
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B85D1EBCABBD11EF88BA807AC4F9AE02.roa
File: B85D1EBCABBD11EF88BA807AC4F9AE02.roa (raw, json)
Hash identifier: CUGjIH8LmDtRd50lrp46J4Kz4jFmGcNBXPIdrfl3hME=
Subject key identifier: DF:21:22:A4:1B:41:38:18:66:A7:59:C7:D9:86:1D:E0:A6:43:03:54
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F24D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B85D1EBCABBD11EF88BA807AC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:06:43 +0000
ROA not before: Mon 06 Jul 2026 17:06:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139501
IP address blocks: 103.145.167.0/24 maxlen: 24
139.5.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62029 (0xf24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:06:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be0a3-a276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:99:c3:c0:38:49:b2:11:d9:ad:7f:5c:83:98:
b0:77:a7:fd:26:23:7c:01:7b:5f:3b:19:86:7c:52:
ca:f7:d6:81:6f:58:1e:0d:53:a7:b3:5a:5c:54:e4:
bf:84:9d:55:e3:e5:d1:f6:8c:e9:1e:8d:96:84:9a:
3d:cc:9c:cf:9e:90:52:d0:97:ee:c2:60:08:a5:7e:
0f:bf:37:23:d9:47:90:0c:08:d0:07:68:08:33:83:
75:0e:7f:f6:41:dc:e4:29:cc:ee:d6:83:e3:71:76:
ca:a6:d6:cc:8e:c1:5f:cb:ac:b2:e7:10:db:a6:a3:
8d:12:d0:a7:66:dd:6e:9b:60:20:09:24:62:a9:86:
29:59:dc:f6:91:e1:a0:d8:8f:92:16:2b:cb:19:68:
31:57:b2:11:46:0f:86:fb:c4:25:98:16:9f:99:22:
d0:50:e5:c3:f7:8d:0d:87:6a:e5:f2:74:81:17:61:
c4:8a:24:1f:3e:8c:c8:b6:ee:06:14:b8:ea:1f:3f:
46:a2:0b:44:29:4f:47:6c:78:93:14:3b:d3:bf:58:
38:6e:d5:50:59:b0:bc:b5:8b:fa:63:73:5b:49:ce:
ed:27:de:7c:ca:5f:19:7d:39:b2:46:4c:ee:4f:b0:
c0:fe:83:f1:bb:a2:ff:f2:4d:18:bc:bb:ec:db:18:
57:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:21:22:A4:1B:41:38:18:66:A7:59:C7:D9:86:1D:E0:A6:43:03:54
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B85D1EBCABBD11EF88BA807AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.145.167.0/24
139.5.64.0/24
Signature Algorithm: sha256WithRSAEncryption
47:43:42:64:3b:3f:9e:1c:c2:75:8d:98:3e:28:c8:a3:90:12:
5c:df:c4:25:64:13:44:0b:9c:e8:78:53:9c:85:b0:0c:3b:60:
04:23:87:27:02:ff:c8:46:25:93:33:f4:c7:be:1e:8c:1f:76:
a7:40:03:e5:68:9f:1c:f9:2f:11:80:47:d3:15:f0:f6:86:53:
06:3d:6a:75:88:4b:65:bf:bf:6f:d0:46:87:3a:7e:e2:16:5e:
d2:71:59:05:f0:68:0c:0d:5c:06:45:ce:85:09:f0:f8:2e:84:
07:8f:03:66:90:cb:f8:df:94:8c:70:e3:db:68:73:00:41:4f:
bf:7c:4e:27:8c:01:ed:a5:ab:5f:c8:10:38:a2:e6:87:b0:4a:
7e:64:48:95:b5:ba:81:26:0d:ab:53:a4:8c:06:9a:e7:ed:00:
f9:95:d9:95:52:75:b2:27:ba:da:4c:a7:73:b7:af:90:9e:79:
f6:d8:a1:06:a3:74:b2:a2:a0:ad:a7:f8:09:0e:e3:fb:1e:71:
88:f5:0a:7b:1c:a6:f6:fb:35:25:5e:55:b8:9d:2d:58:2f:d5:
81:80:bf:8b:9b:42:0b:3b:f0:ca:95:a7:dd:c8:58:da:05:91:
0e:5f:0b:fb:e7:fe:58:88:22:aa:f2:50:1d:81:4c:78:e6:7f:
e1:cf:d0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:46:56 2026 by rpki-client