
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AFE4E7C0085F11EB9D109A82C4F9AE02.roa
File: AFE4E7C0085F11EB9D109A82C4F9AE02.roa (raw, json)
Hash identifier: U7o7oNXqZ4n2QwiCWllpe25jKr9g8cGM2FrugRIuxog=
Subject key identifier: 42:F4:AF:9F:40:0A:C3:10:2A:69:2C:54:E8:18:8A:BB:7A:70:25:6B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EF61
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AFE4E7C0085F11EB9D109A82C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:42:21 +0000
ROA not before: Mon 06 Jul 2026 16:42:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134849
IP address blocks: 103.246.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61281 (0xef61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:42:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdaed-89d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b4:f8:33:d3:ce:d6:11:69:47:85:fb:8c:be:
8c:ad:83:8b:b1:9d:3b:4d:c0:ba:2e:ff:51:11:dc:
04:3e:92:89:07:f0:5e:d3:ee:14:0f:84:dd:0f:f8:
6a:7f:45:e8:db:19:06:e2:2f:e0:83:dd:61:8a:bd:
54:19:39:8a:c8:1c:cb:71:ae:ca:d4:8e:7a:c3:fe:
07:c2:05:29:36:61:fc:f3:50:87:97:d3:61:c2:ac:
04:cc:51:5a:37:c0:33:55:4e:ab:ca:64:d7:b7:08:
6d:79:0e:18:ff:db:b6:91:38:f2:9a:4d:94:c7:64:
34:49:75:8a:f5:1e:04:b7:f4:74:d8:ac:49:02:21:
7f:2e:48:8b:a3:77:b9:39:05:db:63:b9:2f:b5:04:
8f:ed:2a:55:d3:52:df:fb:d8:72:b9:aa:6e:4c:18:
e1:02:85:f6:cd:19:aa:4a:71:90:c9:fe:e7:93:db:
1d:2f:72:3e:3e:bf:34:fc:fe:f5:58:ff:fb:dd:c7:
0e:b7:50:e6:ea:db:a5:73:24:be:5e:bb:3f:95:dc:
93:70:26:8e:bd:7c:16:11:73:02:b1:99:7b:3e:51:
0c:51:69:53:52:97:8f:36:db:00:37:a6:49:32:38:
88:55:7d:47:cc:36:ab:82:7b:5b:27:ea:75:80:30:
af:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F4:AF:9F:40:0A:C3:10:2A:69:2C:54:E8:18:8A:BB:7A:70:25:6B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AFE4E7C0085F11EB9D109A82C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.246.187.0/24
Signature Algorithm: sha256WithRSAEncryption
47:e3:b7:95:79:83:65:01:3a:c0:5e:b4:e2:74:13:f9:fd:67:
d7:ab:12:33:16:1e:b8:81:f0:b9:b6:37:92:a2:bd:66:4e:90:
40:19:c0:a4:8b:a8:7d:bc:5b:4e:60:45:4d:53:aa:25:a0:10:
61:8c:ab:e8:c0:5f:37:09:98:32:7c:60:d7:cd:47:1d:ae:32:
aa:64:3e:3f:63:a4:73:69:ec:34:25:6a:d6:31:e3:b7:5d:b4:
eb:3c:79:27:ca:84:01:cd:37:43:22:10:3f:c4:7c:90:5b:9d:
a8:34:11:8e:d1:86:b6:03:16:f6:aa:5c:da:96:35:ce:fc:ab:
1b:3d:a6:05:bc:5e:83:ed:c2:7d:0f:ec:03:a6:a8:f3:d7:97:
af:4c:c4:92:12:c9:f0:17:95:1e:5f:33:f7:e5:da:b0:97:de:
19:1b:9f:2d:99:a0:c8:a0:78:b8:9b:25:7a:dc:37:f5:f0:b9:
9b:79:14:74:dd:26:9a:8d:24:f3:73:24:5f:f4:b7:07:8e:f9:
16:1c:63:b1:29:69:3f:01:b2:e3:6b:2c:0e:27:7a:44:a2:57:
c5:55:79:fd:b7:7b:0d:9d:1d:92:c8:b6:d6:19:2e:ff:77:2f:
a7:88:c0:16:48:8f:21:e8:c8:9f:18:fc:73:60:8a:92:ed:dd:
17:41:eb:55
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAO9hMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2NDIyMVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmRhZWQtODlkNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANG0+DPTztYRaUeF+4y+jK2Di7GdO03Aui7/URHcBD6SiQfwXtPuFA+E3Q/4
an9F6NsZBuIv4IPdYYq9VBk5isgcy3GuytSOesP+B8IFKTZh/PNQh5fTYcKsBMxR
WjfAM1VOq8pk17cIbXkOGP/btpE48ppNlMdkNEl1ivUeBLf0dNisSQIhfy5Ii6N3
uTkF22O5L7UEj+0qVdNS3/vYcrmqbkwY4QKF9s0ZqkpxkMn+55PbHS9yPj6/NPz+
9Vj/+93HDrdQ5urbpXMkvl67P5Xck3Amjr18FhFzArGZez5RDFFpU1KXjzbbADem
STI4iFV9R8w2q4J7WyfqdYAwrwMCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRC9K+f
QArDECppLFToGIq7enAlazAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0FGRTRFN0Mw
MDg1RjExRUI5RDEwOUE4MkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGf2uzANBgkqhkiG9w0BAQsFAAOCAQEAR+O3lXmDZQE6wF604nQT
+f1n16sSMxYeuIHwubY3kqK9Zk6QQBnApIuofbxbTmBFTVOqJaAQYYyr6MBfNwmY
Mnxg181HHa4yqmQ+P2Okc2nsNCVq1jHjt1206zx5J8qEAc03QyIQP8R8kFudqDQR
jtGGtgMW9qpc2pY1zvyrGz2mBbxeg+3CfQ/sA6ao89eXr0zEkhLJ8BeVHl8z9+Xa
sJfeGRufLZmgyKB4uJsletw39fC5m3kUdN0mmo0k83MkX/S3B475FhxjsSlpPwGy
42ssDid6RKJXxVV5/bd7DZ0dksi21hku/3cvp4jAFkiPIejInxj8c2CKku3dF0Hr
VQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:08 2026 by rpki-client