
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7970224956B11EDAE87EE10C4F9AE02.roa
File: A7970224956B11EDAE87EE10C4F9AE02.roa (raw, json)
Hash identifier: fOL5YdCf/k1cqmFLTdZ3Ewvte3sMUnXZVosnLChQ6ys=
Subject key identifier: 38:3A:CB:DC:28:F5:38:A8:7A:A0:49:9A:42:41:8D:31:33:58:F7:C1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E6D8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7970224956B11EDAE87EE10C4F9AE02.roa
Signing time: Sun 31 May 2026 17:13:58 +0000
ROA not before: Sun 31 May 2026 17:13:58 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 141301
IP address blocks: 103.160.166.0/23 maxlen: 23
103.160.167.0/24 maxlen: 24
103.170.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59096 (0xe6d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:13:58 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6c56-4848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d7:f4:93:4d:5b:0b:1a:e3:1f:91:fb:e5:3a:
14:a3:66:d0:48:7e:69:22:e8:3f:5b:82:67:f5:d0:
14:05:3a:19:42:54:e4:5d:24:de:a3:89:37:86:20:
79:23:f9:c9:8c:60:a5:60:1e:e8:c2:cc:e5:8d:d0:
90:0c:f2:40:ec:e2:62:df:ba:bf:db:27:4a:d2:e2:
8b:0e:e4:04:95:53:64:34:c4:d9:fc:21:aa:2a:e1:
72:e4:4f:50:6a:b6:0b:04:85:25:f8:8b:b9:05:a5:
29:df:05:22:5c:54:cc:f6:00:7a:af:a2:8e:19:44:
21:07:4e:89:72:a2:5c:4f:77:bb:e4:9b:ad:eb:b6:
96:34:fb:62:c7:c2:cc:87:92:7c:90:d3:70:f2:95:
92:7a:85:10:e3:06:44:a0:10:1a:4a:39:29:6e:02:
f8:13:c7:e5:ec:cf:88:ed:93:ac:d4:ad:b2:19:2f:
f7:fc:a1:6e:a6:df:05:72:85:a5:60:70:d9:74:d4:
b6:98:41:4f:16:c2:3c:44:fb:a8:cd:e7:e4:05:43:
0f:95:fa:a1:69:66:c1:ad:95:3c:0b:c1:00:18:15:
e1:ad:96:91:22:2e:ee:95:0c:e0:40:18:ca:26:96:
38:23:55:69:8b:f1:d8:db:67:9a:fb:aa:46:5d:4a:
c4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3A:CB:DC:28:F5:38:A8:7A:A0:49:9A:42:41:8D:31:33:58:F7:C1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7970224956B11EDAE87EE10C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.160.166.0/23
103.170.64.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:d6:ac:99:72:8e:fa:02:3e:f1:40:ed:b1:d1:2b:bd:71:6c:
a3:da:cb:ab:d6:6c:7e:be:4b:e1:06:89:45:c3:7d:c4:13:f8:
ee:46:9a:da:66:bd:48:33:31:44:64:f9:d3:c9:49:8e:7e:f3:
9a:cf:eb:3c:a1:d4:e9:b7:4b:fe:0a:82:15:2d:54:48:dc:ce:
35:b0:ba:65:97:1d:1c:19:c4:90:5f:31:73:d7:7c:59:ad:63:
5f:0c:1a:e3:4f:bc:33:8f:5c:53:5d:96:51:11:52:43:06:3b:
9f:8a:5c:f3:8c:26:a3:f3:1f:16:72:1d:c5:51:3c:3f:ba:dd:
3c:de:f6:3a:2b:1a:be:40:93:53:04:02:fd:03:f5:29:a9:21:
c4:0d:29:ef:7b:3a:8e:5d:55:87:61:45:05:86:e6:ce:2d:f3:
6c:c6:ce:1e:64:9d:ab:2e:eb:b5:b2:b4:4a:b4:13:f9:74:6c:
8f:7a:81:38:ba:48:34:3f:0e:f1:87:21:bb:02:50:98:ca:52:
e3:59:f0:66:df:64:6e:b1:b4:85:ab:aa:ab:ce:bd:98:f2:9a:
9c:b7:6d:67:52:43:6f:96:c8:91:6c:4b:53:94:67:bc:83:5f:
96:f5:b7:c8:5f:e1:d4:6b:37:c2:5a:48:f3:40:3a:a4:15:a1:
ee:e3:0b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:04 2026 by rpki-client