:11:29:0a:0d:6d:e4:92:70:a6:b7:
87:ca:e0:03:31:b3:75:5c:e2:6a:61:12:f7:56:9a:ab:5a:3b:
72:1e:f0:b2:ac:ab:6b:77:04:55:f0:0c:68:43:4f:2d:7a:6e:
81:00:53:0d:2a:34:99:97:56:a1:2e:58:a4:49:90:c6:db:76:
ab:c9:6f:3d:f8:fa:f7:75:5d:6b:ce:b8:8e:75:f5:68:6a:2f:
07:7d:d5:4b:40:c4:bd:8a:38:e2:54:b5:ed:08:d5:f8:b4:6e:
70:14:be:b8:c4:8e:10:fa:e6:59:89:8e:a3:a8:e6:f7:84:16:
03:3a:c4:97:51:6a:4f:26:d1:08:61:ed:f8:9a:4b:aa:f7:28:
83:af:15:ec:65:b7:ae:9a:f1:68:7c:3f:da:06:c2:41:d4:40:
89:ce:aa:93:e0:ad:99:1d:fe:a2:2a:29:85:49:96:05:f8:09:
6f:bb:1d:f0:08:b0:84:96:86:4e:75:8b:d7:ac:ac:b3:c7:50:
35:5d:3a:22:17:ca:b2:8a:a8:9b:a8:f4:fd:3d:4d:1a:f5:05:
6c:0f:92:c9:66:ae:f8:73:7c:b4:b6:28:cd:09:2e:c0:2d:3c:
25:77:29:fc:87:22:02:61:f1:1b:eb:95:67:9f:68:b7:39:9d:
21:f3:65:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:31:10 2026 by rpki-client