
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A0E938C858FA11ED88EAAD1CC4F9AE02.roa
File: A0E938C858FA11ED88EAAD1CC4F9AE02.roa (raw, json)
Hash identifier: Lp2otHKMv+9Zbawpluzck0cJwuTA778f+QULIhZuMvM=
Subject key identifier: E0:4E:8A:EB:D6:56:BA:E6:5B:12:59:4D:28:13:AD:48:37:33:A6:1D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F547
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A0E938C858FA11ED88EAAD1CC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:32:20 +0000
ROA not before: Mon 06 Jul 2026 17:32:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150063
IP address blocks: 103.19.120.0/23 maxlen: 24
2001:df1:6fc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62791 (0xf547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:32:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be6a4-3ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:36:39:70:0b:93:ab:2c:9d:fd:94:f8:4d:5e:
53:cf:9b:d1:1c:ce:93:17:6f:ae:2c:94:45:be:e2:
10:3e:91:17:47:33:1e:ba:70:86:f2:60:d7:03:c5:
c6:31:4d:0b:a5:a3:61:a8:47:27:13:5e:fb:a3:6e:
35:f4:48:cf:41:c4:8b:fd:29:4b:dc:b4:8f:27:d0:
7b:bd:a1:fe:53:da:8c:53:ff:54:56:71:5f:fe:f0:
34:e8:be:89:ae:21:67:0b:7b:88:5e:3f:9e:95:78:
b0:ab:24:b0:c3:b2:a1:a8:4a:6e:e8:8d:0e:e2:34:
36:27:7f:7d:d6:dd:f3:f3:30:9d:c4:68:89:28:da:
69:65:ef:ae:4f:cf:e0:46:78:ad:45:f2:31:71:91:
67:f7:8d:0a:80:e6:cc:9a:bf:45:3f:34:f8:8a:03:
64:3d:22:05:14:0f:64:ed:a6:41:19:51:e2:21:c6:
93:e1:0a:1d:18:8d:6e:58:9f:9b:6c:b6:c2:0d:b9:
19:62:7b:e9:63:dd:88:7c:17:d8:c4:c7:b6:d1:98:
a8:8e:b1:5f:be:66:c6:a8:df:e9:a3:87:26:eb:c5:
2a:48:8d:84:0c:60:df:87:27:54:94:0e:43:ef:ae:
85:82:c8:7e:82:4f:fd:36:0f:ce:a4:49:73:d9:f1:
01:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4E:8A:EB:D6:56:BA:E6:5B:12:59:4D:28:13:AD:48:37:33:A6:1D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A0E938C858FA11ED88EAAD1CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.19.120.0/23
IPv6:
2001:df1:6fc0::/48
Signature Algorithm: sha256WithRSAEncryption
46:18:19:06:81:b5:60:c9:29:97:64:d1:6c:37:25:e0:eb:b5:
f9:93:45:24:e9:8a:89:ee:b5:d5:60:25:1e:07:99:83:28:68:
a6:e4:e6:07:1f:bb:c2:16:9d:52:4b:fa:21:ab:4b:bc:51:ab:
fa:de:e1:d0:8d:57:f2:9c:72:8b:67:5b:6f:12:f8:5d:8e:b0:
ce:ba:a5:1b:ea:37:9f:3a:8c:d2:e8:de:01:5d:ca:7d:e8:f8:
ca:42:62:ae:e0:a4:89:3e:1e:5c:91:66:01:f6:5b:16:50:bd:
59:5c:73:39:cd:0f:c8:e9:8c:fc:4d:37:a1:ea:8f:b4:18:db:
c8:84:7e:8d:00:9e:ed:fd:92:4a:b6:9a:8b:b6:ef:ac:91:2e:
49:82:b8:7d:18:6d:50:c4:04:63:2f:ad:43:dc:48:af:7c:57:
64:b9:dd:3f:d8:2e:e4:30:a3:f7:f5:45:c6:5e:64:4a:a7:3a:
7d:cf:14:3d:7d:66:12:a4:f6:0e:88:56:d5:7a:80:41:bb:7c:
ab:60:66:47:17:8b:6a:cf:30:cd:0d:e7:0e:34:06:27:5e:3b:
2b:45:22:1d:f2:67:99:2f:6a:e3:f5:0c:41:a3:62:35:19:82:
df:17:86:32:dd:ea:5f:b8:25:83:4b:0f:cf:5e:d7:56:08:10:
43:82:3c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:47:46 2026 by rpki-client