
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA5651D69CFC11EF96B23E48C4F9AE02.roa
File: BA5651D69CFC11EF96B23E48C4F9AE02.roa (raw, json)
Hash identifier: 5rrKN8sYvv+Doji4hwd2nXoJtKRYcc43VLp079I69Ik=
Subject key identifier: E1:44:57:38:FA:3E:73:B7:63:A4:2A:68:DC:72:FF:83:A9:9E:85:6C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F320
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA5651D69CFC11EF96B23E48C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:13:52 +0000
ROA not before: Mon 06 Jul 2026 17:13:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141492
IP address blocks: 103.162.64.0/23 maxlen: 24
2001:df5:e680::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62240 (0xf320)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:13:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be250-688d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:c0:e3:9a:16:3d:22:79:9f:97:32:3d:75:
ad:93:df:2a:c7:e3:c0:99:64:fd:9e:68:0a:66:74:
a7:ee:61:96:ad:f5:63:cd:10:9e:f0:8f:10:3b:ad:
ec:e5:22:c6:a5:d8:e5:f1:fb:b4:fb:de:f0:30:75:
62:83:d1:d9:2e:61:d3:3d:b9:66:b7:55:70:07:f6:
bf:cb:83:ee:4e:52:a5:9c:f2:77:f6:53:a2:d8:9f:
02:b4:00:88:d5:38:3e:4b:22:1e:d1:4f:0d:0d:9e:
8b:93:6c:92:da:f7:99:8d:bf:50:cb:12:23:e3:e6:
08:2a:12:eb:33:20:58:a3:87:11:40:e9:93:54:36:
39:c1:fd:4e:2f:60:5b:26:fa:41:af:e9:43:8d:fd:
a4:d7:73:fe:0b:5d:ad:cc:ea:d0:ad:66:f6:77:24:
ed:da:fd:cb:84:0a:db:b9:34:31:56:69:1e:ae:51:
0a:b7:df:c2:a3:69:12:a4:79:ae:07:6a:10:fd:7c:
d6:e5:ad:49:20:80:b7:d1:40:cc:59:90:a6:d7:ce:
fb:70:42:48:2e:fa:96:6a:62:cb:2a:32:2f:8e:c0:
a8:4c:8b:ea:10:4f:26:e1:ff:6b:d3:15:76:c7:38:
0c:4c:39:ee:de:d1:22:1d:b3:58:fa:96:6f:36:59:
32:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:44:57:38:FA:3E:73:B7:63:A4:2A:68:DC:72:FF:83:A9:9E:85:6C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA5651D69CFC11EF96B23E48C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.162.64.0/23
IPv6:
2001:df5:e680::/48
Signature Algorithm: sha256WithRSAEncryption
90:a9:6f:cf:2e:ea:e1:1c:a4:cb:9c:8a:4e:c5:29:7b:6d:32:
82:51:7a:eb:10:bc:c5:15:a5:66:8c:65:1d:7d:30:54:a3:26:
99:41:b2:de:d5:43:6f:f5:77:a2:b7:44:df:08:cf:f6:ec:6d:
2a:66:1a:cb:ea:8e:5a:f3:14:60:35:94:53:7b:38:87:76:01:
5c:0b:48:1b:c9:59:f2:67:f3:a3:5d:d9:02:61:00:31:ea:bb:
a1:fa:d9:d8:5e:d0:18:b2:f0:63:cf:63:12:2e:4f:02:f0:01:
af:f2:d9:9a:43:0e:be:f8:7b:0d:32:e6:53:8f:e0:f4:32:c4:
f7:c9:91:e1:a0:ae:87:22:71:d1:bf:31:e4:03:37:58:6b:d0:
dd:01:22:99:d3:75:ea:2d:ff:21:df:b4:b0:ea:56:e0:5a:73:
08:1e:eb:3e:49:44:fe:07:88:0f:2d:82:71:de:8e:dd:04:dd:
66:42:da:7c:d7:ce:84:1d:42:75:7b:a8:54:05:b4:c3:20:64:
20:6c:f4:f1:90:1d:0a:bb:82:e4:98:bd:9e:0f:f8:9f:f4:23:
2a:1d:6d:18:3f:2c:9f:c2:cc:22:3c:47:ef:17:32:d3:04:b2:
56:6e:f0:24:cc:f1:2d:9e:3e:1c:4f:8a:eb:dc:e3:0a:bf:bc:
41:69:65:1f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDAPMgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MTM1MloXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmUyNTAtNjg4ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKjGwOOaFj0ieZ+XMj11rZPfKsfjwJlk/Z5oCmZ0p+5hlq31Y80QnvCPEDut
7OUixqXY5fH7tPve8DB1YoPR2S5h0z25ZrdVcAf2v8uD7k5SpZzyd/ZTotifArQA
iNU4PksiHtFPDQ2ei5Nsktr3mY2/UMsSI+PmCCoS6zMgWKOHEUDpk1Q2OcH9Ti9g
Wyb6Qa/pQ439pNdz/gtdrczq0K1m9nck7dr9y4QK27k0MVZpHq5RCrffwqNpEqR5
rgdqEP181uWtSSCAt9FAzFmQptfO+3BCSC76lmpiyyoyL47AqEyL6hBPJuH/a9MV
dsc4DEw57t7RIh2zWPqWbzZZMkUCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBThRFc4
+j5zt2OkKmjccv+DqZ6FbDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JBNTY1MUQ2
OUNGQzExRUY5NkIyM0U0OEM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAWeiQDAPBAIAAjAJAwcAIAEN9eaAMA0GCSqGSIb3DQEBCwUAA4IB
AQCQqW/PLurhHKTLnIpOxSl7bTKCUXrrELzFFaVmjGUdfTBUoyaZQbLe1UNv9Xei
t0TfCM/27G0qZhrL6o5a8xRgNZRTeziHdgFcC0gbyVnyZ/OjXdkCYQAx6ruh+tnY
XtAYsvBjz2MSLk8C8AGv8tmaQw6++HsNMuZTj+D0MsT3yZHhoK6HInHRvzHkAzdY
a9DdASKZ03XqLf8h37Sw6lbgWnMIHus+SUT+B4gPLYJx3o7dBN1mQtp8186EHUJ1
e6hUBbTDIGQgbPTxkB0Ku4LkmL2eD/if9CMqHW0YPyyfwswiPEfvFzLTBLJWbvAk
zPEtnj4cT4rr3OMKv7xBaWUf
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:38:32 2026 by rpki-client