
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/982EE556B67A11EDBF54387EC4F9AE02.roa
File: 982EE556B67A11EDBF54387EC4F9AE02.roa (raw, json)
Hash identifier: l+hjnri5L06oLzEU9zn0FToCnVxTHILO3hIm0LYvv4g=
Subject key identifier: D6:11:EE:4B:9A:46:C9:31:32:E4:A8:DF:8C:15:9A:95:D6:9D:CC:C0
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F196
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/982EE556B67A11EDBF54387EC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:00:42 +0000
ROA not before: Mon 06 Jul 2026 17:00:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137643
IP address blocks: 103.194.228.0/24 maxlen: 24
203.57.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61846 (0xf196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:00:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdf3a-cb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9e:3c:8e:8b:98:7c:06:2e:aa:90:12:b5:e8:
a1:b6:0c:1a:c5:fb:ca:51:81:76:78:a2:e8:da:4e:
bb:34:0d:e4:f5:00:04:00:eb:88:d9:b9:e5:83:a3:
d7:50:53:f0:54:a0:b6:da:e0:73:88:a9:62:ae:00:
d1:df:7c:20:ae:8f:54:68:02:27:81:2d:d8:ac:b9:
da:44:dc:18:d9:43:53:64:cb:ce:8e:6f:28:31:6a:
03:bb:29:ac:6d:9a:73:bf:59:51:c7:81:de:00:97:
f3:e8:1a:d6:d9:f9:d0:bf:5b:01:d9:8f:79:a8:5d:
3f:6b:75:ec:33:49:0b:87:83:76:7a:9e:d6:fc:1a:
b1:9d:cc:67:f1:36:06:c9:2a:22:ca:e0:88:9e:b3:
c5:36:49:c3:67:d9:cb:59:02:93:94:28:59:6d:69:
c7:ca:d3:56:3b:de:e8:c8:50:b9:a0:17:42:b9:14:
26:18:1e:01:89:3b:e3:53:6c:f5:be:04:a9:95:9e:
65:8e:27:fc:3e:ee:49:f0:e8:e3:fc:33:b1:46:1d:
d2:06:cc:51:69:4c:19:ce:c9:ff:05:73:54:64:6b:
85:64:50:cd:ca:36:44:9d:03:60:22:40:d6:3e:83:
b4:f6:c4:07:2e:52:08:80:c8:90:c5:df:1d:aa:93:
9c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:11:EE:4B:9A:46:C9:31:32:E4:A8:DF:8C:15:9A:95:D6:9D:CC:C0
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/982EE556B67A11EDBF54387EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.194.228.0/24
203.57.85.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:ff:60:81:16:73:ef:b8:4f:3a:11:0c:4b:dd:26:b6:73:29:
9e:04:aa:8f:70:70:8b:62:5f:cd:4b:e1:21:ed:ac:ac:91:cd:
ec:d1:ea:e2:69:3e:86:cc:de:63:35:29:8a:4d:95:03:7c:48:
ef:45:a0:ec:3c:a8:e5:f2:b5:76:fc:fe:cd:9f:a3:a8:dd:5c:
75:b8:0f:0a:a3:8b:a2:af:25:fe:ee:d3:45:06:1d:45:b0:a7:
11:bc:40:7b:cc:3f:7d:27:58:75:21:85:17:f7:c5:64:8e:74:
fc:1c:53:e5:74:bc:65:bc:f1:17:58:82:dc:81:04:32:78:34:
26:84:21:25:3a:d8:78:a9:10:9d:5e:cf:9a:d4:e8:a2:3e:65:
c1:be:2b:64:d8:8c:9b:36:5d:2d:8c:dc:23:ac:aa:eb:90:88:
0f:08:3a:dd:73:fa:b6:dd:6e:3c:f3:3b:f8:a9:0c:bf:ac:d9:
42:f7:41:17:30:76:d5:fe:69:a9:55:0b:fe:b6:04:4b:cd:39:
3b:d5:78:7e:c9:54:30:44:7d:29:35:c1:a1:9d:b6:a9:31:33:
1b:b5:81:ea:88:60:86:98:03:d5:fe:2d:89:78:7b:4b:76:8d:
9e:08:f3:90:c9:42:98:1f:46:48:e2:7a:b0:db:09:72:20:6b:
b2:a0:f4:cf
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDAPGWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MDA0MloXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmRmM2EtY2I5ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAI2ePI6LmHwGLqqQErXoobYMGsX7ylGBdnii6NpOuzQN5PUABADriNm55YOj
11BT8FSgttrgc4ipYq4A0d98IK6PVGgCJ4Et2Ky52kTcGNlDU2TLzo5vKDFqA7sp
rG2ac79ZUceB3gCX8+ga1tn50L9bAdmPeahdP2t17DNJC4eDdnqe1vwasZ3MZ/E2
BskqIsrgiJ6zxTZJw2fZy1kCk5QoWW1px8rTVjve6MhQuaAXQrkUJhgeAYk741Ns
9b4EqZWeZY4n/D7uSfDo4/wzsUYd0gbMUWlMGc7J/wVzVGRrhWRQzco2RJ0DYCJA
1j6DtPbEBy5SCIDIkMXfHaqTnJkCAwEAAaOCAmYwggJiMB0GA1UdDgQWBBTWEe5L
mkbJMTLkqN+MFZqV1p3MwDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzk4MkVFNTU2
QjY3QTExRURCRjU0Mzg3RUM0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAGfC5AMEAMs5VTANBgkqhkiG9w0BAQsFAAOCAQEATv9ggRZz77hP
OhEMS90mtnMpngSqj3Bwi2JfzUvhIe2srJHN7NHq4mk+hszeYzUpik2VA3xI70Wg
7Dyo5fK1dvz+zZ+jqN1cdbgPCqOLoq8l/u7TRQYdRbCnEbxAe8w/fSdYdSGFF/fF
ZI50/BxT5XS8ZbzxF1iC3IEEMng0JoQhJTrYeKkQnV7PmtTooj5lwb4rZNiMmzZd
LYzcI6yq65CIDwg63XP6tt1uPPM7+KkMv6zZQvdBFzB21f5pqVUL/rYES805O9V4
fslUMER9KTXBoZ22qTEzG7WB6ohghpgD1f4tiXh7S3aNngjzkMlCmB9GSOJ6sNsJ
ciBrsqD0zw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:58 2026 by rpki-client