
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC542D2AF95A11EDAB130133C4F9AE02.roa
File: AC542D2AF95A11EDAB130133C4F9AE02.roa (raw, json)
Hash identifier: RQeslI7gUl6sjIIU3DIPn7E91vuCvWTnrk8jdIBY6Wg=
Subject key identifier: 04:86:8D:24:5F:C7:5B:FA:28:12:3F:85:DB:6B:47:85:16:44:C9:8C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F52B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC542D2AF95A11EDAB130133C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:31:22 +0000
ROA not before: Mon 06 Jul 2026 17:31:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150025
IP address blocks: 103.160.142.0/23 maxlen: 24
2001:df3:5140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62763 (0xf52b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:31:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be66a-6e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:62:6a:cb:97:33:73:c9:5f:4e:6d:72:53:79:
47:87:f3:34:8b:7b:7e:c3:42:01:d2:1c:5d:c3:ae:
1f:d2:a9:03:20:32:4e:39:f1:c1:cf:3d:6c:17:90:
7a:cd:f8:8c:c9:11:83:2c:f6:a2:49:3a:99:fd:52:
98:b9:54:08:95:de:4b:da:a2:b7:cf:7c:dd:ba:5d:
d6:f5:de:76:30:cd:09:03:a0:e4:f2:74:e2:23:04:
14:0a:e4:5d:4b:6d:bb:34:0c:16:3b:42:fb:d9:58:
54:70:8b:38:c4:2e:42:41:b7:cb:13:65:50:ad:61:
ab:2e:26:ba:b3:6d:27:82:06:00:fa:c5:b2:a3:ab:
b8:f3:4f:a2:29:a8:a2:45:1a:68:ea:62:00:80:f7:
ad:54:4e:7c:56:72:31:20:a9:8a:ae:83:54:84:d1:
c2:95:ac:ae:c3:8e:67:14:c9:f4:a3:f9:42:af:88:
db:ce:b8:cd:eb:33:25:41:dd:a4:67:0e:3b:5e:46:
15:e3:3a:54:3e:8b:96:fe:9b:04:f5:b7:ca:44:99:
6b:eb:eb:50:b3:9d:8d:fa:4a:c9:eb:17:fe:f1:ab:
c2:88:b0:32:53:c4:99:8c:e8:cb:79:6d:5d:5c:13:
5f:7e:2b:0c:1b:83:2d:10:0f:9f:14:7a:47:8a:be:
ac:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:86:8D:24:5F:C7:5B:FA:28:12:3F:85:DB:6B:47:85:16:44:C9:8C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC542D2AF95A11EDAB130133C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.160.142.0/23
IPv6:
2001:df3:5140::/48
Signature Algorithm: sha256WithRSAEncryption
59:40:ac:32:05:c6:d2:2d:ec:a6:33:a0:f9:1d:0d:90:64:3c:
dc:5b:3e:a3:dd:28:35:57:99:a8:36:28:1b:0b:16:d3:a4:90:
00:4e:70:3c:a3:18:e8:76:d1:58:8a:02:c7:f4:f7:56:00:85:
cf:1b:c8:f8:a1:8b:14:dc:11:6b:0e:c4:eb:95:ff:66:15:d8:
61:f4:e3:b0:c4:56:db:b3:ce:32:0f:77:b4:47:2d:8c:20:7d:
de:a9:66:32:d4:a8:6c:72:6d:a0:1a:db:17:dc:68:1d:4b:ce:
c7:f9:f0:e2:4e:74:a4:d5:c9:2d:be:87:4a:a9:2a:e0:43:8c:
ec:79:a8:6d:12:4d:75:c7:28:29:78:15:ba:d4:cc:4d:ac:fb:
15:00:3d:bd:6b:fe:85:d1:a6:6d:cd:fe:60:bf:6f:27:33:1a:
2b:f8:03:78:f3:fc:93:7a:de:e3:7d:e7:c3:af:51:01:16:0a:
a3:3b:94:e9:8c:ea:b5:c4:c7:6e:dd:ca:12:0e:0e:93:77:8d:
00:77:05:2c:f4:81:59:ab:6a:7f:a7:d6:cc:a8:0d:12:08:bb:
4a:c0:2a:6c:c6:90:eb:cc:c1:aa:12:7d:6f:26:7f:28:07:8a:
31:83:2b:71:8e:d5:a0:0f:dd:ea:26:2f:b1:82:e6:ef:9f:9d:
67:69:3c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:00 2026 by rpki-client