
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A41A54F88C3F11EF9889DE37C4F9AE02.roa
File: A41A54F88C3F11EF9889DE37C4F9AE02.roa (raw, json)
Hash identifier: pLFNOZdcj+OAnRp+7DT/VQadR5pVyJ69oUvbXy8RTgg=
Subject key identifier: AD:18:8F:19:CF:6F:01:DD:A1:10:3B:0F:3A:6E:E3:6F:A1:8D:82:08
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F186
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A41A54F88C3F11EF9889DE37C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:00:09 +0000
ROA not before: Mon 06 Jul 2026 17:00:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137619
IP address blocks: 103.138.126.0/24 maxlen: 24
103.141.110.0/23 maxlen: 24
210.79.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61830 (0xf186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:00:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdf19-cb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:64:7a:d3:32:05:ab:0c:d9:72:ed:99:d6:bf:
8f:fb:f4:69:03:1a:7f:22:79:b5:84:a6:19:7a:4f:
df:ee:84:12:c1:c0:2f:56:d2:ee:4c:b5:d4:39:65:
4b:85:ac:f2:67:97:ca:19:4e:fb:91:05:fb:d4:c1:
43:44:d6:f1:b7:f6:3e:a2:c7:53:65:89:c5:2f:35:
45:77:35:e1:3b:2a:74:ca:bb:fb:cb:cb:72:cb:77:
60:e2:27:0f:3d:91:a8:ba:c5:49:b5:b6:6f:a1:8c:
6a:8e:2d:fc:53:6b:ff:75:92:b2:37:c5:19:8a:5a:
7c:78:43:68:36:22:36:05:c8:5f:7d:f0:06:03:7d:
13:a4:ad:b3:5a:4d:97:55:34:3e:79:c9:f5:29:b1:
07:be:18:a8:ea:b6:c5:09:74:1a:44:f0:48:d4:af:
2f:f5:5e:af:73:02:39:17:67:12:26:d5:e9:b0:f9:
75:45:2e:07:44:f9:2a:99:7d:f0:0e:f6:6c:bd:07:
85:04:66:2a:63:e2:ac:26:bf:a7:25:7d:6e:8c:33:
ec:89:de:d4:c7:61:05:1b:89:d6:6d:da:9b:24:cd:
b0:ab:f7:22:c0:55:de:e2:c1:01:57:9c:61:60:bb:
2f:31:f3:b8:f8:c6:7b:5b:3d:a4:53:12:5f:8a:4b:
37:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:18:8F:19:CF:6F:01:DD:A1:10:3B:0F:3A:6E:E3:6F:A1:8D:82:08
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A41A54F88C3F11EF9889DE37C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.126.0/24
103.141.110.0/23
210.79.152.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:13:b1:35:9e:24:d9:f5:f1:79:0e:69:4e:81:41:7e:29:56:
fc:6e:b3:c3:14:94:24:ce:60:d0:25:a1:4d:73:6e:95:8f:05:
d6:91:52:e2:79:f4:a6:cd:8b:29:93:6f:7e:07:2e:09:ef:2b:
2d:b7:a9:7f:01:6f:7d:ad:60:24:5c:8c:46:c3:95:56:56:f8:
e6:43:86:db:74:e5:90:d6:f2:62:63:5f:5b:c6:c2:d1:ca:30:
5a:bf:cc:ce:5c:a0:b3:08:3e:3f:af:90:17:92:ab:13:93:e4:
8e:27:ca:5e:6f:98:a3:aa:73:02:62:f5:ab:d5:48:4f:56:3f:
ea:e7:ff:8e:bc:8f:ac:1f:49:d3:52:a4:a6:5e:16:8f:96:08:
54:16:33:78:92:5c:e7:78:25:e8:80:c8:d0:cc:3a:6b:86:03:
48:57:eb:49:ab:aa:fa:0f:8c:ba:7d:69:04:f5:f2:16:6b:78:
92:b3:d9:29:8b:cd:f5:b4:0b:b2:fa:76:c6:62:e8:f5:e7:76:
ff:c2:62:06:db:3c:45:90:fd:2c:92:ad:0f:34:db:27:d4:e5:
de:cd:c3:b8:76:a2:d1:1b:4a:be:ee:ba:7e:13:49:e4:91:06:
90:91:d9:d1:58:7d:b0:e4:5e:b1:c4:31:5f:56:f7:b3:d7:e8:
ee:e6:c0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:06 2026 by rpki-client