
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/923C01B8FE7711EBA7AE3982C4F9AE02.roa
File: 923C01B8FE7711EBA7AE3982C4F9AE02.roa (raw, json)
Hash identifier: oJzY9rW7VQRCOEGUSoAA4YBSy/CxyVBpVbbcKyHbH8w=
Subject key identifier: DC:4A:5A:D9:E8:3C:0D:BF:2F:D4:AB:84:6F:C1:3C:CF:78:9F:88:5F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F3C8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/923C01B8FE7711EBA7AE3982C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:19:34 +0000
ROA not before: Mon 06 Jul 2026 17:19:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142481
IP address blocks: 103.170.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62408 (0xf3c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:19:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be3a6-b945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:f4:c5:20:85:b6:47:fd:d6:ae:13:60:ad:
22:1a:c5:4b:35:c0:07:ca:f4:2e:97:cc:a2:f1:98:
71:8f:8a:65:1a:ab:0c:38:ff:a4:25:60:84:22:de:
28:97:12:4a:e5:ea:2f:6b:57:3f:bd:91:4f:c2:70:
7e:3d:b2:88:d7:96:19:f6:c0:7e:95:4b:9a:4a:b4:
1a:a9:25:82:65:44:1c:3a:c8:3d:3e:a7:f0:f0:81:
b0:31:27:a1:09:20:74:b6:3e:1c:ae:03:ca:d4:24:
03:0b:16:67:dc:5b:96:44:37:50:22:95:21:b1:01:
4d:0d:7d:30:36:2d:dc:fb:21:a9:da:db:3d:5a:59:
86:17:04:ff:ec:fc:08:85:da:56:05:c6:e9:72:a6:
1d:22:82:c5:25:82:15:ec:14:ea:96:dd:65:bd:ab:
43:5e:71:07:8e:2b:f2:b0:75:f4:c6:82:91:e0:83:
42:84:c0:ea:4f:ea:34:41:43:f6:13:8f:ac:d7:73:
4b:30:0d:b1:aa:48:f4:6d:c3:20:e8:41:18:82:37:
ad:54:b2:d6:27:43:e8:07:78:a7:f4:c8:88:92:dd:
33:8f:87:f0:03:b0:a8:3f:0d:88:7a:38:b8:32:8f:
c0:ae:d4:7f:2e:95:29:eb:51:13:b5:d6:cd:3d:ba:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4A:5A:D9:E8:3C:0D:BF:2F:D4:AB:84:6F:C1:3C:CF:78:9F:88:5F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/923C01B8FE7711EBA7AE3982C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.170.164.0/24
Signature Algorithm: sha256WithRSAEncryption
38:9c:2f:bb:14:40:4c:d4:f5:e5:b8:b3:32:48:0c:2c:5c:73:
b0:16:03:27:56:e3:05:9f:64:7a:1d:f6:1e:09:9c:e6:60:10:
89:91:6c:e1:fa:c8:30:57:d4:c8:06:94:a3:dc:68:e4:18:6c:
d0:52:b4:27:af:a4:8c:bb:d1:a0:c0:cb:e5:49:60:0f:13:fe:
55:66:c2:a6:4e:02:df:f0:8d:e1:3a:c4:a9:b5:da:44:8a:04:
f9:f4:b5:c4:79:21:e9:7a:3d:55:de:4e:78:1c:46:75:82:be:
b2:07:13:63:87:6a:66:1f:3f:73:a4:40:85:98:a9:ed:75:b8:
31:38:1d:f2:55:f7:0f:ad:98:6d:cd:93:b9:71:d4:d4:02:21:
85:8e:4f:8e:b2:f8:95:5f:0e:e2:bf:dd:e3:b1:cf:48:3d:d1:
63:86:33:f0:0e:5c:b1:3f:fb:f5:f3:71:d6:b9:51:fa:6c:b9:
d5:f4:7f:ee:bf:d4:f0:23:3f:cb:5c:bb:10:09:8e:24:40:dd:
28:44:82:f2:3d:54:9d:f2:b0:1d:78:51:7e:27:92:69:b9:b1:
16:78:f8:98:d0:1a:16:45:41:6a:bb:25:59:82:7e:61:62:58:
e1:ec:91:45:18:f6:46:d0:ca:6f:91:46:24:38:74:af:43:51:
5f:ef:77:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:08 2026 by rpki-client