
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A4D2EE0DB3311EA90433080C4F9AE02.roa
File: 8A4D2EE0DB3311EA90433080C4F9AE02.roa (raw, json)
Hash identifier: jFuEbT/A7xg88tcUATBVBXdasdMZDizVrZEW4xd/aEg=
Subject key identifier: 2A:D7:75:96:C9:50:0E:65:DF:5B:77:F8:C8:65:E8:7F:B0:BD:73:2B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F192
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A4D2EE0DB3311EA90433080C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:00:34 +0000
ROA not before: Mon 06 Jul 2026 17:00:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137636
IP address blocks: 103.124.108.0/24 maxlen: 24
103.160.121.0/24 maxlen: 24
2001:df7:1900::/48 maxlen: 48
2400:b460::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61842 (0xf192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:00:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdf31-9611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:0b:21:37:24:62:45:2d:c6:e9:3a:53:e7:
13:30:29:d3:f4:87:29:57:87:ee:91:69:7e:3f:12:
8d:9a:e0:d5:56:73:81:7e:0c:5e:10:15:49:ba:98:
a4:a6:72:2f:2e:2e:07:cd:e2:93:0f:91:ad:20:10:
b2:47:98:55:3f:72:1e:7c:68:96:64:c2:2f:42:f6:
b9:a1:7f:00:5b:c2:a9:f6:93:e2:6e:7f:8e:dc:79:
1b:45:c8:a7:72:c2:20:a3:f3:9b:24:37:58:f4:a6:
db:c6:bc:ae:a7:f0:ba:cd:6a:ef:01:3f:c8:01:8d:
4c:2f:8d:c7:f9:dd:40:9c:59:dc:73:4c:6b:a5:1e:
9d:18:44:e8:25:4c:d7:b3:41:bb:31:07:3d:67:93:
f1:73:aa:94:6a:f8:69:05:82:e2:05:4a:8a:0e:19:
59:4d:76:c7:c3:c8:10:39:36:d5:c3:6d:c9:5a:f6:
1c:bd:b9:dd:2e:70:cb:25:ec:00:ee:52:d7:62:d7:
b2:6c:1b:2b:69:f3:52:64:3e:5e:5e:f8:7e:39:84:
7a:46:b4:a3:23:ab:48:e1:df:9d:9f:42:c3:f0:d7:
76:60:e3:6c:a6:57:be:5e:96:bf:35:42:af:77:f6:
df:94:97:9d:a2:7e:63:86:24:06:69:61:cd:c6:df:
f4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D7:75:96:C9:50:0E:65:DF:5B:77:F8:C8:65:E8:7F:B0:BD:73:2B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A4D2EE0DB3311EA90433080C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.124.108.0/24
103.160.121.0/24
IPv6:
2001:df7:1900::/48
2400:b460::/32
Signature Algorithm: sha256WithRSAEncryption
05:28:c1:67:9e:c5:f0:64:f6:70:86:db:7b:32:1b:81:c1:f1:
a1:bb:1a:83:7b:ce:f1:b7:4f:45:46:59:1f:55:5c:a2:6c:66:
19:da:d5:85:35:b9:06:7f:8b:70:f8:84:06:28:3a:73:03:c8:
c0:0e:be:4a:34:f3:1d:df:5c:c7:49:ed:e3:ad:81:d8:51:6a:
e4:9c:75:c4:b9:90:58:2a:ed:54:e6:ae:5d:87:ed:e0:1b:9b:
91:55:cf:34:65:0b:8e:1e:eb:59:2b:c9:21:c3:b5:8e:6c:1f:
eb:b2:6f:29:ba:5d:f7:49:ed:ee:f4:c1:20:2b:d7:a7:bf:6a:
c9:40:81:b4:6d:e7:a3:3f:50:17:34:b7:c4:22:91:59:5a:36:
b1:79:bc:89:45:0a:8f:4e:cc:47:df:dd:9b:60:3d:cf:e3:7d:
c1:bc:9b:ab:bb:46:b7:f3:4e:c8:ac:9c:44:41:8f:0e:35:16:
66:10:c3:18:ee:01:4a:01:7d:70:1f:d4:73:63:d8:37:13:15:
bc:2c:cc:63:28:36:1f:fe:ff:69:ca:13:49:4c:49:82:0e:fb:
1e:0a:ef:3e:4c:1c:27:89:dd:c4:9c:c1:7e:fc:7b:14:23:0a:
c2:c4:1a:e3:97:6a:14:c8:37:8d:a8:e3:eb:3e:cf:9c:0c:9c:
5f:d5:ed:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:43:39 2026 by rpki-client