
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD50AD26F10D11EB8539C448C4F9AE02.roa
File: BD50AD26F10D11EB8539C448C4F9AE02.roa (raw, json)
Hash identifier: 4ALZTlxPp+TXxTSYchJFFzVNv3+vOz20gY9xv49PwIM=
Subject key identifier: B5:FE:33:B9:BB:D0:09:B8:9C:0A:7D:18:65:65:FF:D7:0B:AD:76:7A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F3EE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD50AD26F10D11EB8539C448C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:20:50 +0000
ROA not before: Mon 06 Jul 2026 17:20:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142534
IP address blocks: 103.169.236.0/23 maxlen: 24
2001:df3:8840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62446 (0xf3ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:20:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be3f2-6109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:aa:1d:26:8a:a6:b9:6b:99:bf:ba:7e:ed:0f:
93:67:dd:1e:b2:e7:fa:7f:96:91:5d:8d:2a:f6:d5:
4e:e3:df:ec:1f:b1:79:6c:c2:10:57:a3:c6:3c:ee:
9a:73:8d:9f:61:eb:ae:e1:79:87:c7:30:00:a9:a9:
5c:7a:25:17:5d:06:d6:1b:82:73:be:c3:9f:e1:7d:
c5:cf:76:5c:4e:a9:35:93:5c:18:dc:0e:31:62:4f:
94:84:d7:12:5f:93:9e:36:4a:7e:29:7f:ee:8b:68:
e4:12:60:2c:c9:78:51:27:00:3d:c0:6c:96:42:59:
0f:ce:a0:59:3c:21:a7:c2:e8:e8:42:19:93:8a:38:
41:54:3e:9a:88:0f:44:ab:16:07:8c:2f:fc:e5:63:
91:30:3c:93:0c:29:62:e3:b5:24:14:bf:94:38:71:
49:8f:07:32:64:45:72:92:d4:37:60:49:d6:72:72:
5b:fd:af:95:f9:f1:48:79:56:a0:65:79:48:69:a4:
1d:fe:95:1a:5f:b8:1e:0e:91:c9:e1:c9:e9:19:14:
84:41:3d:b6:fa:44:0e:eb:44:7b:24:37:4c:b5:10:
15:34:69:d0:69:28:29:25:c6:ef:e7:d3:c9:81:5a:
af:c8:76:39:54:86:fc:ac:c7:83:11:86:1a:86:b1:
2e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FE:33:B9:BB:D0:09:B8:9C:0A:7D:18:65:65:FF:D7:0B:AD:76:7A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD50AD26F10D11EB8539C448C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.169.236.0/23
IPv6:
2001:df3:8840::/48
Signature Algorithm: sha256WithRSAEncryption
a5:eb:d6:50:74:68:97:09:67:a9:91:5b:91:97:e7:1d:48:97:
e9:7b:19:e7:b2:88:cf:64:b2:14:fe:d3:17:20:0f:0e:22:f6:
a7:5c:c0:63:1b:34:24:b5:cf:66:a9:ae:c5:54:2d:e2:78:a8:
5e:1c:73:dd:95:c1:ee:94:7d:f1:89:2f:ff:91:e9:74:cb:a9:
db:f7:f0:80:05:af:87:9f:ad:1d:93:b6:c6:b8:ef:df:d5:28:
92:78:40:22:f6:ff:76:32:66:57:b2:7e:c8:61:35:7b:af:b0:
41:87:5d:b1:5a:e4:1f:67:46:cb:17:95:6a:6c:c0:fc:06:04:
4d:ee:bb:c7:b9:54:68:45:79:db:5a:f9:76:37:f2:ee:04:34:
96:50:80:e8:d2:bc:0c:09:49:e5:b4:f4:4c:e2:0c:a4:92:f6:
cf:93:87:20:89:a4:1c:15:f9:18:f8:00:bf:9f:ce:95:c9:d8:
d5:3f:3e:21:95:d9:e5:15:63:65:97:8e:00:2d:72:91:5d:70:
0f:e6:e4:8b:db:f3:ca:cd:50:7b:6c:dd:47:64:16:db:93:b6:
93:a0:f1:61:48:54:35:2f:56:d2:60:ee:2a:e0:a9:29:3f:b7:
0f:06:4e:77:e0:87:3b:d8:e3:1f:31:81:09:4a:e7:70:df:e4:
72:b6:50:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:33 2026 by rpki-client