
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B14AC6DC300011ED8903E22EC4F9AE02.roa
File: B14AC6DC300011ED8903E22EC4F9AE02.roa (raw, json)
Hash identifier: DTuSnEpGgyJ1TeEx9OLlH/2wMGbMfqCKKQ7lIFB4P7w=
Subject key identifier: F8:6D:E9:8F:96:4B:27:2C:C2:F0:08:7F:83:AC:87:A1:B0:1E:40:64
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F4F1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B14AC6DC300011ED8903E22EC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:29:22 +0000
ROA not before: Mon 06 Jul 2026 17:29:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149573
IP address blocks: 103.131.24.0/23 maxlen: 24
103.131.26.0/24 maxlen: 24
103.183.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:24:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62705 (0xf4f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:29:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be5f1-e9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:be:87:44:9d:fe:1a:64:5f:7a:be:b7:e8:7c:
5e:13:4c:32:24:5a:6a:4d:b9:21:5a:be:73:99:1b:
0b:0c:13:33:c2:24:29:4b:c4:77:09:c9:a7:6e:0d:
db:5f:5d:0b:28:5e:3a:e9:52:7c:f2:67:d1:97:6c:
87:1a:ec:a3:c1:50:04:36:ba:20:2f:d5:a1:93:89:
27:d8:72:ed:9d:28:36:56:a8:13:75:79:ed:2a:f5:
0e:4e:1a:b2:d0:de:52:a5:78:ef:1b:a4:93:5f:b5:
8e:0b:09:d2:f8:f4:b7:bb:9c:5f:cc:ef:69:5b:d0:
92:0e:77:39:a5:b7:7d:bc:6b:07:fe:6c:d8:27:b3:
5a:31:88:4e:68:a9:ed:f0:6c:a0:d8:76:62:ba:a4:
54:0b:8f:7b:e8:bc:bc:36:94:ff:82:d3:fd:25:e5:
ba:33:dd:54:be:9c:41:fc:5a:80:d5:94:e7:f0:4b:
cc:41:99:95:13:b8:5f:f7:42:8c:78:fb:9f:d2:8c:
64:a8:8b:0f:73:49:a6:07:2d:6a:35:25:bd:60:fb:
2f:da:e3:25:c7:fe:41:78:51:d6:14:2f:86:dd:1a:
dd:68:da:c1:b6:39:2f:3b:29:7c:34:08:76:fa:e1:
16:5f:11:08:5d:6b:7e:bd:70:a1:c5:33:61:5c:2f:
a7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6D:E9:8F:96:4B:27:2C:C2:F0:08:7F:83:AC:87:A1:B0:1E:40:64
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B14AC6DC300011ED8903E22EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.131.24.0-103.131.26.255
103.183.156.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:7c:e5:ee:9f:94:8e:eb:7e:55:c7:d2:dc:4f:ae:be:38:68:
67:6d:3d:d3:bf:05:72:28:0d:78:95:0c:2b:3d:f0:2a:7a:6d:
ff:4c:9d:db:83:37:75:5d:35:85:8b:85:5f:25:08:21:fd:a0:
39:ec:d5:04:d9:5c:97:ca:eb:bc:f9:6b:03:a1:ae:7f:10:8d:
bf:73:25:72:da:c6:17:ab:c5:b3:dd:dd:7c:34:86:c4:ea:56:
48:73:9f:35:56:80:d9:9a:19:c9:fe:f6:e9:dd:11:47:c1:43:
28:af:1f:29:fc:a7:e1:65:c1:8c:3a:5a:34:6e:eb:e0:bd:cc:
77:53:27:36:c6:2a:6f:16:d0:8a:c6:de:46:de:34:1b:b4:31:
d4:bd:48:69:9b:ad:11:2c:c2:bd:ea:fe:92:fe:83:d2:d6:af:
60:56:86:5b:6e:ed:60:e7:4a:ec:ee:cc:7b:e9:7e:ff:21:d9:
f5:8d:43:e0:09:6e:e9:52:8e:fc:4b:de:6a:2f:84:dd:a6:08:
36:69:a5:08:40:49:22:5c:6b:3c:07:f9:06:61:d0:f1:2f:3a:
6a:a2:95:1b:b0:84:88:4a:76:1e:c4:4f:88:38:99:83:5b:2b:
02:74:38:dc:16:cd:2d:79:11:48:fe:d2:80:44:f7:e2:c8:0a:
e9:d3:28:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:36:10 2026 by rpki-client