
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A549057E0D3911EB8AD0FD2AC4F9AE02.roa
File: A549057E0D3911EB8AD0FD2AC4F9AE02.roa (raw, json)
Hash identifier: Jkm8dYmg0+zdmOZWA1qLHzNzNpr2G73hP5aCgElDdaU=
Subject key identifier: 96:74:DE:23:63:A1:42:25:7B:50:38:72:5B:80:A5:2C:C7:E9:67:D2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F001
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A549057E0D3911EB8AD0FD2AC4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:47:29 +0000
ROA not before: Mon 06 Jul 2026 16:47:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135693
IP address blocks: 103.74.244.0/22 maxlen: 22
103.74.244.0/24 maxlen: 24
103.74.245.0/24 maxlen: 24
103.74.246.0/24 maxlen: 24
103.74.247.0/24 maxlen: 24
103.141.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61441 (0xf001)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:47:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdc21-cdf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:f7:5a:cc:3b:06:55:2a:51:08:2c:17:3d:
1d:4a:d8:cf:7e:25:70:50:6f:f7:53:98:5a:90:f0:
46:98:04:66:cc:7a:b7:28:90:fc:8a:60:90:f7:9f:
4a:be:0d:71:8d:9f:cc:96:87:34:2f:95:ff:29:67:
34:55:d0:d3:60:7f:77:20:94:02:d0:8a:0f:55:c4:
f9:d3:59:d3:6e:b5:d8:72:1c:35:5b:36:51:95:84:
dc:a5:19:c1:ec:c3:4b:7d:69:4c:7a:ca:f3:16:a0:
09:b2:42:d1:02:5b:ea:37:99:6c:ab:91:6c:f9:9e:
9d:d9:c9:82:b9:35:0a:c1:54:73:1b:3d:8f:dd:8a:
89:c1:bd:6b:30:6a:76:31:70:53:19:31:17:88:e4:
e2:34:f3:df:14:5b:d8:e1:d4:1f:5d:a5:78:0e:ba:
ec:73:0b:13:c2:6c:60:de:c2:64:ee:d6:5c:a1:57:
30:2a:87:75:04:d0:48:7d:24:4e:d9:fc:86:5c:70:
9f:e1:0b:e9:1b:bc:6c:b8:72:c7:24:89:15:63:4f:
46:16:ca:78:33:22:0e:4b:3f:2d:e5:14:0d:74:c7:
fc:72:bb:1a:cf:97:10:00:46:ab:53:e1:19:07:7f:
fd:72:69:98:46:4a:5f:41:a7:bf:cd:f2:e3:f1:5c:
6c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:74:DE:23:63:A1:42:25:7B:50:38:72:5B:80:A5:2C:C7:E9:67:D2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A549057E0D3911EB8AD0FD2AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.74.244.0/22
103.141.99.0/24
Signature Algorithm: sha256WithRSAEncryption
57:88:a3:1e:a9:c1:4e:88:12:0b:38:a9:8c:11:99:7d:e0:9e:
81:1d:1f:0d:d4:ce:35:7a:5d:85:81:e6:e3:ef:5c:34:33:af:
4a:8e:10:e0:aa:53:ab:48:1c:c7:38:af:8b:c1:00:46:ab:7f:
e4:f9:e0:09:ac:5c:90:22:dd:2d:b8:6b:dc:fa:b4:fb:f9:f9:
69:fc:94:b5:69:6c:48:e6:2f:8d:b8:f1:45:e5:c6:0c:ae:fa:
b1:e0:f6:d6:76:ba:01:f0:b2:a6:58:12:be:22:e5:7b:61:96:
01:cb:98:ed:f8:88:83:b7:ee:21:13:72:2b:87:d8:d8:46:82:
f6:dd:ca:69:e6:b1:27:84:3b:3e:f3:ba:e8:3d:2e:45:72:c4:
8e:dc:6a:d1:f7:f2:8b:25:50:7b:53:55:d9:aa:4b:93:e9:6d:
6e:1c:3f:6b:b0:6d:41:0f:37:2d:8a:ea:ab:32:52:31:cd:d7:
eb:f8:b8:35:9e:ea:b8:b0:c2:06:0d:b5:1a:7e:1f:54:e6:3c:
2c:29:4d:6c:2c:08:95:b0:bb:1a:ff:f6:21:51:b1:a7:85:e0:
c8:91:da:28:f1:57:df:ab:3d:53:40:4f:ad:5f:04:08:d9:24:
48:b4:78:e5:ad:99:f6:f8:0a:2b:7d:41:d5:b7:39:c4:66:69:
cb:6b:81:28
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDAPABMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2NDcyOVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmRjMjEtY2RmOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKlR91rMOwZVKlEILBc9HUrYz34lcFBv91OYWpDwRpgEZsx6tyiQ/IpgkPef
Sr4NcY2fzJaHNC+V/ylnNFXQ02B/dyCUAtCKD1XE+dNZ02612HIcNVs2UZWE3KUZ
wezDS31pTHrK8xagCbJC0QJb6jeZbKuRbPmendnJgrk1CsFUcxs9j92KicG9azBq
djFwUxkxF4jk4jTz3xRb2OHUH12leA667HMLE8JsYN7CZO7WXKFXMCqHdQTQSH0k
Ttn8hlxwn+EL6Ru8bLhyxySJFWNPRhbKeDMiDks/LeUUDXTH/HK7Gs+XEABGq1Ph
GQd//XJpmEZKX0Gnv83y4/FcbOMCAwEAAaOCAmYwggJiMB0GA1UdDgQWBBSWdN4j
Y6FCJXtQOHJbgKUsx+ln0jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E1NDkwNTdF
MEQzOTExRUI4QUQwRkQyQUM0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAmdK9AMEAGeNYzANBgkqhkiG9w0BAQsFAAOCAQEAV4ijHqnBTogS
CzipjBGZfeCegR0fDdTONXpdhYHm4+9cNDOvSo4Q4KpTq0gcxzivi8EARqt/5Png
CaxckCLdLbhr3Pq0+/n5afyUtWlsSOYvjbjxReXGDK76seD21na6AfCyplgSviLl
e2GWAcuY7fiIg7fuIRNyK4fY2EaC9t3KaeaxJ4Q7PvO66D0uRXLEjtxq0ffyiyVQ
e1NV2apLk+ltbhw/a7BtQQ83LYrqqzJSMc3X6/i4NZ7quLDCBg21Gn4fVOY8LClN
bCwIlbC7Gv/2IVGxp4XgyJHaKPFX36s9U0BPrV8ECNkkSLR45a2Z9vgKK31B1bc5
xGZpy2uBKA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:41 2026 by rpki-client