
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ACB23E3AAB7411ED9FFF3432C4F9AE02.roa
File: ACB23E3AAB7411ED9FFF3432C4F9AE02.roa (raw, json)
Hash identifier: gXjimnWM9pAyG0ovLaX8J9je9vq/IgykvcR0dhAGK5M=
Subject key identifier: 7B:38:6F:AA:7C:07:32:E6:AD:F6:58:16:AD:8F:2F:77:A0:C3:E9:E1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F85E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ACB23E3AAB7411ED9FFF3432C4F9AE02.roa
Signing time: Tue 14 Jul 2026 09:57:05 +0000
ROA not before: Tue 14 Jul 2026 09:57:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142448
IP address blocks: 103.75.60.0/23 maxlen: 24
163.128.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63582 (0xf85e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 14 09:57:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a5607f1-6ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2c:15:42:a2:c6:b9:58:2e:93:fa:23:c9:04:
ca:b9:c2:eb:ec:59:00:f2:03:4d:43:25:31:9f:8c:
4c:38:f5:13:27:eb:12:73:5d:f6:10:77:cf:86:f8:
ac:85:e2:a4:7c:0b:90:9d:48:2b:4b:30:0e:79:b7:
f3:15:f4:da:a4:89:26:cf:7a:b3:5c:79:71:78:cf:
e8:35:95:dc:43:ed:33:99:fa:49:2e:2c:13:e3:53:
ec:4d:8c:4c:67:6f:87:25:7b:3a:74:f5:31:ab:c6:
fb:7a:37:1b:80:bd:bb:77:30:7c:cc:68:ad:da:2c:
f8:1d:96:40:b9:af:d6:01:e9:0f:71:b0:26:31:4a:
ba:f0:4e:5a:8b:e4:a2:b5:50:91:25:e5:39:6c:3f:
7c:3a:28:03:fd:36:f0:dc:8c:8d:d4:ae:6c:5e:a2:
48:11:a5:e2:27:24:b1:90:25:41:50:a9:99:36:0a:
45:c7:1c:c2:c7:61:bf:d8:e3:07:8a:9c:36:30:f7:
30:07:96:e2:7e:f1:e4:46:da:d1:c7:6f:26:4d:e6:
71:c7:8e:98:d0:f9:5a:a5:a5:b9:15:9b:26:99:62:
05:66:4f:3d:d6:c1:47:05:97:4f:e5:f5:e9:d3:c2:
dd:c2:31:ed:76:b5:d4:2c:3f:17:79:63:a4:f8:7c:
50:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:38:6F:AA:7C:07:32:E6:AD:F6:58:16:AD:8F:2F:77:A0:C3:E9:E1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ACB23E3AAB7411ED9FFF3432C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.75.60.0/23
163.128.2.0/23
Signature Algorithm: sha256WithRSAEncryption
36:e2:d6:d5:fa:24:44:10:61:8c:04:b1:a8:31:90:35:8f:ff:
32:68:6a:8f:3f:ac:bf:b1:0e:8e:2c:53:ea:ef:2b:a7:12:83:
a3:76:6a:2c:83:fc:bf:e0:03:ee:89:62:0f:ed:bc:de:0b:e7:
84:ca:3a:11:d7:5a:25:f5:31:0b:1a:13:dd:f0:e9:73:ba:2f:
25:d7:30:37:bf:7f:49:0a:19:23:db:b7:79:8b:68:7e:56:63:
53:ac:b7:d7:69:0f:af:a1:09:94:37:70:75:bd:c2:57:6d:dd:
dc:fc:d4:ae:6e:b2:5c:60:b8:26:f7:c0:db:c9:24:b1:dd:51:
bc:83:14:cf:98:b6:96:3a:99:d5:9c:2e:be:05:1f:f2:8f:a6:
ad:b7:6d:fb:98:6b:93:42:c6:ba:0b:4d:cf:85:fb:8b:6e:3d:
f3:36:4e:a8:27:27:31:a0:9f:59:79:82:c6:b5:d8:54:9b:a2:
06:f4:ef:2b:79:bf:50:42:42:3b:ae:7b:ed:43:49:1b:45:bc:
0c:0a:6b:fa:29:bc:ac:ec:d6:11:24:aa:86:e0:7b:8b:9f:15:
7e:7f:3d:ce:89:52:38:ca:09:ed:dc:c4:7f:78:4b:2e:6c:15:
cf:2e:3a:99:b4:7d:27:1f:82:5f:45:5d:eb:6c:91:74:65:e3:
78:36:1d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:48:21 2026 by rpki-client