
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC9522204C7111EE924EDD13C4F9AE02.roa
File: AC9522204C7111EE924EDD13C4F9AE02.roa (raw, json)
Hash identifier: G4z/Cv8MADUInOEE23p04oF3MfI+Zv2Sbz1ObkKtnNU=
Subject key identifier: C4:20:C9:D2:5D:C7:85:A9:06:45:41:C7:65:DE:F0:74:7D:25:D5:03
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F5C6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC9522204C7111EE924EDD13C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:36:22 +0000
ROA not before: Mon 06 Jul 2026 17:36:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151103
IP address blocks: 103.242.83.0/24 maxlen: 24
163.223.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62918 (0xf5c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:36:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be795-ccd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2f:ea:66:5b:30:0e:2c:14:ca:f6:59:d3:0b:
46:ae:fc:81:6a:fb:84:7c:c5:3c:f0:d2:cb:96:a9:
38:e4:42:1a:2a:5a:e6:6b:de:04:17:8c:58:45:db:
ba:9e:90:86:9d:ce:51:19:34:10:86:b2:33:58:0a:
b9:31:0d:0b:dc:8b:8c:72:4a:a3:72:89:39:c7:f4:
80:09:5a:18:c1:df:3d:f2:62:7a:78:6d:80:b7:f1:
98:43:40:f9:3d:dd:d6:a5:38:3a:e9:2e:dd:70:51:
d2:1a:aa:5d:19:e1:8c:b5:d9:a2:a6:fd:89:68:79:
ed:73:59:8c:1d:1d:f1:bb:de:ac:60:e7:5a:49:82:
03:5b:d5:b5:c7:49:49:7e:ba:b1:b7:25:6b:17:57:
6f:73:a0:93:a7:16:5f:e0:03:cb:ea:18:fe:2a:f9:
58:ad:7f:5e:39:79:62:9d:b4:c4:96:81:52:9f:e9:
af:68:e7:cd:35:b7:99:e6:60:44:9c:54:df:a5:cf:
7f:25:ff:5e:83:69:a2:0d:cb:95:c9:df:63:30:ef:
02:9f:50:6c:83:f7:8a:bc:cd:c8:5d:39:3e:bc:30:
85:7a:59:1c:47:d8:2c:a1:98:93:80:20:4e:ba:c8:
bf:7c:8c:a7:21:18:94:83:90:4f:3b:da:b9:79:24:
05:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:20:C9:D2:5D:C7:85:A9:06:45:41:C7:65:DE:F0:74:7D:25:D5:03
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC9522204C7111EE924EDD13C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.242.83.0/24
163.223.213.0/24
Signature Algorithm: sha256WithRSAEncryption
98:d9:bc:99:ec:ad:60:70:41:aa:48:86:bf:fb:13:d2:ef:11:
7b:6f:24:74:3b:ce:55:3f:eb:85:5b:cb:5a:8a:c8:30:6a:ce:
ce:d0:a5:41:76:4c:db:c2:f6:75:a6:43:62:02:53:5a:a7:1c:
d3:b7:9b:53:71:81:a6:8e:0d:59:52:c3:8b:f3:09:c1:c1:90:
ec:54:a2:8a:63:39:bc:57:29:73:aa:54:e6:c4:c7:3a:b9:c3:
ea:68:e8:eb:c8:e3:2b:c4:7f:ce:ae:c2:41:03:dd:36:4e:9c:
37:e7:29:86:f1:46:a9:95:1d:ce:3a:35:9f:d4:70:52:ba:d1:
92:79:b5:c1:00:f3:ce:4a:90:d7:25:63:93:22:ab:8d:73:0e:
20:54:07:be:6e:36:8c:28:6a:08:bc:d9:58:f3:16:31:e2:fc:
39:b5:cd:e8:86:06:b5:e4:18:ee:88:8e:09:5c:fa:51:1c:0a:
d8:cf:9a:e6:21:99:d0:2f:df:1c:08:68:4f:cf:1d:e9:4a:dc:
9b:d2:c0:04:6a:b0:77:e8:a0:be:b2:c4:6a:2a:01:7f:67:78:
c6:74:29:ca:ea:b4:8b:60:db:6a:0d:76:a8:88:85:41:00:25:
91:df:cb:bb:89:1c:2c:6e:9a:69:7b:be:b3:6b:37:f8:28:39:
e7:67:3e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:41 2026 by rpki-client