
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B94DE26602E311EBAE29B237C4F9AE02.roa
File: B94DE26602E311EBAE29B237C4F9AE02.roa (raw, json)
Hash identifier: 2dMZxf4sxCsXsTxP6Q6ygxkATKtY2CMS0tR4dRVk1mk=
Subject key identifier: 1F:58:27:25:B4:64:9E:FC:F2:E4:A5:A9:7F:BA:B4:05:57:82:E9:5E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F158
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B94DE26602E311EBAE29B237C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:58:39 +0000
ROA not before: Mon 06 Jul 2026 16:58:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137154
IP address blocks: 103.105.232.0/22 maxlen: 24
2401:5160::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61784 (0xf158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:58:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdebf-787c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ec:01:28:93:a2:87:fd:2c:be:44:0d:3f:8e:
00:e8:3a:d7:69:bf:40:58:7a:08:2b:b5:4a:5b:ad:
32:2a:34:a3:cb:ab:18:07:39:6f:01:ff:58:77:75:
70:0a:e0:9c:fd:cb:a2:45:3a:be:98:43:2a:f7:e6:
fd:5a:da:8a:15:e3:18:6c:62:d4:a4:87:27:69:f6:
6d:07:d5:be:7f:ff:f8:19:5f:42:b6:4d:61:8b:cd:
4f:01:53:25:17:b3:e3:86:4d:ea:35:20:f0:3e:fe:
68:6d:45:14:75:53:31:23:de:c7:e8:44:8c:c4:de:
e4:05:9c:25:4f:e4:94:35:73:29:66:6b:bf:27:5f:
06:5f:4a:41:c7:a3:89:df:4f:89:5e:91:34:61:04:
aa:98:8b:2b:bb:19:45:2f:93:93:c5:a9:58:d1:f9:
f4:49:ff:fb:cd:e6:85:42:35:74:9e:8e:53:2c:af:
7e:e6:bb:7e:48:b7:2d:ab:10:53:19:c8:3c:0d:5a:
86:1b:56:9b:2f:43:95:98:4d:4e:eb:02:bd:3f:17:
1c:f2:8b:d8:77:4f:1d:01:60:96:44:c7:cd:f3:11:
a6:21:20:2a:3d:34:a2:81:9e:ea:9b:ff:d2:ca:a4:
79:f7:81:6e:56:8d:14:05:65:18:93:44:83:84:a1:
36:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:58:27:25:B4:64:9E:FC:F2:E4:A5:A9:7F:BA:B4:05:57:82:E9:5E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B94DE26602E311EBAE29B237C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.105.232.0/22
IPv6:
2401:5160::/32
Signature Algorithm: sha256WithRSAEncryption
26:31:15:6f:0c:eb:26:ad:cb:d7:dc:2b:e7:e9:49:2d:47:6d:
ab:29:9e:d9:62:91:b6:32:ff:0d:d7:f0:ce:49:27:a2:e7:f3:
7b:91:02:5a:c6:2a:57:40:12:b8:86:f9:83:85:26:20:85:e6:
55:83:56:f3:e7:47:c4:ba:57:98:72:a1:71:38:08:30:75:d6:
e4:9b:d9:a8:0d:cc:61:4f:fc:02:54:94:a0:72:f9:bc:67:38:
ee:ae:14:6f:41:99:57:1b:c9:59:22:cd:70:b7:2c:ac:73:c6:
60:4b:de:44:79:c6:e7:9e:74:80:30:6e:c9:bd:6e:22:3e:2c:
cf:e6:77:46:be:6e:4b:0f:f3:23:e9:47:ee:61:25:d2:f1:d2:
76:10:67:b5:eb:3d:33:6e:4b:40:c5:05:e2:05:27:fa:72:c6:
29:9f:eb:45:90:5e:ee:28:79:47:54:d8:68:e9:4b:0e:49:b5:
77:2a:b8:54:21:57:31:2a:43:fe:d2:cd:99:3f:73:d8:33:e8:
3e:99:dd:2d:ce:a5:f7:6d:69:1f:df:cc:1c:34:3d:a6:7e:b4:
1b:95:0e:c8:33:b6:48:bb:01:58:48:b3:4d:f8:4a:41:bb:85:
eb:c8:38:4b:e5:b1:56:22:4a:d5:2f:bb:15:0f:cb:13:14:25:
cb:f8:c5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:56:31 2026 by rpki-client