
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9DA566D09EFB11EE94D40714C4F9AE02.roa
File: 9DA566D09EFB11EE94D40714C4F9AE02.roa (raw, json)
Hash identifier: Pl2yEjU+rtxXnt1dAnIff8s954020niuTh5JezG07QY=
Subject key identifier: 3B:2D:8C:48:F2:58:1A:33:9E:13:C8:71:8A:3F:B8:B0:3F:91:F2:DD
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F1F4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9DA566D09EFB11EE94D40714C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:03:53 +0000
ROA not before: Mon 06 Jul 2026 17:03:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138319
IP address blocks: 103.127.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61940 (0xf1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:03:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdff9-9074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:58:c2:0c:67:63:72:46:b8:21:de:52:de:
60:87:94:50:2f:3f:a2:0e:65:33:c4:5b:b0:a8:ca:
f6:0b:0d:02:d5:b0:ab:47:84:43:d7:86:62:a5:ab:
6b:b9:31:43:cb:d7:92:92:b3:4f:0d:3b:f9:73:7f:
26:bf:64:d2:e9:80:e9:e2:a0:41:ce:3f:b4:3a:00:
f8:5f:94:de:ae:19:d6:d1:c3:4c:19:9a:a5:f5:dc:
2d:f0:56:e6:fb:96:44:d8:d4:76:f0:21:42:0b:c6:
0c:85:e7:ff:bd:5d:ef:cb:7b:8c:df:60:92:fa:67:
57:89:6e:22:d0:48:1a:98:c0:47:64:0a:74:16:cc:
b1:7c:80:b3:08:f3:2d:55:86:90:90:03:72:9d:30:
37:c2:7f:fe:68:4d:be:b8:f7:e3:07:60:bb:34:c7:
ac:82:fd:19:be:7f:5b:02:37:45:d1:67:7e:5a:c3:
b9:fb:29:cc:cb:08:80:09:80:5c:33:54:07:69:31:
d1:0e:8f:e4:5f:86:6f:fb:d5:bf:06:64:c9:4a:ce:
60:76:fa:08:fb:6a:b4:43:56:38:04:ec:32:58:9b:
b6:f9:a2:a6:21:b1:15:ad:a2:41:a9:91:c0:27:bb:
07:a3:f8:a8:85:11:98:11:7e:39:eb:7e:a7:9a:99:
da:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2D:8C:48:F2:58:1A:33:9E:13:C8:71:8A:3F:B8:B0:3F:91:F2:DD
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9DA566D09EFB11EE94D40714C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.127.108.0/22
Signature Algorithm: sha256WithRSAEncryption
74:73:d2:a6:5d:cb:ab:30:41:a9:21:3b:f4:79:86:ef:9a:7f:
c7:7d:90:2a:71:2f:80:dd:cb:99:01:88:c4:50:32:76:6e:62:
81:60:70:89:4d:c2:0e:61:8f:a0:75:13:65:c6:4b:89:87:43:
f3:d1:21:39:89:7f:7e:80:74:3b:95:96:1f:47:88:16:23:c3:
b9:c1:b6:f4:6c:8a:f9:1d:d6:6c:5b:47:03:e6:2f:26:06:57:
c0:1e:7e:d7:29:bb:01:3b:30:5e:da:1f:c5:f3:ba:3e:46:58:
ee:9b:25:77:74:07:67:c5:d9:41:73:98:e7:a0:73:f9:9b:1f:
6c:a5:04:09:51:32:d9:4a:ba:40:37:9f:46:2e:31:25:86:a2:
aa:1b:b4:d9:7f:b1:2d:a1:3f:4d:59:56:ab:63:3f:d8:8b:41:
df:c1:46:46:df:1b:11:a7:d1:ca:e0:74:7d:f6:65:42:05:4b:
bc:a7:71:09:ca:fb:b2:8b:c1:8b:dc:1d:90:00:1c:b6:92:b6:
fb:f7:cb:28:d7:e0:06:4b:d7:18:f6:e7:0d:cf:bf:07:90:68:
05:d6:d3:db:72:2a:f8:f0:74:7f:81:6e:d7:86:3f:f9:64:44:
f9:90:be:a8:d6:f0:a8:10:d5:56:16:51:d9:a4:6e:5d:37:4e:
e3:78:e3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:45 2026 by rpki-client