
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AF0E42C6085811EBA9F0A16AC4F9AE02.roa
File: AF0E42C6085811EBA9F0A16AC4F9AE02.roa (raw, json)
Hash identifier: onEQDu0/A35/tvuFl6bECavnqnRwkhB74w5HTa4gYYY=
Subject key identifier: D2:C3:31:9C:3F:A5:6C:AE:C0:89:F8:89:74:DD:A2:40:73:CE:79:FC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EFD9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AF0E42C6085811EBA9F0A16AC4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:46:14 +0000
ROA not before: Mon 06 Jul 2026 16:46:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135234
IP address blocks: 103.66.48.0/22 maxlen: 24
103.171.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61401 (0xefd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:46:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdbd6-1bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:52:bd:98:97:16:de:4f:02:a9:f2:73:9f:46:
5e:57:70:cb:14:ef:0c:74:b2:85:a5:93:0a:78:a4:
f4:4e:50:e4:9c:e7:7f:5c:45:5a:bc:da:bf:5f:38:
c1:14:e3:f3:08:41:01:b3:f8:59:c0:9b:b5:95:fa:
0f:bd:a1:b7:fc:d2:aa:b4:2c:d7:49:82:99:6d:01:
3e:a4:9c:e8:bb:4d:42:cd:73:5b:d4:19:b7:eb:0f:
d3:06:d2:28:b8:24:18:0a:e2:88:ed:d5:c2:d0:d7:
eb:2b:05:e3:47:a5:70:9a:ac:34:fe:9f:09:e7:fc:
00:85:80:72:bf:4f:bf:5a:49:78:97:f5:35:1d:d8:
fd:f2:b7:82:b2:0b:57:12:fb:9d:90:6d:b1:8b:0b:
61:d8:66:54:6a:df:dd:c0:33:f1:77:70:dd:21:e2:
34:dd:5b:eb:83:f7:10:5b:a4:ae:1c:c7:f5:fe:bd:
34:dd:68:69:a1:ce:e6:10:24:bc:2b:8e:a0:31:43:
3e:fa:90:fc:6e:3b:4d:39:1f:d9:2d:f2:7f:3a:6e:
be:0a:0f:25:8b:0d:c6:94:55:84:b2:35:6c:0a:f1:
a4:77:27:9b:3f:a6:27:cc:46:23:ef:70:8e:c7:6b:
8a:89:c4:33:87:97:13:6b:58:fa:51:ec:04:91:80:
b3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C3:31:9C:3F:A5:6C:AE:C0:89:F8:89:74:DD:A2:40:73:CE:79:FC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AF0E42C6085811EBA9F0A16AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.66.48.0/22
103.171.48.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:99:09:cb:68:b4:7f:f1:7c:64:af:01:d1:07:7d:9a:a9:8a:
98:7a:6d:dc:bf:13:61:48:1b:62:55:55:c7:81:5b:73:5d:40:
c6:f6:83:de:06:7d:cd:79:bc:34:9c:4a:25:89:42:ca:1f:8c:
3a:25:b5:f3:aa:76:45:48:fb:be:05:56:e9:63:c9:20:55:2b:
2b:4e:45:47:b8:88:f4:5e:66:4e:d4:bd:e9:07:c8:65:6c:d4:
10:20:48:70:33:ea:e3:78:c0:f9:ea:f2:b1:bf:b4:0e:15:cd:
0a:c2:72:de:27:d4:c9:9c:d3:36:8a:34:b6:c6:9b:4d:1e:23:
af:2d:3b:b0:ee:a8:4d:99:1b:f5:e4:48:40:99:70:45:ff:9d:
b1:2b:1d:50:f4:45:66:fb:bb:9f:74:5e:78:a9:c0:29:e9:71:
79:8c:20:36:5b:e2:fc:ce:25:b9:b0:b8:f9:0c:8b:04:71:04:
e7:dc:68:00:f2:d0:ab:72:25:96:a1:0e:43:95:c2:47:5d:0c:
96:9f:15:3a:79:29:cb:c7:76:b2:0e:b0:2d:62:01:4b:2d:9b:
61:58:e0:34:b2:e3:f8:2f:1f:cd:3e:79:df:97:e6:d7:f0:49:
0c:f3:26:4d:d1:36:62:a9:89:4d:0f:22:23:78:13:1e:24:39:
d7:69:0c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:38 2026 by rpki-client