
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9735049C02F811F09ECE6379C4F9AE02.roa
File: 9735049C02F811F09ECE6379C4F9AE02.roa (raw, json)
Hash identifier: r1KsuIBp17vYFDRhcnJWQkGwI+YIZxSKFoI4JtnqICI=
Subject key identifier: 11:80:D9:77:3A:6C:C8:C1:04:C2:57:03:4D:8B:7A:A6:F5:57:64:9E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EFEB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9735049C02F811F09ECE6379C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:46:48 +0000
ROA not before: Mon 06 Jul 2026 16:46:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135258
IP address blocks: 103.70.40.0/22 maxlen: 24
2001:df2:47c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61419 (0xefeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:46:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdbf8-4640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:73:f7:1a:f3:2d:4d:87:80:1a:d4:87:d5:49:
13:69:8e:ef:59:ab:fe:cd:f2:c6:0f:f8:c0:ce:02:
d4:e9:38:66:e2:c1:ff:22:47:d3:52:4c:39:d1:ff:
ee:c8:1e:81:30:d1:4d:63:71:ca:ce:0a:f1:e3:50:
b7:ac:7b:02:60:18:cb:1d:87:27:bc:6f:35:59:39:
18:93:bd:b4:f8:8d:a6:55:c9:9f:7f:96:69:09:c6:
da:1f:b1:f7:76:dc:c0:b9:83:66:99:e9:e6:6b:fc:
d4:51:a1:0d:be:f3:ec:bc:b7:c4:9b:fa:90:f8:d7:
92:f5:75:39:97:f6:7e:7a:8a:d1:46:c9:c2:4d:ec:
bd:fd:13:72:b6:97:c7:61:8d:6b:c3:48:a7:37:06:
73:2c:ef:80:ed:d9:51:d9:42:80:07:54:fa:02:3b:
24:d8:10:7c:23:25:09:08:39:62:7a:da:de:6c:a4:
48:58:6d:32:95:c9:99:fc:cb:6b:89:d9:f4:50:fe:
e6:ed:b2:91:03:cd:8d:c9:41:b2:bd:b6:9d:ed:98:
28:81:59:fe:90:d7:ac:2a:5a:24:6d:6a:ba:54:a5:
5b:df:04:96:63:00:32:0b:b0:f1:b8:7a:f4:75:b4:
fe:78:84:97:7e:a1:7f:14:4f:7b:5b:49:d8:e1:f0:
ec:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:80:D9:77:3A:6C:C8:C1:04:C2:57:03:4D:8B:7A:A6:F5:57:64:9E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9735049C02F811F09ECE6379C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.70.40.0/22
IPv6:
2001:df2:47c0::/48
Signature Algorithm: sha256WithRSAEncryption
4e:0f:cc:b8:37:a6:f8:3a:14:e6:7b:6a:c4:08:35:c6:d0:7f:
bb:41:9a:d1:5a:46:65:ed:87:0c:7b:cb:d9:9a:28:84:d5:ae:
e7:c9:e6:b2:fb:2f:e9:03:3d:f9:e1:a4:79:6f:c3:fc:48:c5:
8b:1d:5d:2f:8b:65:b4:54:91:27:f2:fe:07:c4:39:1d:94:70:
cd:ad:69:d0:0f:fd:8e:f5:d5:4f:9e:4a:80:1e:a2:b6:66:c5:
63:b6:f8:87:c5:be:5c:75:a4:80:ab:e3:3d:64:e6:fe:28:d0:
32:3c:d9:95:33:84:a0:20:ba:68:ea:6b:2b:dd:d3:57:6c:6e:
c9:41:63:ca:d3:37:42:40:de:02:53:85:b4:12:ed:f2:55:eb:
3c:81:1c:b9:b8:79:b2:24:b6:79:eb:39:58:30:84:2f:2b:5d:
8a:25:b4:cb:92:81:65:ab:d8:b7:c8:e7:73:b7:2f:10:72:07:
56:57:16:85:bd:08:16:6e:d6:d9:82:43:58:70:5c:af:7d:17:
00:af:86:74:d3:97:05:ee:4c:2b:f8:cc:7b:98:38:96:a3:e6:
6e:00:2b:f6:5d:c8:c2:a3:0a:51:5a:80:86:36:aa:5c:cc:8a:
7b:3f:8e:b9:83:3e:ba:e0:ed:86:0c:17:89:48:1a:26:14:dd:
81:b1:5c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:22 2026 by rpki-client