
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AE7F700021B611ECB5DADC4EC4F9AE02.roa
File: AE7F700021B611ECB5DADC4EC4F9AE02.roa (raw, json)
Hash identifier: XgJtbxohhO1Wx5Sz4kfqfF7biinut9MpjXfbfNzcsoM=
Subject key identifier: 87:28:9E:18:A2:F1:78:C3:41:AD:0E:70:EE:3F:0B:62:66:BF:1C:86
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F414
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AE7F700021B611ECB5DADC4EC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:22:06 +0000
ROA not before: Mon 06 Jul 2026 17:22:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146900
IP address blocks: 103.173.206.0/23 maxlen: 24
2407:edc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62484 (0xf414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:22:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be43e-4dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:59:36:2c:18:af:fd:db:11:a5:9d:fe:fd:
1f:0d:65:56:98:12:1a:d8:19:7d:68:6b:d9:7d:45:
27:5b:bc:12:41:7e:2b:e4:af:ce:3a:1c:d8:b0:de:
1a:68:97:cc:da:b0:05:49:fa:64:b0:18:77:b5:e4:
db:70:3d:f7:9e:81:82:73:2f:59:ed:99:76:b4:b9:
23:8c:c2:d0:32:22:a7:78:29:e8:5a:cf:7d:f1:81:
1e:cd:b9:24:57:39:6f:c2:0c:80:11:40:ee:dc:d6:
01:01:83:ff:62:80:62:b2:ed:e3:4a:ae:e9:26:0f:
96:93:db:c9:30:11:92:1f:97:4f:d2:73:58:71:9f:
eb:df:06:1e:da:81:b7:90:e9:ee:b8:d5:d2:55:88:
34:0c:ff:f6:e4:a9:b9:cd:0e:43:80:07:2e:52:49:
80:82:21:cb:a3:62:27:6c:0f:35:b5:8e:aa:d3:d6:
a4:e2:3f:db:1d:1d:5f:90:b3:fc:97:b4:d5:58:0d:
93:f0:12:63:3f:ce:27:b6:9b:62:f4:df:88:6a:d3:
37:c7:8f:ad:33:d6:8b:73:18:02:99:ef:ef:22:84:
06:80:1d:f7:e8:28:b2:7a:3e:0b:23:33:08:73:02:
b4:d2:e2:ca:a6:5f:ef:9c:30:bb:70:03:a7:2c:91:
04:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:28:9E:18:A2:F1:78:C3:41:AD:0E:70:EE:3F:0B:62:66:BF:1C:86
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AE7F700021B611ECB5DADC4EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.173.206.0/23
IPv6:
2407:edc0::/32
Signature Algorithm: sha256WithRSAEncryption
1e:a7:87:da:2f:7b:52:d7:c8:74:47:eb:8e:74:0d:cc:cb:ec:
72:08:32:ca:19:bf:e7:20:84:1c:88:ad:5f:2e:ed:f1:46:6f:
c5:90:94:2b:53:d6:2e:05:54:18:b0:86:c5:e8:31:45:83:1f:
7f:ca:17:ed:c1:20:84:dd:ea:a4:d9:4d:7a:fb:05:b4:4f:36:
8f:c4:0a:12:5e:e8:d7:b2:b0:65:9e:aa:ab:dc:ce:b8:ee:ae:
7a:c4:aa:90:86:e1:c4:96:75:d1:fe:d6:64:31:c7:c8:27:9b:
9d:7d:63:cc:96:5e:8c:69:a7:7f:d1:c8:23:6c:fa:a6:dc:ba:
fd:a9:ae:62:ee:c2:dc:58:0e:75:30:15:54:05:59:69:27:46:
00:a6:78:88:66:64:3b:dd:51:5b:2d:3e:f5:98:b8:8b:92:a8:
a3:74:25:98:59:7e:c4:a8:2b:5e:bf:67:95:d0:fb:58:d9:b0:
43:4d:36:6c:b1:64:35:75:d7:48:5f:f4:60:ad:ae:01:81:e6:
41:09:a2:83:92:f8:90:87:cc:09:b3:31:a4:65:e3:c6:6f:68:
a1:7d:1b:12:c9:49:5a:3f:30:25:08:c6:00:40:b8:e7:1a:53:
e2:55:7f:e1:79:c6:3b:d8:95:96:a3:2c:7d:4d:a5:f7:8d:55:
6c:71:7b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:49 2026 by rpki-client