
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BAD74ACAF19811EAA6DC5569C4F9AE02.roa
File: BAD74ACAF19811EAA6DC5569C4F9AE02.roa (raw, json)
Hash identifier: nWqU3tKar74h46QnzQVwJRqbleIGLZp9BGyNU4ygIts=
Subject key identifier: C5:67:50:D6:90:F3:FC:28:62:DE:2C:A2:31:0D:B4:4E:88:B2:60:EC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F1BD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BAD74ACAF19811EAA6DC5569C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:02:07 +0000
ROA not before: Mon 06 Jul 2026 17:02:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138230
IP address blocks: 103.155.74.0/23 maxlen: 24
2001:df1:28c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61885 (0xf1bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:02:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdf8f-3a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:41:82:fa:e6:50:bb:65:78:bc:60:3b:25:
c7:88:df:6b:8c:4b:bc:bc:d4:9c:75:78:ae:2b:13:
33:f4:4b:92:95:48:6d:66:48:bd:29:06:75:9e:34:
8f:63:13:9d:22:55:ef:62:7d:f8:6e:a1:06:41:5d:
6f:77:90:12:d9:5c:a0:dd:98:03:6e:3e:a9:63:1a:
50:a1:75:b5:5e:85:9a:da:97:7f:dd:db:99:b0:5e:
e5:fa:d2:0e:78:b0:f5:e9:43:15:81:2b:b4:97:28:
05:12:f2:76:e6:82:1d:76:e7:4a:03:06:ad:cc:4a:
80:4e:c8:a2:28:29:86:7f:ad:a9:c7:9c:9a:16:89:
d6:c9:80:49:1f:20:bb:1a:43:da:9f:df:6d:83:91:
82:8b:0e:ea:04:9a:1f:0a:44:4d:95:44:66:c5:d8:
46:b8:bf:88:30:a6:16:67:b9:e6:8f:cd:b5:99:cc:
80:88:9b:8a:0c:14:98:3a:3c:94:55:fc:a8:e3:3d:
02:d8:21:4f:43:28:ca:fb:9d:f2:f8:60:90:9f:2c:
d3:5b:05:0b:1d:83:00:8c:1f:3b:56:56:7d:ec:9c:
37:6e:4b:78:70:48:10:e3:bd:4f:0c:01:b3:70:32:
85:77:f1:51:4e:35:26:d4:e0:0f:05:c8:83:7f:61:
45:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:67:50:D6:90:F3:FC:28:62:DE:2C:A2:31:0D:B4:4E:88:B2:60:EC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BAD74ACAF19811EAA6DC5569C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.155.74.0/23
IPv6:
2001:df1:28c0::/48
Signature Algorithm: sha256WithRSAEncryption
45:3c:d8:69:34:2a:b2:96:e1:7e:22:25:8d:23:ce:07:9d:77:
4d:c2:90:7b:08:90:36:ad:c5:02:e7:a3:19:14:9c:a6:8f:30:
84:2f:5a:bf:58:5c:dc:56:c8:aa:c3:aa:1e:8d:80:42:c4:f5:
b7:e3:5b:21:ef:81:b0:b2:b1:66:0e:00:3f:a1:0c:97:a1:31:
79:48:6c:af:9d:72:b1:64:de:c6:14:d1:1f:28:01:52:51:69:
b4:3a:be:84:5d:bb:fd:6e:b8:04:f0:36:2e:6d:2e:5b:62:fb:
48:ac:83:a4:33:3a:23:bc:1c:02:16:2b:06:f9:56:a6:6a:e1:
8e:61:c7:f6:7d:40:71:ca:80:17:d2:a0:50:a3:4a:3d:66:0a:
b9:99:fa:02:93:fc:26:95:43:ee:d5:d0:53:70:df:77:78:e1:
35:2c:b9:52:2a:b0:4a:cd:ca:65:eb:ad:15:b5:c2:26:24:2e:
29:d7:48:ed:36:9c:97:ca:fb:cd:57:21:1d:71:05:ae:c3:9e:
2c:74:70:25:bb:cc:e1:e4:e6:b1:56:c4:13:08:e9:47:e6:cf:
7b:e0:e5:34:50:06:a0:64:01:c6:cc:de:ae:53:cb:08:50:c0:
a5:53:ab:37:f7:6c:ed:48:88:54:6e:c8:8b:1c:82:5a:63:75:
2e:13:77:11
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDAPG9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MDIwN1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmRmOGYtM2E5ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMnlQYL65lC7ZXi8YDslx4jfa4xLvLzUnHV4risTM/RLkpVIbWZIvSkGdZ40
j2MTnSJV72J9+G6hBkFdb3eQEtlcoN2YA24+qWMaUKF1tV6FmtqXf93bmbBe5frS
Dniw9elDFYErtJcoBRLyduaCHXbnSgMGrcxKgE7Ioigphn+tqcecmhaJ1smASR8g
uxpD2p/fbYORgosO6gSaHwpETZVEZsXYRri/iDCmFme55o/NtZnMgIibigwUmDo8
lFX8qOM9AtghT0Moyvud8vhgkJ8s01sFCx2DAIwfO1ZWfeycN25LeHBIEOO9TwwB
s3AyhXfxUU41JtTgDwXIg39hRSMCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBTFZ1DW
kPP8KGLeLKIxDbROiLJg7DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JBRDc0QUNB
RjE5ODExRUFBNkRDNTU2OUM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAWebSjAPBAIAAjAJAwcAIAEN8SjAMA0GCSqGSIb3DQEBCwUAA4IB
AQBFPNhpNCqyluF+IiWNI84HnXdNwpB7CJA2rcUC56MZFJymjzCEL1q/WFzcVsiq
w6oejYBCxPW341sh74GwsrFmDgA/oQyXoTF5SGyvnXKxZN7GFNEfKAFSUWm0Or6E
Xbv9brgE8DYubS5bYvtIrIOkMzojvBwCFisG+VamauGOYcf2fUBxyoAX0qBQo0o9
Zgq5mfoCk/wmlUPu1dBTcN93eOE1LLlSKrBKzcpl660VtcImJC4p10jtNpyXyvvN
VyEdcQWuw54sdHAlu8zh5OaxVsQTCOlH5s974OU0UAagZAHGzN6uU8sIUMClU6s3
92ztSIhUbsiLHIJaY3UuE3cR
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:43:40 2026 by rpki-client