
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A1199EF62F3811F1BCC23E8CAA833773.roa
File: A1199EF62F3811F1BCC23E8CAA833773.roa (raw, json)
Hash identifier: D7klXQhaHh0GO9rl/zNJmYTIyhk9pqBw8w/Avl8jEBk=
Subject key identifier: 32:CF:23:6B:63:6A:E8:4C:EB:F7:74:3A:DF:5F:96:F6:31:9B:33:5E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F0DC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A1199EF62F3811F1BCC23E8CAA833773.roa
Signing time: Mon 06 Jul 2026 16:54:35 +0000
ROA not before: Mon 06 Jul 2026 16:54:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136645
IP address blocks: 103.98.20.0/22 maxlen: 24
2401:760::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61660 (0xf0dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:54:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bddcb-f97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c1:ff:0f:e1:3a:e8:57:ee:e6:6e:6c:84:55:
7b:e9:c3:5a:76:ba:0f:46:34:2a:71:76:5d:bc:b1:
3d:6f:ca:c3:27:59:11:9c:3f:90:8b:1b:d5:14:bd:
53:c3:61:1e:81:c4:06:12:74:65:09:b6:0e:95:8f:
3a:2a:7b:52:7a:4b:71:37:71:94:87:2b:0b:2a:b3:
13:5d:e8:71:8d:85:28:86:d4:f4:35:b0:99:ee:74:
e4:de:55:7f:bb:47:9f:d9:c1:7e:7b:87:f3:83:15:
f1:2e:92:63:70:46:cf:7d:12:35:f8:4e:1c:bb:da:
bc:54:94:1a:14:d1:ec:87:cb:08:37:46:2b:5b:2f:
24:da:db:44:80:9c:8d:9d:b7:ad:bd:43:43:f1:8c:
63:f3:1d:53:db:5c:92:9b:01:40:9f:b0:43:e7:41:
d4:67:c4:fa:52:63:f4:6f:55:ac:84:14:1f:2e:78:
a9:c3:27:e4:49:87:81:f7:e5:29:68:85:53:61:24:
07:87:55:c0:8e:da:0e:5e:f7:63:5a:e0:cd:31:dc:
d2:3f:9a:82:98:6b:0e:c4:15:8a:77:8e:36:0c:7f:
ad:1d:2e:4f:42:0f:99:0d:36:f2:e5:69:3c:03:be:
ed:ec:71:4a:9b:f7:8e:55:1f:f8:51:d0:74:80:19:
46:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CF:23:6B:63:6A:E8:4C:EB:F7:74:3A:DF:5F:96:F6:31:9B:33:5E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A1199EF62F3811F1BCC23E8CAA833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.98.20.0/22
IPv6:
2401:760::/32
Signature Algorithm: sha256WithRSAEncryption
6f:33:99:20:09:23:50:52:f6:3d:e3:f6:49:57:38:41:ac:5b:
6e:86:f9:7a:16:1c:e2:4a:a3:6b:37:f7:98:2b:d9:25:3a:96:
db:1e:40:93:a3:9c:4a:ae:e1:1b:99:20:3a:66:fd:fc:84:56:
e9:22:e0:36:79:fc:57:d5:7f:55:5a:35:0c:33:f1:9a:3c:b9:
21:97:41:d4:b6:8b:c7:1b:fa:f2:53:d5:05:0e:e9:8a:9d:0c:
9b:3e:2a:ee:1c:b7:10:0c:18:3a:f7:77:24:9c:41:79:a0:4e:
d2:e1:a3:67:e8:4c:a1:28:00:f2:ae:aa:86:d1:51:dc:2d:a2:
17:7b:28:f9:34:5a:cb:18:41:ad:f8:6c:e4:5f:78:43:63:a7:
c6:ef:eb:75:dd:80:33:b3:a7:f0:f5:29:07:27:31:2c:d4:56:
7c:05:98:8e:cb:60:0c:da:62:6b:c4:a9:cc:4a:bc:d3:14:3a:
6b:9d:95:e8:3b:d6:4b:d8:60:59:26:df:2d:bf:3c:60:a8:2b:
eb:91:86:89:20:7d:34:aa:df:19:ed:2e:5e:2d:ba:c1:71:9c:
5b:c4:18:e8:8d:89:35:e2:18:ce:41:ca:15:23:49:2b:f4:8f:
da:10:61:75:67:46:1b:9f:2f:ed:57:8f:93:f4:4a:f9:c7:e6:
82:e3:53:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:38 2026 by rpki-client